๐บ๐ธ
TPI-Abuse
2026-09-20 15:11:50
(11 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:11:44.516392 2026] [security2:error] [pid 553:tid 553] [client 34.77.253.60:58354] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bloomandfleur.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bloomandfleur.com"] [uri "/ssl/localhost.key"] [unique_id "aq_3sA5flzQT8IIUo3VatQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 14:44:54
(11 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:44:49.950836 2026] [security2:error] [pid 32748:tid 32748] [client 34.77.253.60:48342] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||blockadefoundationrepair.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "blockadefoundationrepair.com"] [uri "/localhost.key"] [unique_id "aq_xYZGP4rDANCimewlc9AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
robotstxt
2026-09-20 14:22:05
(11 hours ago)
34.77.253.60 - - [20/Sep/2026:14:21:04 +0000] "GET /.aws/config HTTP/2.0" 403 36280 "-" "Mozilla/5.0 ...
show more
34.77.253.60 - - [20/Sep/2026:14:21:04 +0000] "GET /.aws/config HTTP/2.0" 403 36280 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" "34.77.253.60" edge="104.23.225.15"
34.77.253.60 - - [20/Sep/2026:14:21:04 +0000] "GET /.env.production HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "34.77.253.60" edge="104.23.225.15"
34.77.253.60 - - [20/Sep/2026:14:21:04 +0000] "GET /.zshrc HTTP/2.0" 403 2 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" "34.77.253.60" edge="104.23.225.15"
34.77.253.60 - - [20/Sep/2026:14:21:04 +0000] "GET /.git-credentials HTTP/2.0" 403 2 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "34.77.253.60" edge="104.23.225.15"
34.77.253.60 - - [20/Sep/2026:14:21:05 +0000] "GET /.gitconfig HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible;
...
show less
Web App Attack
๐ฎ๐น
VHosting
2026-09-20 14:15:04
(12 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-09-20 14:07:07
(12 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ธ๐ช
vaia.cloud
2026-09-20 14:00:02
(12 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 13:48:41
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:48:34.251010 2026] [security2:error] [pid 14994:tid 14994] [client 34.77.253.60:39744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blanchebb.com"] [uri "/.git/config"] [unique_id "aq_kMlVuncALjy-CxGuUywAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-20 13:40:06
(12 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 13:33:34
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:33:26.503676 2026] [security2:error] [pid 21983:tid 21983] [client 34.77.253.60:37192] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||blacktvnow.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "blacktvnow.com"] [uri "/z9x8c7v6b5-debug-trigger-blacktvnow.com"] [unique_id "aq_gpo8jB3TYMveEmwSyHwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 13:13:11
(13 hours ago)
(mod_security) mod_security (id:210580) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210580) triggered by 34.77.253.60 (60.253.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:13:03.409671 2026] [security2:error] [pid 4596:tid 4596] [client 34.77.253.60:43682] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||blackjobsnetwork.com|F|2"] [data "Matched Data: proc/self/environ found within ARGS:path: ../../../../proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "blackjobsnetwork.com"] [uri "/userfiles"] [unique_id "aq_b31mH-oOYszz_1nqxkwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-20 13:11:49
(13 hours ago)
Bot detected scanning for vulnerable pages
Port Scan
๐ซ๐ฎ
albionfreemarket.com
2026-09-20 12:00:28
(14 hours ago)
34.77.253.60 - - [20/Sep/2026:12:00:27 +0000] "POST /graphql HTTP/2.0" 403 555 "https://albionfreema ...
show more
34.77.253.60 - - [20/Sep/2026:12:00:27 +0000] "POST /graphql HTTP/2.0" 403 555 "https://albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 0.000 "-" "BE"
34.77.253.60 - - [20/Sep/2026:12:00:27 +0000] "POST /api/graphql HTTP/2.0" 403 555 "https://albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 0.000 "-" "BE"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-20 11:41:54
(14 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
OceanTreasure
2026-09-20 08:20:31
(17 hours ago)
tcp/8443; Unsolicited SYN to a port that has never been offered on this address (closed, no service ...
show more
tcp/8443; Unsolicited SYN to a port that has never been offered on this address (closed, no service ever) @ 2026-09-20T08:18:38Z
show less
Port Scan