2026-06-13 16:57:00
(48 seconds ago)
Exceeded the maximum global requests per minute for crawlers or humans.
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 16:44:27
(13 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.65.83.127 (127.83.65.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.65.83.127 (127.83.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:44:23.083910 2026] [security2:error] [pid 3059:tid 3059] [client 34.65.83.127:56722] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||asbechiro.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "asbechiro.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai2I53PbaziFKVUyeNrw9wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-13 15:43:45
(1 hour ago)
''
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 13:01:16
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.65.83.127 (127.83.65.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.65.83.127 (127.83.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 09:01:10.141363 2026] [security2:error] [pid 24077:tid 24077] [client 34.65.83.127:43134] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alfadventurecenter.org|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alfadventurecenter.org"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai1UlnJS3_TmpoYExNuyBgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-13 10:52:17
(6 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.65.83.127 (CH/Switzerland/127.83.6 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.65.83.127 (CH/Switzerland/127.83.65.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇩🇪
raph
2026-06-13 10:16:29
(6 hours ago)
[PROTECTED PATHS] crawler credentials.ini, aws.ini, aws.yml, etc.
Bad Web Bot
Web App Attack
🇳🇱
GabrielJST
2026-06-13 09:39:39
(7 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.65.83.127 (CH/Switzerland/127.83.65. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.65.83.127 (CH/Switzerland/127.83.65.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-06-13 09:24:25
(7 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.65.83.127 (127.83.65.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.65.83.127 (127.83.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:24:19.756309 2026] [security2:error] [pid 26757:tid 26771] [client 34.65.83.127:55890] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||grupojdg.neotienda.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grupojdg.neotienda.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai0hw5Qe1ETyqhl9vWcF_AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-13 08:08:49
(8 hours ago)
Scanning/Probing (61)
Request Overload (393)
Brute-Force
Web App Attack
🇫🇷
Octopuce
2026-06-13 07:43:24
(9 hours ago)
Aggressive web search of vulnerable pages: /docker-compose.production.yml /backend/docker-compose.pr ...
show more
Aggressive web search of vulnerable pages: /docker-compose.production.yml /backend/docker-compose.prod.yml /app/docker-compose.yml /secrets/cre ...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 06:15:07
(10 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.65.83.127 (127.83.65.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.65.83.127 (127.83.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:15:02.952015 2026] [security2:error] [pid 27990:tid 27990] [client 34.65.83.127:49726] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.casinoaffiliateprogramsonline.com.crazycoin.net|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.casinoaffiliateprogramsonline.com.crazycoin.net"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiz1ZpTybVUOXJBApLRZ_gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-13 05:35:03
(11 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇳🇴
jad@
2026-06-13 04:52:15
(12 hours ago)
ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: actuator, aw ...
show more
ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: actuator, aws_creds, env_probe, config_backup, ssh_keys. Observed by 1 sensor(s); 381 hits.
show less
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-06-13 04:33:56
(12 hours ago)
Try to access /.aws/credentials
Web App Attack
🇮🇹
clamehost.it
2026-06-13 04:08:01
(12 hours ago)
Automatic report - Brute Force attack using this IP address
Brute-Force