🇺🇸
mnsf
2026-10-02 09:05:24
(11 minutes ago)
Too many Status 40X (12)
Request Overload (103)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 08:03:37
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.11.63.52 (52.63.11.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.11.63.52 (52.63.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 04:03:32.278169 2026] [security2:error] [pid 29406:tid 29473] [client 34.11.63.52:52112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.heworeblack.com|F|2"] [data ".heworeblack.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.heworeblack.com"] [uri "/z9x8c7v6b5-debug-trigger-www.heworeblack.com"] [unique_id "ar9lVDUzHCfNdODwp2gougAAAcs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alboweb B.V.
2026-10-02 07:11:03
(2 hours ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
🇺🇸
robotstxt
2026-10-02 07:10:39
(2 hours ago)
34.11.63.52 - - [02/Oct/2026:07:09:41 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 36364 "-" ...
show more
34.11.63.52 - - [02/Oct/2026:07:09:41 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 36364 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "34.11.63.52" edge="162.159.106.123"
34.11.63.52 - - [02/Oct/2026:07:09:42 +0000] "GET /.aws/credentials HTTP/2.0" 403 36379 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "34.11.63.52" edge="104.22.101.107"
34.11.63.52 - - [02/Oct/2026:07:09:42 +0000] "GET /.git-credentials HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "34.11.63.52" edge="104.22.101.107"
34.11.63.52 - - [02/Oct/2026:07:09:42 +0000] "GET /.aws/config HTTP/2.0" 403 36363 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "34.11.63.52" edge="104.22.101.107"
34.11.63.52 - - [02/Oct/2026:07:09:43 +0000] "GET /.gitlab-ci.yml HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" "34.11.63.52" edge
...
show less
Web App Attack
2026-10-02 06:57:38
(2 hours ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 06:47:07
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.11.63.52 (52.63.11.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.11.63.52 (52.63.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 02:47:00.049304 2026] [security2:error] [pid 5500:tid 5500] [client 34.11.63.52:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bbproductionsonline.com|F|2"] [data ".bbproductionsonline.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bbproductionsonline.com"] [uri "/z9x8c7v6b5-debug-trigger-www.bbproductionsonline.com"] [unique_id "ar9TZD-ofga4YV_nHzWsBQAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-02 06:32:26
(2 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 06:27:07
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.63.52 (52.63.11.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.63.52 (52.63.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 02:26:59.338050 2026] [security2:error] [pid 27407:tid 27407] [client 34.11.63.52:39550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.burnbuns.com"] [uri "/.env.development"] [unique_id "ar9Os9DFVY0eyX-QqRPQLgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-02 06:22:44
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇲🇾
Rizzy
2026-10-02 06:15:24
(3 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-02 06:11:22
(3 hours ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.11.63.52 - - [02/Oct/2026:08:11:19 +0200] "GET /wp-config.php.old HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
...
show less
Bad Web Bot
Web App Attack
