|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted])
|
SQL Injection
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:47:43.237804 2026] [security2:error] [pid 14020:tid 1402 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:47:43.237804 2026] [security2:error] [pid 14020:tid 14020] [client 34.72.0.221:36294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.constructiondomex.com"] [uri "/files../.env"] [unique_id "auj27_09BxSDjDXqOVylTQAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:44:33.801653 2026] [security2:error] [pid 9209:tid 9209] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:44:33.801653 2026] [security2:error] [pid 9209:tid 9209] [client 34.72.0.221:43798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.elcalamo.com"] [uri "/.env.supabase"] [unique_id "aui98WgN1_ag9ggtqC9S2gAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Excessive crawling/scraping. Vulnerable file probing.
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇺🇸
peaceharbor
|
|
Swatter: score=90 intel=abuseipdb:confidence37(37) rule=critical_badpath recidivism=4/30d crit-single
|
Web App Attack
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 03:35:33.355767 2026] [security2:error] [pid 6680:tid 6680] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 03:35:33.355767 2026] [security2:error] [pid 6680:tid 6680] [client 34.72.0.221:33354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.connectigramme.com"] [uri "/images../.env"] [unique_id "auhLVTKD92V3Y4XPtz9-HgAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:23:01.001396 2026] [security2:error] [pid 8621:tid 8802] ...
show more
(mod_security) mod_security (id:210730) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:23:01.001396 2026] [security2:error] [pid 8621:tid 8802] [client 34.72.0.221:37530] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.coloradomountaineer.com|F|2"] [data ".coloradomountaineer.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.coloradomountaineer.com"] [uri "/z9x8c7v6b5-debug-trigger-www.coloradomountaineer.com"] [unique_id "aufX5MxR_nvG4dkIVAmU_gAAAQ0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇪🇸
masterguru
|
|
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
|
Bad Web Bot
|
|
🇫🇷
ELYAZ
|
|
(y3) Failed access -byebye- from 34.72.0.221 (US/United States/221.0.72.34.bc.googleusercontent.com): (CF_ENABLE)
|
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:15:40.105844 2026] [security2:error] [pid 4823:tid 4823] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.72.0.221 (221.0.72.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:15:40.105844 2026] [security2:error] [pid 4823:tid 4823] [client 34.72.0.221:58116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.donnrowe.com"] [uri "/.env.supabase"] [unique_id "aued7DeM2r9gr5GwVhG01QAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
SSH-Admin
|
|
Probing for Exploits on ns200
|
Exploited Host
Web App Attack
|
|
🇨🇦
SSH-Admin
|
|
Probing for Exploits on ns74
|
Exploited Host
Web App Attack
|
|
🇩🇪
cloudmax
|
|
Cloudmax Protect [BOT BLOCK] - Suspicious User-Agent. Possible resource abuse, excessive requests, or hacking attempt
|
Bad Web Bot
|
|
🇪🇸
masterguru
|
|
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
|
Hacking
|
