๐ง๐ฌ
alnaasd
2026-08-10 13:27:07
(2 months ago)
WAF block action triggered by rule set "Version Control - Information Disclosure" (96 occurrences ob ...
show more
WAF block action triggered by rule set "Version Control - Information Disclosure" (96 occurrences observed).
show less
Web App Attack
๐บ๐ธ
NXTwoThou
2026-08-09 20:16:00
(2 months ago)
/trace.axd
Web App Attack
Anonymous
2026-08-09 14:07:23
(2 months ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Back ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-08-08 21:28:20
(2 months ago)
15 attempts against mh-modsecurity-ban on byrd
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-08-08 21:14:03
(2 months ago)
3.592 requests from abuseipdb.com blacklisted IP (9mos3w6d)
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-08-08 21:03:48
(2 months ago)
20 attempts against mh-misbehave-ban on mars
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
tmiland
2026-08-08 20:57:09
(2 months ago)
(nginx_404) Dot directory Honeypot Trap 35.199.26.34 (US/United States/34.26.199.35.bc.googleusercon ...
show more
(nginx_404) Dot directory Honeypot Trap 35.199.26.34 (US/United States/34.26.199.35.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 35.199.26.34; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.199.26.34 - - [08/Aug/2026:22:57:06 +0200] "GET /.git/config HTTP/1.1" 404 11088 "https://www.*.*/.git/config" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)" 35.199.26.34 - - [08/Aug/2026:22:57:08 +0200] "GET /.git/HEAD HTTP/1.1" 404 11085 "https://www.*.*/.git/HEAD" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-08-08 20:37:35
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 16:37:28.728931 2026] [security2:error] [pid 8254:tid 8254] [client 35.199.26.34:49422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scrunchiebuttbikinis.com"] [uri "/.git/config"] [unique_id "aneTiLHuAT1Iw_nFI4B2RwAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-08 20:02:09
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 16:02:02.008686 2026] [security2:error] [pid 14071:tid 14071] [client 35.199.26.34:39380] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||scr-publications.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scr-publications.com"] [uri "/rclone.conf"] [unique_id "aneLOhcAAZiK3UAXRAUwEQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
dalslab ltd
2026-08-08 19:56:29
(2 months ago)
[08/Aug/2026:21:56:28 +0200] - 404 404 - GET https search.dalslab.com "/z9x8c7v6b5-debug-trigger-sea ...
show more
[08/Aug/2026:21:56:28 +0200] - 404 404 - GET https search.dalslab.com "/z9x8c7v6b5-debug-trigger-search.dalslab.com" [Client 35.199.26.34] [Length 2205] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 (compatible; Bytespider; [email protected] )" "-"
[08/Aug/2026:21:56:28 +0200] - 404 404 - GET https search.dalslab.com "/.aws/config" [Client 35.199.26.34] [Length 2205] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 (compatible; Bytespider; [email protected] )" "-"
[08/Aug/2026:21:56:28 +0200] - 404 404 - GET https search.dalslab.com "/.git/HEAD" [Client 35.199.26.34] [Length 2205] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 (compatible; Bytespider; [email protected] )" "-"
[08/Aug/2026:21:56:28 +0200] - 404 404 - GET https search.dalslab.com "/.git/config" [Client 35.199.26.34] [Length 2205] [Gzip 2.15] [Sent-to 10.1.1.41] "Mozilla/5.0 (compatible; Bytespider; [email protected] )" "-"
[08/Aug/2026:21:56:28 +0200] - 404 404 - GET https search.dals
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Octopuce
2026-08-08 19:51:31
(2 months ago)
Aggressive web search of vulnerable pages: /.env.local /.env /backend/.env /config/.env /admin/.env ...
show more
Aggressive web search of vulnerable pages: /.env.local /.env /backend/.env /config/.env /admin/.env ...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-08 19:41:32
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 15:41:25.886398 2026] [security2:error] [pid 1964045:tid 1964045] [client 35.199.26.34:60224] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.seebeexee.com|F|2"] [data ".seebeexee.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.seebeexee.com"] [uri "/z9x8c7v6b5-debug-trigger-www.seebeexee.com"] [unique_id "aneGZYqrnVfbq03fnzDEpAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-08 19:21:36
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 15:21:32.433964 2026] [security2:error] [pid 233246:tid 233246] [client 35.199.26.34:58740] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bahamascruisersguide.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bahamascruisersguide.com"] [uri "/z9x8c7v6b5-debug-trigger-bahamascruisersguide.com"] [unique_id "aneBvOHuV0HlafVR1iFergAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-08 18:35:34
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 35.199.26.34 (34.26.199.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 14:35:28.009416 2026] [security2:error] [pid 2619575:tid 2619575] [client 35.199.26.34:33608] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.sdwsk8.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.sdwsk8.com"] [uri "/rclone.conf"] [unique_id "and28FdiZsDQavdnkPZ3mwAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-08 18:31:30
(2 months ago)
Web application attack detected.
Web App Attack