๐บ๐ธ
TPI-Abuse
2026-10-26 12:08:58
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 08:08:54.415588 2026] [security2:error] [pid 9227:tid 9227] [client 34.140.121.224:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ipv6.ralphrichardson.com|F|2"] [data ".ralphrichardson.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipv6.ralphrichardson.com"] [uri "/z9x8c7v6b5-debug-trigger-ipv6.ralphrichardson.com"] [unique_id "at9C1h6Q8fpyr-oe0Gpe-gAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 11:00:59
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:00:51.202133 2026] [security2:error] [pid 32074:tid 32074] [client 34.140.121.224:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ipv6.c2cservices.com|F|2"] [data ".c2cservices.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipv6.c2cservices.com"] [uri "/z9x8c7v6b5-debug-trigger-ipv6.c2cservices.com"] [unique_id "at8y4_07wD-b-T13TMZsSAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
interbiznw.com
2026-10-26 10:34:43
(1 day ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 09:29:43
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 05:29:36.627624 2026] [security2:error] [pid 3716:tid 3716] [client 34.140.121.224:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ipv6.antitribu.com|F|2"] [data ".antitribu.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipv6.antitribu.com"] [uri "/z9x8c7v6b5-debug-trigger-ipv6.antitribu.com"] [unique_id "at8dgLXFBIXNyqkOAkn4owAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 08:36:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:36:17.018766 2026] [security2:error] [pid 15050:tid 15050] [client 34.140.121.224:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.area52designs.com"] [uri "/.env.save"] [unique_id "at8RATSwLMwFxKuVc0DQggAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 07:12:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 03:12:01.890474 2026] [security2:error] [pid 26290:tid 26290] [client 34.140.121.224:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hvacs-aircon.com"] [uri "/backend/.env"] [unique_id "at79QafP0T41lopfIyaOlQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-26 07:04:47
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-26 06:53:09
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:53:06.127185 2026] [security2:error] [pid 589:tid 589] [client 34.140.121.224:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ipv6.rodrigoaldecoa.com|F|2"] [data ".rodrigoaldecoa.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipv6.rodrigoaldecoa.com"] [uri "/z9x8c7v6b5-debug-trigger-ipv6.rodrigoaldecoa.com"] [unique_id "at740qknzcDPCsPuZKTNNgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 05:34:21
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 01:34:14.186439 2026] [security2:error] [pid 24325:tid 24325] [client 34.140.121.224:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||ipv6.gregquinn.com|F|2"] [data ".gregquinn.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipv6.gregquinn.com"] [uri "/z9x8c7v6b5-debug-trigger-ipv6.gregquinn.com"] [unique_id "at7mVk1Vnd0igyXlYfxQ3QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Matthew Ping
2026-10-26 03:15:01
(1 day ago)
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on d865.
DDoS Attack
Brute-Force
๐ฉ๐ช
4server
2026-10-26 03:09:44
(1 day ago)
[MonOct2604:09:37.9208652026][security2:error][pid1915857:tid1915911][client34.140.121.224:0]ModSecu ...
show more
[MonOct2604:09:37.9208652026][security2:error][pid1915857:tid1915911][client34.140.121.224:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".com\"][severity\"ERROR\"][hostname\"gruppobalu.com\"][uri\"/z9x8c7v6b5-debug-trigger-gruppobalu.com\"][unique_id\"at7EcUYcW8qV3fBqaHP9RgAAAQA\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ณ๐ฑ
GabrielJST
2026-10-26 02:46:19
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.140.121.224 (BE/Belgium/224.121.140. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.140.121.224 (BE/Belgium/224.121.140.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐ฉ๐ช
IVski.com
2026-10-26 02:05:10
(1 day ago)
IVski WAF | Next.js middleware bypass attempt (CVE-2025-29927)
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 01:23:36
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 21:23:33.460907 2026] [security2:error] [pid 27321:tid 27321] [client 34.140.121.224:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ipv6.haywardcarpentry.com|F|2"] [data ".haywardcarpentry.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipv6.haywardcarpentry.com"] [uri "/z9x8c7v6b5-debug-trigger-ipv6.haywardcarpentry.com"] [unique_id "at6rlXtsYMe10anrb0mzKQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 00:45:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.121.224 (224.121.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 20:45:43.509449 2026] [security2:error] [pid 31019:tid 31019] [client 34.140.121.224:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gregquinn.com"] [uri "/css../.env"] [unique_id "at6itweemhAAcpH50M_WDgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack