2026-08-08 19:45:11
(1 month ago)
BFM: mod_security1=77 (US/United States/145.186.94.34.bc.googleusercontent.com) - Sat Aug 8 10:17:3 ...
show more
BFM: mod_security1=77 (US/United States/145.186.94.34.bc.googleusercontent.com) - Sat Aug 8 10:17:36 2026
show less
Brute-Force
🇩🇪
LRob
2026-08-08 07:26:37
(1 month ago)
CrowdSec: crowdsecurity/http-probing | req: /wp-json | 11 distinct paths | UA: anthropic-ai
Port Scan
Web App Attack
🇬🇧
Axel
2026-08-08 06:48:02
(1 month ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇳🇱
Brict IT
2026-08-07 19:18:06
(1 month ago)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-07 18:03:17
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.94.186.145 (145.186.94.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.94.186.145 (145.186.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 14:03:10.597255 2026] [security2:error] [pid 24482:tid 24482] [client 34.94.186.145:37760] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||sedemo.xyz|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sedemo.xyz"] [uri "/rclone.conf"] [unique_id "anYd3tHVwE69GpyKFvNg7gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-07 17:03:52
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.94.186.145 (145.186.94.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.94.186.145 (145.186.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 13:03:44.668156 2026] [security2:error] [pid 2433046:tid 2433060] [client 34.94.186.145:60748] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.promc.xyz|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.promc.xyz"] [uri "/rclone.conf"] [unique_id "anYP8EPBrUWYnlRTfFNh3AAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hbrks
2026-08-07 16:48:10
(1 month ago)
196 attack(s) detected, such as these: {"event":"web_block","ip":"34.94.186.145","host":"p4u.xyz","r ...
show more
196 attack(s) detected, such as these: {"event":"web_block","ip":"34.94.186.145","host":"p4u.xyz","request":"GET /nginx_status HTTP/2.0","user_agent":"","reason":"Status-404","timestamp":"2026-08-07T16:48:10 00:00","logentry":"p4u.xyz 34.94.186.145 - - [07/Aug/2026:18:48:10 0200] \"GET /nginx_status HTTP/2.0\" 404 0 \"-\" \"Mozilla/5.0 (compatible; cohere-ai/1.0; https://cohere.com)\" \"172.25.79.42:5000\""} * Report Details *: https://p4u.xyz/BGE1IYW4SVG/1* IP Details *: https://p4u.xyz/BGE1IYW4SVG/2
show less
Web Spam
Hacking
Bad Web Bot
🇩🇪
piticu iuli
2026-08-07 16:41:16
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 34.94.186.145 (US/United States/145.186 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.94.186.145 (US/United States/145.186.94.34.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-08-07 16:39:24
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.94.186.145 (145.186.94.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.94.186.145 (145.186.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 12:39:20.703617 2026] [security2:error] [pid 2427314:tid 2427457] [client 34.94.186.145:50156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oftv.xyz"] [uri "/.git/HEAD"] [unique_id "anYKOIU_TCJ9bLheAezDCQAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-07 16:24:12
(1 month ago)
Web vulnerability probing: /z9x8c7v6b5-debug-trigger-nugatory.xyz
Web App Attack
🇺🇸
TPI-Abuse
2024-03-27 15:53:07
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 34.94.186.145 (145.186.94.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 34.94.186.145 (145.186.94.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 27 11:53:00.532529 2024] [security2:error] [pid 3479024] [client 34.94.186.145:60507] [client 34.94.186.145] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||campnecon.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "campnecon.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZgRA3MXrTEZNfd8duIGHEQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
