🇫🇷
Octopuce
2026-06-13 17:13:44
(3 days ago)
Aggressive web search of vulnerable pages: /secrets/aws.json /secrets/credentials.json /secrets/azur ...
show more
Aggressive web search of vulnerable pages: /secrets/aws.json /secrets/credentials.json /secrets/azure.json /secrets/gcp.json /docker-compose.pr ...
show less
Web App Attack
🇳🇱
e.fierstra
2026-06-13 14:38:46
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 09:47:10
(4 days ago)
(mod_security) mod_security (id:210831) triggered by 35.241.157.7 (7.157.241.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210831) triggered by 35.241.157.7 (7.157.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:47:03.499979 2026] [security2:error] [pid 1479:tid 1479] [client 35.241.157.7:37336] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||djdharma.com|F|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "djdharma.com"] [uri "/aws-credentials.json"] [unique_id "ai0nF7Y7yH-MdFyqXXAdoAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-13 09:06:18
(4 days ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇺🇸
nyt
2026-06-13 06:40:06
(4 days ago)
404 flood (16/60s), 404 flood (17/60s)
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-13 06:25:03
(4 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 05:40:45
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.241.157.7 (7.157.241.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.157.7 (7.157.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:40:37.871760 2026] [security2:error] [pid 25806:tid 25806] [client 35.241.157.7:41610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/.htpasswd"] [unique_id "aiztVbPWAXLG2bcPPyg0MQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-13 03:40:21
(4 days ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 03:40:00
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 35.241.157.7 (7.157.241.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 35.241.157.7 (7.157.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 23:39:52.484844 2026] [security2:error] [pid 876:tid 876] [client 35.241.157.7:56566] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||bioemperor.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bioemperor.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aizRCKpa2eN_Z9GVhW91dQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack