🇧🇷
Host One
2026-10-01 18:15:37
(1 day ago)
Attack blocked by firewall: hosting control panel login brute-force. Blocked by firewall on 5 differ ...
show more
Attack blocked by firewall: hosting control panel login brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 2083, 2087 (cPanel/WHM). Automated report.
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 17:26:53
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 35.246.134.65 (65.134.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.246.134.65 (65.134.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:26:46.355176 2026] [security2:error] [pid 27097:tid 27097] [client 35.246.134.65:37878] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||petsnality.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "petsnality.com"] [uri "/z9x8c7v6b5-debug-trigger-petsnality.com"] [unique_id "ar6X1tJULd-PiOY3QjLjGgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-10-01 17:20:39
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 17:03:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:03:04.761914 2026] [security2:error] [pid 27033:tid 27033] [client 35.246.134.65:59440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rockitfish.com"] [uri "/.htpasswd"] [unique_id "ar6SSM8v5i267SvVf9UoKAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-01 16:55:02
(1 day ago)
suspicious request in access.log
Web App Attack
🇩🇪
updown.io
2026-10-01 16:48:28
(1 day ago)
{"level":"info","ts":1790873307.2166646,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1790873307.2166646,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.246.134.65","remote_port":"43960","client_ip":"35.246.134.65","proto":"HTTP/2.0","method":"GET","host":"status.veba.co","uri":"/.ssh/config","headers":{"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.veba.co","ech":false}},"bytes_read":0,"user_id":"","duration":0.000229578,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1790873307.226289,"logger":"http.log.access.log1","msg":
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 16:39:59
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 35.246.134.65 (65.134.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.246.134.65 (65.134.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:39:52.903407 2026] [security2:error] [pid 10089:tid 10089] [client 35.246.134.65:41718] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||slovenia-boat-registration.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "slovenia-boat-registration.com"] [uri "/z9x8c7v6b5-debug-trigger-slovenia-boat-registration.com"] [unique_id "ar6M2C83dy_ieecgoBjOJQAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 16:21:45
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 35.246.134.65 (65.134.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.246.134.65 (65.134.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:21:41.170910 2026] [security2:error] [pid 28721:tid 28721] [client 35.246.134.65:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sportsbookcommission.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sportsbookcommission.com"] [uri "/z9x8c7v6b5-debug-trigger-sportsbookcommission.com"] [unique_id "ar6IlRNDAflGa3pmkXPlFgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-10-01 16:05:41
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 16:05:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:04:59.166708 2026] [security2:error] [pid 25939:tid 25939] [client 35.246.134.65:48658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.powersystemprotection.co.uk"] [uri "/build../.env"] [unique_id "ar6Eq2s8WqrdD-LQ1ZxY3AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
YF
2026-10-01 16:00:17
(1 day ago)
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 14:05:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 10:04:59.950095 2026] [security2:error] [pid 11357:tid 11357] [client 35.246.134.65:37858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.purelywhimsical.com"] [uri "/.env.js"] [unique_id "ar5oi865u6OCgZKkbvk-twAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 13:13:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 09:13:48.331446 2026] [security2:error] [pid 15425:tid 15435] [client 35.246.134.65:47486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seips.org"] [uri "/.env.js"] [unique_id "ar5cjGUxMtjQ6ajISEU-LgAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-01 12:42:46
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 12:29:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.134.65 (65.134.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 08:29:45.535211 2026] [security2:error] [pid 31614:tid 31614] [client 35.246.134.65:45206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "careers.scc1.us"] [uri "/uploads../.env"] [unique_id "ar5SOSZffcXRviMfYjJ4aAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
