🇳🇱
Site.eu
2026-06-09 03:20:53
(1 week ago)
Excessive multi-domain requests
Brute-Force
2026-06-08 17:27:12
(1 week ago)
Bot / seems abusive / Apache connections: 254
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-08 16:41:10
(1 week ago)
Multiple WAF Violations
Web App Attack
🇩🇪
akasolutions.de
2026-06-08 16:10:22
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.85.120.143 (JP/Japan/143.120.85.34.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.85.120.143 (JP/Japan/143.120.85.34.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-06-08 16:06:08
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 12:06:01.676400 2026] [security2:error] [pid 7935:tid 7935] [client 34.85.120.143:42420] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.imbrasacademic.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.imbrasacademic.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiboafraJkUf4RrWcpeuTwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 15:45:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.85.120.143 (143.120.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.120.143 (143.120.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:45:16.563074 2026] [security2:error] [pid 22286:tid 22286] [client 34.85.120.143:43950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sympalais.com"] [uri "/app/config/config.yml"] [unique_id "aibjjGxY0NklPm36QDCr1gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 11:58:23
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 07:58:17.870305 2026] [security2:error] [pid 8218:tid 8218] [client 34.85.120.143:56412] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||timelord2067.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "timelord2067.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiauWZeryez3DB6WFRhRqQAAAGI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-08 11:22:23
(1 week ago)
[osotir.org] httpd-suspicious-path: sites=synathlountes.gr; logs=/var/log/httpd/domains/synathlounte ...
show more
[osotir.org] httpd-suspicious-path: sites=synathlountes.gr; logs=/var/log/httpd/domains/synathlountes.gr.log; samples=/api/actuator/env | /backend/actuator/env | /actuator/threaddump
show less
Hacking
Web App Attack
🇨🇭
backslash
2026-06-08 09:51:05
(1 week ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-08 08:58:53
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 04:58:49.337791 2026] [security2:error] [pid 7022:tid 7121] [client 34.85.120.143:60466] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.knoinvestments.oconnorpest.biz|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.knoinvestments.oconnorpest.biz"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiaESdLJ2rDBoZ0npMwUhgAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-08 08:09:47
(1 week ago)
Scanning/Probing (25)
Request Overload (229)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 07:43:39
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 03:43:33.610817 2026] [security2:error] [pid 16306:tid 16306] [client 34.85.120.143:50178] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||puckerbackbikini.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "puckerbackbikini.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiZypWygaGIugEx3U30B_wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-08 07:38:41
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
e.fierstra
2026-06-08 05:23:40
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 04:54:34
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.85.120.143 (143.120.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 00:54:28.766680 2026] [security2:error] [pid 6189:tid 6189] [client 34.85.120.143:48126] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||davesullivan.net|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "davesullivan.net"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiZLBI05msdrinSAfyEqKAAAAD8"]
show less
Brute-Force
Bad Web Bot
Web App Attack