🇺🇸
TPI-Abuse
2026-11-02 15:25:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.6.88.28 (28.88.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:25:13.932470 2026] [security2:error] [pid 7842:tid 7842] [ ...
show more
(mod_security) mod_security (id:210730) triggered by 34.6.88.28 (28.88.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:25:13.932470 2026] [security2:error] [pid 7842:tid 7842] [client 34.6.88.28:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||antitribu.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "antitribu.com"] [uri "/z9x8c7v6b5-debug-trigger-antitribu.com"] [unique_id "auirWZCBFM5y5jbj4BAU6wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 14:20:05
UTC ·
(1 week ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇿🇦
conure.sh
2026-11-02 12:52:30
UTC ·
(1 week ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 11s
Web App Attack
🇺🇸
oralunal
2026-11-02 12:43:43
UTC ·
(1 week ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
2026-11-02 12:24:49
UTC ·
(1 week ago)
Aggressive web scan
Web App Attack
🇪🇸
pipeline.es
2026-11-02 12:16:27
UTC ·
(1 week ago)
Web scanning / probing for vulnerable paths | URL: /fly.toml | Evidence: agilityturismo.com.br 34.6.88.28 - - [02/Nov/2026:13:14:22 +0100] \"GET /fly.toml HTTP/2.0\" 404 19620 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Per ...
show more
Web scanning / probing for vulnerable paths | URL: /fly.toml | Evidence: agilityturismo.com.br 34.6.88.28 - - [02/Nov/2026:13:14:22 +0100] \"GET /fly.toml HTTP/2.0\" 404 19620 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)\" GEOIP_COUNTRY_CODE=NL 21886 | ASN: GOOGLE-CLOUD-PLATFORM | Country: NL
show less
Port Scan
Web App Attack
🇲🇾
Rizzy
2026-11-02 11:21:38
UTC ·
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:19:20
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.6.88.28 (28.88.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:19:17.154337 2026] [security2:error] [pid 7916:tid 7916] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.88.28 (28.88.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:19:17.154337 2026] [security2:error] [pid 7916:tid 7916] [client 34.6.88.28:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.area52designs.com"] [uri "/.env.staging.local"] [unique_id "auhxtfb7t_v6d5SjBaT0IwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 10:57:28
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.6.88.28 (28.88.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:57:22.362084 2026] [security2:error] [pid 9033:tid 9033] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.88.28 (28.88.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:57:22.362084 2026] [security2:error] [pid 9033:tid 9033] [client 34.6.88.28:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.365soft.top"] [uri "/.env.config"] [unique_id "auhskgw9-BznITFamEhxlQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
Host One
2026-11-02 10:33:53
UTC ·
(1 week ago)
Attack blocked by firewall: hosting control panel login brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 2083, 2087 (cPanel/WHM). Automated report.
Brute-Force
Web App Attack
2026-11-02 10:27:52
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇨🇭
4server
2026-11-02 09:21:55
UTC ·
(1 week ago)
[MonNov0210:21:52.4686742026][security2:error][pid36617:tid36712][client34.6.88.28:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][ms ...
show more
[MonNov0210:21:52.4686742026][security2:error][pid36617:tid36712][client34.6.88.28:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"webmail.aid-web.ch\"][uri\"/.env.supabase\"][unique_id\"auhWMIQK56RtGMG1oIxCAgAAAQk\"]
show less
Hacking
Web App Attack
🇮🇩
Burayot
2026-11-02 09:03:07
UTC ·
(1 week ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.6.88.28 (NL/The Netherlands/28.88.6.34.bc.googleusercontent.com): 2 in the last 3600 secs
Web App Attack
🇺🇸
welm
2026-11-02 08:38:50
UTC ·
(1 week ago)
34.6.88.28 (NL/The Netherlands/28.88.6.34.bc.googleusercontent.com), more than 100 Apache 403 hits in the last 3600 secs; Ports: 80,443; Direction: in; Trigger: LF_APACHE_403; Logs:
Port Scan
🇿🇦
conure.sh
2026-11-02 08:33:00
UTC ·
(1 week ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 4s
Web App Attack
