🇺🇸
[email protected]
2026-10-02 10:37:29
(1 week ago)
CrowdSec ban: crowdsecurity/unifi-flood-detection (duration: 71h59m52s)
Port Scan
🇩🇪
SCHAPPY
2026-10-01 15:27:46
(1 week ago)
Bad bot identified by user agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 15:05:56
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.141.113.251 (251.113.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.113.251 (251.113.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 11:05:52.661890 2026] [security2:error] [pid 13538:tid 13538] [client 34.141.113.251:41138] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||idonthaveawebpage.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "idonthaveawebpage.com"] [uri "/z9x8c7v6b5-debug-trigger-idonthaveawebpage.com"] [unique_id "ar520DhBRUA3FutiIjXJtgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-10-01 15:04:07
(1 week ago)
(y3) Failed access -byebye- from 34.141.113.251 (DE/Germany/251.113.141.34.bc.googleusercontent.com) ...
show more
(y3) Failed access -byebye- from 34.141.113.251 (DE/Germany/251.113.141.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
2026-10-01 14:12:24
(2 weeks ago)
malicious scanning tool activity
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 14:01:10
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.141.113.251 (251.113.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.113.251 (251.113.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 10:01:03.148492 2026] [security2:error] [pid 17884:tid 17884] [client 34.141.113.251:46252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||iceofparadise.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "iceofparadise.com"] [uri "/z9x8c7v6b5-debug-trigger-iceofparadise.com"] [unique_id "ar5nnx1LWlEHE700sQkq3QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-01 13:46:10
(2 weeks ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
2026-10-01 13:41:02
(2 weeks ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-01 13:25:22
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.141.113.251 (251.113.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.113.251 (251.113.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 09:25:14.695842 2026] [security2:error] [pid 29445:tid 29445] [client 34.141.113.251:41762] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.johnandramonadunn.com|F|2"] [data ".johnandramonadunn.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.johnandramonadunn.com"] [uri "/z9x8c7v6b5-debug-trigger-www.johnandramonadunn.com"] [unique_id "ar5fOu2HgbFD4PVCqvVPzwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-01 13:11:41
(2 weeks ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇩🇪
konseptit
2026-10-01 13:04:11
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.141.113.251 (DE/Germany/251.113.141. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.141.113.251 (DE/Germany/251.113.141.34.bc.googleusercontent.com)
show less
SQL Injection
🇸🇪
vaia.cloud
2026-10-01 12:45:01
(2 weeks ago)
crowdsecurity/grafana-cve-2021-43798
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-10-01 12:41:41
(2 weeks ago)
excessive HTTP 404 errors
Bad Web Bot
2026-10-01 12:38:38
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
dynamix
2026-10-01 12:37:35
(2 weeks ago)
Multiple WAF Violations
Web App Attack
