๐ช๐ธ
alferez
2026-07-22 00:26:18
(3 hours ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
๐บ๐ธ
MatCat
2026-07-22 00:05:21
(3 hours ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
Anonymous
2026-07-22 00:05:10
(3 hours ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
Anonymous
2026-07-21 23:43:57
(4 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-07-21 22:48:54
(5 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 18:48:51.145064 2026] [security2:error] [pid 21905:tid 21905] [client 34.32.219.79:47094] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||manage.pbeyer.org|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "manage.pbeyer.org"] [uri "/rclone.conf"] [unique_id "al_3U-ysSIO7WHngpxnliQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Oakley
2026-07-21 22:42:32
(5 hours ago)
(confirmed_bot_sig) Confirmed bot
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-21 21:38:44
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 17:38:40.205742 2026] [security2:error] [pid 450027:tid 450027] [client 34.32.219.79:54244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mykelmilur.com"] [uri "/.git/config"] [unique_id "al_m4FN2qoV9FTT2_fTRaAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 19:54:37
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 15:54:33.427296 2026] [security2:error] [pid 3311092:tid 3311092] [client 34.32.219.79:33770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "panel.97201.com"] [uri "/.git/config"] [unique_id "al_OeZwUVo3d7jDSmEXUVwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 19:06:11
(8 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 15:06:06.088484 2026] [security2:error] [pid 9647:tid 9671] [client 34.32.219.79:55068] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||console.priyom.us|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "console.priyom.us"] [uri "/rclone.conf"] [unique_id "al_DHj2rrJFe_tFzrIrJ6wAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-07-21 19:00:05
(8 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 18:09:22
(9 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.32.219.79 (79.219.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 14:09:14.947346 2026] [security2:error] [pid 26487:tid 26487] [client 34.32.219.79:45380] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||portal.markgiffin.com|F|2"] [data ".markgiffin.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "portal.markgiffin.com"] [uri "/z9x8c7v6b5-debug-trigger-portal.markgiffin.com"] [unique_id "al-1yk0dBnLJcufZrkZrdAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-21 17:58:58
(9 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-07-21 17:53:43
(10 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Catalin Negru
2026-07-21 17:50:27
(10 hours ago)
2026-07-21 20:50:26,127 fail2ban.actions [890352]: NOTICE [apache-scan] Ban 34.32.219.79
202 ...
show more
2026-07-21 20:50:26,127 fail2ban.actions [890352]: NOTICE [apache-scan] Ban 34.32.219.79
2026-07-21 20:50:26,268 fail2ban.actions [890352]: NOTICE [apache-security] Ban 34.32.219.79
2026-07-21 20:50:26,491 fail2ban.actions [890352]: NOTICE [web-scanner] Ban 34.32.219.79
2026-07-21 20:50:26,497 fail2ban.actions [890352]: NOTICE [laravel-auth] Ban 34.32.219.79
2026-07-21 20:50:26,818 fail2ban.actions [890352]: NOTICE [apache-dirscan] Ban 34.32.219.79
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-07-21 17:45:18
(10 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack