🇺🇸
maxasp.net
2026-09-30 19:24:34
(2 weeks ago)
F5 Connection Limit to atl-ssl1.maximtech.com 150 connections on a fixed interval of 3 (Oldest Hit 8 ...
show more
F5 Connection Limit to atl-ssl1.maximtech.com 150 connections on a fixed interval of 3 (Oldest Hit 8 seconds)
show less
DDoS Attack
🇺🇸
kosada.com
2026-09-30 18:18:19
(2 weeks ago)
Repeated exploit attempts, for example: /api/graphql {x22queryx22:x22{ __schema { types { name field ...
show more
Repeated exploit attempts, for example: /api/graphql {x22queryx22:x22{ __schema { types { name fields { name args { name defaultValue } } } } }x22} (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36")
show less
Web App Attack
🇺🇸
masterguru
2026-09-30 17:13:25
(2 weeks ago)
BAD BOT - Detected and Blocked.. Matched phrase "ChatGPT-User" at REQUEST_HEADERS:User-Agent. (11000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "ChatGPT-User" at REQUEST_HEADERS:User-Agent. (1100000-164)
show less
Bad Web Bot
🇺🇸
mnsf
2026-09-30 16:06:04
(2 weeks ago)
Scanning/Probing (28)
Request Overload (101)
Brute-Force
Web App Attack
🇺🇸
SirHiltonBradley
2026-09-30 15:50:14
(2 weeks ago)
[Wed Sep 30 11:50:59.745411 2026] [authz_core:error] [client 34.21.83.102:0] AH01630: client denied ...
show more
[Wed Sep 30 11:50:59.745411 2026] [authz_core:error] [client 34.21.83.102:0] AH01630: client denied by server configuration: [docroot]/.htpasswd
[Wed Sep 30 11:51:07.358479 2026] [authz_core:error] [client 34.21.83.102:0] AH01630: client denied by server configuration: [docroot]/server-status
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 15:28:22
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:28:15.580141 2026] [security2:error] [pid 14413:tid 14413] [client 34.21.83.102:39392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eatinnola.anthonyjoseph.us"] [uri "/.htpasswd"] [unique_id "ar0qjxKcamuqkeCSZwMdwwAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 14:38:13
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 10:38:09.457933 2026] [security2:error] [pid 21242:tid 21242] [client 34.21.83.102:46822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.alosi.us"] [uri "/.htpasswd"] [unique_id "ar0e0dYjPJoyFr9bCQPGjwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 14:08:11
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 10:08:04.579864 2026] [security2:error] [pid 11531:tid 11531] [client 34.21.83.102:39688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.galysh.us"] [uri "/core/.env"] [unique_id "ar0XxALymkEnY6J2VhAvQQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 13:52:27
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 09:52:23.954302 2026] [security2:error] [pid 26820:tid 26820] [client 34.21.83.102:53860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dlptir.us"] [uri "/.htpasswd"] [unique_id "ar0UF0Yn8O1gN9rQ-X_zwgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
masterguru
2026-09-30 13:38:36
(2 weeks ago)
BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:user-agent. (1100000-169)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-30 13:17:32
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 09:17:27.950805 2026] [security2:error] [pid 14469:tid 14469] [client 34.21.83.102:41486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.vandee.us"] [uri "/wp-config.php.swp"] [unique_id "ar0L59Py_y8MOsIeKrE5wQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 12:13:38
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:13:31.091645 2026] [security2:error] [pid 9507:tid 9507] [client 34.21.83.102:56132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.3905ccn.us"] [uri "/.htpasswd"] [unique_id "arz865JtZt8KQcEud96NkgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 11:50:30
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:50:24.739694 2026] [security2:error] [pid 24004:tid 24004] [client 34.21.83.102:48230] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.kirt.us|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.kirt.us"] [uri "/config/master.key"] [unique_id "arz3gBtn1aVEE2xg06zFlAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 11:33:44
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.83.102 (102.83.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:33:39.521291 2026] [security2:error] [pid 11509:tid 11509] [client 34.21.83.102:59506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galil.passy.us"] [uri "/static../.env"] [unique_id "arzzkyoY4EvB0X1GEjP47QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
SketchyDude
2026-09-30 11:07:31
(2 weeks ago)
Banned by Fail2Ban jail: apache-fakegooglebot
Bad Web Bot