|
🇫🇷
Catalin Negru
|
|
Recidive ban by fail2ban on server.blackbit.ro
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:39:39.874296 2026] [security2:error] [pid 32730:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:39:39.874296 2026] [security2:error] [pid 32730:tid 32730] [client 34.151.240.77:45490] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||daisydoesoap.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "daisydoesoap.com"] [uri "/z9x8c7v6b5-debug-trigger-daisydoesoap.com"] [unique_id "aryEe7XwitUpYFl00eylegAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
Anonymous
|
|
Blocked by ModSec and CSF
|
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:08:00.007184 2026] [security2:error] [pid 360:tid 36 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:08:00.007184 2026] [security2:error] [pid 360:tid 360] [client 34.151.240.77:34932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.drstiso.com"] [uri "/@fs/src/.env"] [unique_id "arx9EETS8HPxoqD_naDmggAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇲🇾
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
34.151.240.77 - - [30/Sep/2026:03:03:46 +0200] "GET /.streamlit/secrets.toml HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
|
Web Spam
Blog Spam
Brute-Force
Web App Attack
|
|
🇬🇧
andypiper
|
|
CrowdSec ban for AbuseIPDB Top List
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:41:56.819720 2026] [security2:error] [pid 29492:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:41:56.819720 2026] [security2:error] [pid 29492:tid 29492] [client 34.151.240.77:33752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cpking.com"] [uri "/userfiles"] [unique_id "arxa1AHZv7uxedMjbhGkHgAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 17:24:46.226851 2026] [security2:error] [pid 9817:tid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 17:24:46.226851 2026] [security2:error] [pid 9817:tid 9817] [client 34.151.240.77:38304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cmexico.co"] [uri "/.env.example"] [unique_id "arwsnuspP1NWGCd7IVudKQAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:23:09.418468 2026] [security2:error] [pid 14767:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:23:09.418468 2026] [security2:error] [pid 14767:tid 14767] [client 34.151.240.77:47514] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||capitalswisscorp.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "capitalswisscorp.com"] [uri "/z9x8c7v6b5-debug-trigger-capitalswisscorp.com"] [unique_id "arweLVR7QsTiRzBWDnfvKwAAACY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 13:44:50.808203 2026] [security2:error] [pid 31951:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.240.77 (77.240.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 13:44:50.808203 2026] [security2:error] [pid 31951:tid 31951] [client 34.151.240.77:50294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daretownkindling.com"] [uri "/.env.bak"] [unique_id "arv5EgFwZuG1NtinoydBHwAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|