๐ณ๐ฑ
homeshowdomain.nl
2026-10-01 21:59:13
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-30.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-30 02:40:33
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.60.66.33 (33.66.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.60.66.33 (33.66.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:40:30.138877 2026] [security2:error] [pid 16782:tid 16782] [client 34.60.66.33:44334] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jwilder.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jwilder.com"] [uri "/z9x8c7v6b5-debug-trigger-jwilder.com"] [unique_id "arx2nvd3pZRfe-69xTojbAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-30 01:05:54
(5 days ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
๐จ๐ฆ
Anytech
2026-09-30 00:53:42
(5 days ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-29 20:38:05
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.60.66.33 (33.66.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.60.66.33 (33.66.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:37:57.225605 2026] [security2:error] [pid 29249:tid 29249] [client 34.60.66.33:39152] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||chat.97201.com|F|2"] [data ".97201.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "chat.97201.com"] [uri "/z9x8c7v6b5-debug-trigger-chat.97201.com"] [unique_id "arwhpd4BB70ZuORbqbJ49AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-29 20:35:02
(5 days ago)
suspicious request in access.log
Web App Attack
Anonymous
2026-09-29 19:00:06
(5 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-09-29 18:52:01
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.60.66.33 (33.66.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.60.66.33 (33.66.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:51:57.102165 2026] [security2:error] [pid 27234:tid 27234] [client 34.60.66.33:42880] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kalvannastudios.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kalvannastudios.com"] [uri "/z9x8c7v6b5-debug-trigger-kalvannastudios.com"] [unique_id "arwIzc9uddh52fN0BKbeAwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-29 18:45:04
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 18:28:07
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.60.66.33 (33.66.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.60.66.33 (33.66.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:28:01.525074 2026] [security2:error] [pid 31554:tid 31554] [client 34.60.66.33:51170] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||k4uu.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "k4uu.com"] [uri "/z9x8c7v6b5-debug-trigger-k4uu.com"] [unique_id "arwDMVFW4_zPx0fKqTGFSQAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-29 18:00:33
(5 days ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-29 17:29:11
(5 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ณ๐ฑ
Savvii
2026-09-29 17:07:31
(5 days ago)
20 attempts against mh-misbehave-ban on pf102962
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-09-29 17:01:28
(5 days ago)
Login credentials theft attempt
Hacking