🇺🇸
TPI-Abuse
2026-10-12 10:19:50
(22 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.148.14.216 (216.14.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.14.216 (216.14.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 06:19:43.921553 2026] [security2:error] [pid 30784:tid 30891] [client 34.148.14.216:52776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kandooo.com"] [uri "/dist../.env"] [unique_id "asy0P-dgj_KOh2VgwKpSRAAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 09:57:38
(44 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:57:34.793491 2026] [security2:error] [pid 24872:tid 24872] [client 34.148.14.216:40956] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||judgehall.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "judgehall.com"] [uri "/z9x8c7v6b5-debug-trigger-judgehall.com"] [unique_id "asyvDh2hZltESZ-cYnY8yAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-12 09:36:08
(1 hour ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-10-12 09:28:24
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:28:17.512897 2026] [security2:error] [pid 5873:tid 5873] [client 34.148.14.216:59456] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jnpmarinesolutions.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jnpmarinesolutions.com"] [uri "/z9x8c7v6b5-debug-trigger-jnpmarinesolutions.com"] [unique_id "asyoMfX6MByoX7V_R7j1RwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 09:11:28
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:11:24.726963 2026] [security2:error] [pid 1838:tid 1838] [client 34.148.14.216:58574] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jerusalem-korczak-home.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jerusalem-korczak-home.com"] [uri "/z9x8c7v6b5-debug-trigger-jerusalem-korczak-home.com"] [unique_id "asykPHqplpQFqbTR6Pn1bwAAAGs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-12 09:01:40
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
jcbriar
2026-10-12 08:59:44
(1 hour ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇲🇾
Rizzy
2026-10-12 08:55:37
(1 hour ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 08:52:16
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:52:12.981962 2026] [security2:error] [pid 4082:tid 4082] [client 34.148.14.216:33332] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jasonmcquain.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jasonmcquain.com"] [uri "/z9x8c7v6b5-debug-trigger-jasonmcquain.com"] [unique_id "asyfvGbkvd8IwfYkXnZ0IAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-10-12 08:48:13
(1 hour ago)
BAD BOT - Detected and Blocked.. Matched phrase "amazonbot" at REQUEST_HEADERS:User-Agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "amazonbot" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-12 08:34:04
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.148.14.216 (216.14.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:33:58.850256 2026] [security2:error] [pid 3874:tid 3891] [client 34.148.14.216:55546] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jab-us.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jab-us.com"] [uri "/z9x8c7v6b5-debug-trigger-jab-us.com"] [unique_id "asybdlUCNRta-cTTCbWTygAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-10-12 08:31:08
(2 hours ago)
Inbound Anomaly Score Exceeded (Total Score: 10). Operator GE matched 5 at TX:anomaly_score. (949110 ...
show more
Inbound Anomaly Score Exceeded (Total Score: 10). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
🇺🇸
oralunal
2026-10-12 08:26:05
(2 hours ago)
IP banned by Fail2Ban in jail its-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇨🇦
alexbfr
2026-10-12 08:25:46
(2 hours ago)
Fail2Ban report from nginx-bot-trap; automated HTTP honeypot detection.
Web App Attack
🇳🇱
Site.eu
2026-10-12 08:17:05
(2 hours ago)
Excessive 404/403 errors
Brute-Force
