π³π±
Site.eu
2026-10-02 00:27:45
(1 week ago)
Excessive multi-domain requests
Brute-Force
πΊπΈ
TPI-Abuse
2026-10-01 17:13:47
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:13:43.571042 2026] [security2:error] [pid 10272:tid 10272] [client 34.181.241.189:37654] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dance4ovations.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dance4ovations.com"] [uri "/z9x8c7v6b5-debug-trigger-dance4ovations.com"] [unique_id "ar6UxyPPYJ3S4k1nw3cujQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-01 16:40:19
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:40:13.694757 2026] [security2:error] [pid 14316:tid 14316] [client 34.181.241.189:50796] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||digitalracemedia.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digitalracemedia.com"] [uri "/z9x8c7v6b5-debug-trigger-digitalracemedia.com"] [unique_id "ar6M7fwjrad_PFDGXfpDSgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-01 15:50:34
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 11:50:27.219625 2026] [security2:error] [pid 31186:tid 31186] [client 34.181.241.189:37142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sfsdesignsproductions.com"] [uri "/wp-config.php.old"] [unique_id "ar6BQ405DylJeicpu1FJCgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-01 15:05:45
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
πΊπΈ
TPI-Abuse
2026-10-01 14:54:30
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 10:54:24.492584 2026] [security2:error] [pid 22885:tid 22885] [client 34.181.241.189:51200] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.postseason.michaelpmcgrath.com|F|2"] [data ".postseason.michaelpmcgrath.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.postseason.michaelpmcgrath.com"] [uri "/z9x8c7v6b5-debug-trigger-www.postseason.michaelpmcgrath.com"] [unique_id "ar50INfqmGEuxh-dTWa7cQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
bohl-aiG5aef
2026-10-01 14:50:17
(1 week ago)
Suricata Alert [SID:2011465] ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-01 14:19:34
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 10:19:29.655400 2026] [security2:error] [pid 22925:tid 22925] [client 34.181.241.189:43592] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.player-care.player-care.com|F|2"] [data ".player-care.player-care.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.player-care.player-care.com"] [uri "/z9x8c7v6b5-debug-trigger-www.player-care.player-care.com"] [unique_id "ar5r8fs1nQZF2lxeExmXQQAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
rh24
2026-10-01 12:45:40
(1 week ago)
(badbots) Bad bot user-agent [redacted] from 34.181.241.189 (US/United States/189.241.181.34.bc.goog ...
show more
(badbots) Bad bot user-agent [redacted] from 34.181.241.189 (US/United States/189.241.181.34.bc.googleusercontent.com)
show less
Hacking
Anonymous
2026-10-01 10:31:51
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
π³π±
Savvii
2026-10-01 10:11:58
(1 week ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
updown.io
2026-10-01 10:11:22
(1 week ago)
{"level":"info","ts":1790849476.2957544,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1790849476.2957544,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.181.241.189","remote_port":"35050","client_ip":"34.181.241.189","proto":"HTTP/2.0","method":"GET","host":"status.plusreed.com","uri":"/.ssh/id_ed25519","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"],"Accept":["*/*"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.plusreed.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000930405,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}}
{"level":"info","ts
...
show less
DDoS Attack
Web App Attack
Anonymous
2026-10-01 10:10:05
(1 week ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
π³π±
i-turnradio.nl
2026-10-01 09:50:33
(1 week ago)
2026-10-01 @ 11:50:16 (CET) ~ Blocked for trying to access: /lib/terminal-xhr.php
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-01 09:15:16
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.181.241.189 (189.241.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 05:15:13.038917 2026] [security2:error] [pid 30298:tid 30363] [client 34.181.241.189:39758] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.playerintro.beckmon.com|F|2"] [data ".playerintro.beckmon.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.playerintro.beckmon.com"] [uri "/z9x8c7v6b5-debug-trigger-www.playerintro.beckmon.com"] [unique_id "ar4koQ4ksmDpb5pipnkevgAAAJc"]
show less
Brute-Force
Bad Web Bot
Web App Attack