๐บ๐ธ
TPI-Abuse
2026-09-20 15:15:28
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.230.71.178 (178.71.230.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.230.71.178 (178.71.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:15:21.085952 2026] [security2:error] [pid 28925:tid 28925] [client 35.230.71.178:60892] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bigkevsperformance.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bigkevsperformance.com"] [uri "/z9x8c7v6b5-debug-trigger-bigkevsperformance.com"] [unique_id "aq_4iYHIputifL2eMw4E3AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Apache
2026-09-20 15:11:57
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.230.71.178 (US/United States/178.71.230.35.b ...
show more
(mod_security) mod_security (id:210730) triggered by 35.230.71.178 (US/United States/178.71.230.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-20 14:53:40
(1 month ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.230.71.178 - - [20/Sep/2026:16:53:36 +0200] "GET /.env.backup HTTP/2.0" 403 372 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-20 14:49:51
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 14:41:37
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.230.71.178 (178.71.230.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.230.71.178 (178.71.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:41:32.562118 2026] [security2:error] [pid 20417:tid 20417] [client 35.230.71.178:51328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bienvista.com"] [uri "/.git/config"] [unique_id "aq_wnGLS3Elf5T4wXZXMXQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 14:13:10
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.230.71.178 (178.71.230.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.230.71.178 (178.71.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:13:07.236144 2026] [security2:error] [pid 8668:tid 8668] [client 35.230.71.178:52736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bicaco.com"] [uri "/.git/config"] [unique_id "aq_p86-eAO-CBgaShLGQQAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-20 14:05:03
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 13:50:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.230.71.178 (178.71.230.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.230.71.178 (178.71.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:50:26.942486 2026] [security2:error] [pid 6791:tid 6791] [client 35.230.71.178:42612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bhartman.com"] [uri "/src/.env"] [unique_id "aq_kon1VXNdYIo2Bj_F_dgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 13:23:14
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.230.71.178 (178.71.230.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.230.71.178 (178.71.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:23:10.957460 2026] [security2:error] [pid 11556:tid 11556] [client 35.230.71.178:40840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backstore.com"] [uri "/bot/.env"] [unique_id "aq_ePqtHh9Yd9WqxTs1rUgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-20 13:10:10
(1 month ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /config/.env (+2 more) | 2026-09-20 13:10 UTC
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 13:03:35
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.230.71.178 (178.71.230.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.230.71.178 (178.71.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:03:30.661844 2026] [security2:error] [pid 21380:tid 21380] [client 35.230.71.178:34342] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||10bestattorneys.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "10bestattorneys.com"] [uri "/z9x8c7v6b5-debug-trigger-10bestattorneys.com"] [unique_id "aq_ZopLvDnRamsJeQMCX6AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2026-09-20 12:47:52
(1 month ago)
AutoBlock: ๐ก Port Scan (Non Decay-Based)
Port Scan