🇫🇷
masterguru
2026-09-24 08:46:35
(3 days ago)
Restricted File Access Attempt. Matched phrase ".config/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 08:08:26
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 04:08:21.772157 2026] [security2:error] [pid 2101:tid 2101] [client 35.187.120.56:48552] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||c2cdisasterresponse.org|F|2"] [data ".json.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "c2cdisasterresponse.org"] [uri "/.codex/auth.json.old"] [unique_id "arTademN_ATTp5VHjmSTLgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 07:10:08
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 03:10:02.767654 2026] [security2:error] [pid 6047:tid 6047] [client 35.187.120.56:50404] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||buffaloweddingdeejay.com|F|2"] [data ".json.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "buffaloweddingdeejay.com"] [uri "/.codex/auth.json.old"] [unique_id "arTMytFThz12FRDOyfkfRQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-09-24 03:13:46
(4 days ago)
*Port Scan* detected from 35.187.120.56 (BE/Belgium/Brussels Capital/Brussels/56.120.187.35.bc.googl ...
show more
*Port Scan* detected from 35.187.120.56 (BE/Belgium/Brussels Capital/Brussels/56.120.187.35.bc.googleusercontent.com).
show less
Port Scan
🇫🇷
✨
2026-09-24 01:58:18
(4 days ago)
Domain : best-tile.co.uk
Rule : hack
2026-09-24 01:57:13 ***hidden-privacy*** GET /.codex/auth.json. ...
show more
Domain : best-tile.co.uk
Rule : hack
2026-09-24 01:57:13 ***hidden-privacy*** GET /.codex/auth.json.bak - 443 - 35.187.120.56 HTTP/1.1 crusader-worker/1.0 - best-tile.co.uk 404 0 2 1561 107 145 - -
show less
Hacking
SQL Injection
Brute-Force
🇺🇸
TPI-Abuse
2026-09-23 21:34:02
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 17:33:56.806716 2026] [security2:error] [pid 28766:tid 28766] [client 35.187.120.56:53624] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||avmcyber.com|F|2"] [data ".json.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "avmcyber.com"] [uri "/.codex/auth.json.old"] [unique_id "arRFxLSdntfBK5Veqo-UhgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-09-23 07:57:01
(4 days ago)
categories: DDoS Attack
DDoS Attack
🇺🇸
TPI-Abuse
2026-09-23 02:08:42
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 22:08:39.310448 2026] [security2:error] [pid 31045:tid 31045] [client 35.187.120.56:57228] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||achildsspace2.com|F|2"] [data ".json.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "achildsspace2.com"] [uri "/.codex/auth.json.old"] [unique_id "arM0p_zR563dyPoXkjzZpgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ecode hosting
2026-09-22 16:40:06
(5 days ago)
Rule : DDOS
Flood 33
DDoS Attack
🇺🇸
TPI-Abuse
2026-09-22 15:37:49
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.187.120.56 (56.120.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:37:44.139748 2026] [security2:error] [pid 20521:tid 20521] [client 35.187.120.56:45676] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||3n1ent.com|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3n1ent.com"] [uri "/.codex/auth.json.bak"] [unique_id "arKgyAw6ehLQFYltP7yxyAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-22 08:05:03
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-09-22 06:54:05
(6 days ago)
30 attempts against mh_ha-misbehave-ban on taro
Brute-Force
Bad Web Bot
Web App Attack
