🇺🇸
mnsf
2026-09-23 07:05:26
(1 hour ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 06:40:42
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 02:40:36.827223 2026] [security2:error] [pid 27897:tid 27897] [client 34.101.229.93:40880] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||albioncapitalfund.com|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "albioncapitalfund.com"] [uri "/.codex/auth.json.bak"] [unique_id "arN0ZHqwpEggXcIbNHSd3wAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 05:01:20
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 01:01:15.050297 2026] [security2:error] [pid 11911:tid 11911] [client 34.101.229.93:60016] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||afjm.info|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "afjm.info"] [uri "/.codex/auth.json.bak"] [unique_id "arNdG4l7PRVpHzzqDvs33AAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-22 23:59:11
(8 hours ago)
Web application attack detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:59:38
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:59:33.442376 2026] [security2:error] [pid 28898:tid 28898] [client 34.101.229.93:55824] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||4tee2stock.fynyx.com|F|2"] [data ".json.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "4tee2stock.fynyx.com"] [uri "/.codex/auth.json.old"] [unique_id "arKz9QvmSR1K3dZsNLex7wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:54:38
(16 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:54:32.321272 2026] [security2:error] [pid 10133:tid 10133] [client 34.101.229.93:42068] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||4211swf.com.micahgartman.com|F|2"] [data ".json.old"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "4211swf.com.micahgartman.com"] [uri "/.codex/auth.json.old"] [unique_id "arKkuKHvWqr8dOOuNSyENgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-22 15:40:03
(17 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
2026-09-22 07:36:39
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇬🇧
noise.agency
2026-07-21 23:10:20
(2 months ago)
34.101.229.93 (ID/Indonesia/93.229.101.34.bc.googleusercontent.com), more than 10 Apache 403 hits
Hacking
🇩🇪
grassau.com
2026-07-21 22:28:12
(2 months ago)
34.101.229.93 (ID/Indonesia/Jakarta/Jakarta/93.229.101.34.bc.googleusercontent.com), more than 30 Ap ...
show more
34.101.229.93 (ID/Indonesia/Jakarta/Jakarta/93.229.101.34.bc.googleusercontent.com), more than 30 Apache 403 hits
show less
Hacking
🇩🇪
raph
2026-07-21 22:26:39
(2 months ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-07-21 19:21:00
(2 months ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇳🇱
Site.eu
2026-07-21 19:18:40
(2 months ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
Bedios GmbH
2026-07-21 18:15:27
(2 months ago)
Login credentials theft attempt
Hacking
🇺🇸
TPI-Abuse
2026-07-21 18:13:50
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.101.229.93 (93.229.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 14:13:42.504912 2026] [security2:error] [pid 1205:tid 1205] [client 34.101.229.93:37826] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||panel.davisllp.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "panel.davisllp.com"] [uri "/rclone.conf"] [unique_id "al-21qkqza96IFvX9d5quAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack