π³π±
Site.eu
2026-10-17 03:58:35
(4 days ago)
Excessive multi-domain requests
Brute-Force
π²π½
octageeks.com
2026-10-15 04:12:59
(6 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-14 20:45:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:45:45.488252 2026] [security2:error] [pid 9713:tid 9713] [client 34.187.198.190:52214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cameronbenefits.com"] [uri "/@fs/.env"] [unique_id "as_p-Qh63swmEWCU5h04HgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΏπ¦
conure.sh
2026-10-14 20:01:01
(1 week ago)
csagent: score 22.7: 404 noise floor x51, secrets grab x1; 1 domain(s) in 2s
Web App Attack
π¬π§
WebNiraj
2026-10-14 19:15:04
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 34.187.198.190 (US/United States/190.198.187.34 ...
show more
(mod_security) mod_security (id:949110) triggered by 34.187.198.190 (US/United States/190.198.187.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
π§πΎ
lns.bz
2026-10-14 18:31:26
(1 week ago)
Too many 404 requests [BY]
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-14 18:13:20
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:13:13.084649 2026] [security2:error] [pid 17964:tid 18039] [client 34.187.198.190:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.billgiegold.com|F|2"] [data ".billgiegold.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.billgiegold.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.billgiegold.com"] [unique_id "as_GOUBCaBB_uQivyTKdSQAAAcg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-14 17:51:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 13:51:50.184870 2026] [security2:error] [pid 31519:tid 31519] [client 34.187.198.190:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.bradleybarefoot.com"] [uri "/assets../.env"] [unique_id "as_BNkp2a42KKWxA_wUbuAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Alboweb B.V.
2026-10-14 15:11:03
(1 week ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
π·π΄
clauss
2026-10-14 14:21:46
(1 week ago)
34.187.198.190 - - [14/Oct/2026:17:21:46 +0300] "GET /secrets.yml HTTP/2.0" 403 146 "-" "Mozilla/5.0 ...
show more
34.187.198.190 - - [14/Oct/2026:17:21:46 +0300] "GET /secrets.yml HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.187.198.190 - - [14/Oct/2026:17:21:46 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 401 10375 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
...
show less
Web App Attack
πͺπΈ
masterguru
2026-10-14 13:56:06
(1 week ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
πΊπΈ
TPI-Abuse
2026-10-14 12:45:12
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:45:06.379237 2026] [security2:error] [pid 11409:tid 11409] [client 34.187.198.190:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.antitribu.com|F|2"] [data ".antitribu.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.antitribu.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.antitribu.com"] [unique_id "as95UtDcFQN-7FbwYBIldwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΏπ¦
conure.sh
2026-10-14 12:21:19
(1 week ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-14 12:10:01
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.198.190 (190.198.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:09:53.582565 2026] [security2:error] [pid 6959:tid 6959] [client 34.187.198.190:60678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.allisonokon.com"] [uri "/media../.env"] [unique_id "as9xEZlDmv1VD5r-hUnoLAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π²πΎ
Rizzy
2026-10-14 11:56:53
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack