🇺🇸
TPI-Abuse
2026-10-14 19:10:56
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.19.171.253 (253.171.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.19.171.253 (253.171.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 15:10:52.642249 2026] [security2:error] [pid 16950:tid 16950] [client 34.19.171.253:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ndanetworks.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ndanetworks.com"] [uri "/z9x8c7v6b5-debug-trigger-ndanetworks.com"] [unique_id "as_TvEDz0uQ5Q93AMIKlyAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 18:29:56
(16 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.19.171.253 (253.171.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.19.171.253 (253.171.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:29:52.676672 2026] [security2:error] [pid 21793:tid 21793] [client 34.19.171.253:44252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||niximperial.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "niximperial.com"] [uri "/z9x8c7v6b5-debug-trigger-niximperial.com"] [unique_id "as_KIGctiklU7KILckcSDAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 16:07:57
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:07:49.671023 2026] [security2:error] [pid 3061:tid 3061] [client 34.19.171.253:34686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northfultonneurology.com"] [uri "/dist../.env"] [unique_id "as-o1UaBjywY8IU4TvyEyQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-10-14 14:45:03
(20 hours ago)
Probing for Exploits on ns210
Exploited Host
Web App Attack
🇩🇪
updown.io
2026-10-14 14:26:53
(20 hours ago)
{"level":"info","ts":1791988011.3324382,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791988011.3324382,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.19.171.253","remote_port":"39934","client_ip":"34.19.171.253","proto":"HTTP/2.0","method":"GET","host":"status.plushost.gr","uri":"/","headers":{"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-Site":["none"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Microsoft Edge\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua-Mobile":["?1"],"Priority":["u=0, i"],"Sec-Ch-Ua-Platform":["\"Android\""],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0"],"Sec-Fetch-Dest":["document"],"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middlewa
...
show less
DDoS Attack
Web App Attack
🇬🇧
poundawebsiteltd
2026-10-14 14:23:12
(20 hours ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.19.171. ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.19.171.253 (CA/Canada/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 34.19.171.253 (CA/Canada/253.171.19.34.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 13:58:29
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 09:58:22.577593 2026] [security2:error] [pid 12045:tid 12045] [client 34.19.171.253:55020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mympizzas.com.mx"] [uri "/.htpasswd"] [unique_id "as-KfgH8w7lmjMu2bpmqUgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-10-14 13:46:38
(21 hours ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-14 13:07:56
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 09:07:50.570921 2026] [security2:error] [pid 28335:tid 28335] [client 34.19.171.253:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.neurocolors.com"] [uri "/app/..;/.env"] [unique_id "as9-pjNZieMjILFe_xmv1QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇭
thaizone.com
2026-10-14 13:00:38
(22 hours ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-14 12:41:23
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:41:17.377197 2026] [security2:error] [pid 21395:tid 21395] [client 34.19.171.253:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nyemdr.com"] [uri "/userfiles/x"] [unique_id "as94bep1WvgEa8GgKcK5hwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 12:15:54
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 08:15:49.063702 2026] [security2:error] [pid 22486:tid 22486] [client 34.19.171.253:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pixacast.com"] [uri "/static../.env"] [unique_id "as9ydQmy-XHC1KcxFZP4mgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-14 12:14:06
(22 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-10-14 11:57:52
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.171.253 (253.171.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 07:57:48.167581 2026] [security2:error] [pid 6200:tid 6200] [client 34.19.171.253:43154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.register-yacht-spain.com"] [uri "/media../.env"] [unique_id "as9uPNarf5Xq1Dvvj3RmNwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-10-14 11:41:02
(23 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
