🇺🇸
TPI-Abuse
2026-10-14 18:40:25
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.19.168.109 (109.168.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.19.168.109 (109.168.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:40:17.294049 2026] [security2:error] [pid 22981:tid 22981] [client 34.19.168.109:53638] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.lockyers.com|F|2"] [data ".lockyers.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.lockyers.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.lockyers.com"] [unique_id "as_MkWqgaUdq8TYUUcpYZAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-14 16:46:19
(8 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-10-14 16:15:41
(9 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.19.168.109 (109.168.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.19.168.109 (109.168.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:15:36.633133 2026] [security2:error] [pid 24730:tid 24730] [client 34.19.168.109:50204] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nexus.kemela.com|F|2"] [data ".kemela.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nexus.kemela.com"] [uri "/z9x8c7v6b5-debug-trigger-nexus.kemela.com"] [unique_id "as-qqHu6j4B6iilRasz8uQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
iwle
2026-10-14 14:08:46
(11 hours ago)
[Wed Oct 14 10:08:44.575251 2026] [:error] [pid 1794401:tid 1794452] [client 34.19.168.109:53748] [c ...
show more
[Wed Oct 14 10:08:44.575251 2026] [:error] [pid 1794401:tid 1794452] [client 34.19.168.109:53748] [client 34.19.168.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mail.justuptowngames.com"] [uri "/assets../.env"] [unique_id "as-M7CFhuHMj0UjR331WUwAAARc"]
[Wed Oct 14 10:08:44.577058 2026] [:error] [pid 1681512:tid 1681545] [client 34.19.168.109:53746] [client 34.19.168.109] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 12:11:18
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.168.109 (109.168.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.168.109 (109.168.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:11:10.594655 2026] [security2:error] [pid 14310:tid 14310] [client 34.19.168.109:35706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.mindheartbreath.com"] [uri "/images../.env"] [unique_id "as9xXgIoRcm5SXh_9YbdbwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-10-14 11:48:57
(13 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-10-14 09:56:37
(15 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇫🇷
dynamix
2026-10-14 09:35:37
(16 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 09:01:14
(16 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.19.168.109 (109.168.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.19.168.109 (109.168.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:01:07.041649 2026] [security2:error] [pid 2142:tid 2173] [client 34.19.168.109:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.mindgardens.com|F|2"] [data ".mindgardens.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.mindgardens.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.mindgardens.com"] [unique_id "as9E05eKcoyOdcL335LHGgAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-14 08:35:01
(17 hours ago)
suspicious request in access.log
Web App Attack
🇪🇸
masterguru
2026-10-14 08:21:15
(17 hours ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
2026-10-14 08:00:16
(17 hours ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇮🇹
VHosting
2026-10-14 07:55:07
(17 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 07:47:46
(17 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.19.168.109 (109.168.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.19.168.109 (109.168.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 03:47:39.534251 2026] [security2:error] [pid 3311:tid 3311] [client 34.19.168.109:40324] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||labcomputers.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "labcomputers.com"] [uri "/z9x8c7v6b5-debug-trigger-labcomputers.com"] [unique_id "as8zm0yk_Yr-X3z2UxmPdQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
