🇳🇱
GabrielJST
2026-10-10 23:58:30
(3 minutes ago)
(mod_security) mod_security triggered on hostname [redacted] 34.39.183.51 (BR/Brazil/51.183.39.34.bc ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.39.183.51 (BR/Brazil/51.183.39.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-10-10 23:58:28
(3 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:58:21.558859 2026] [security2:error] [pid 4236:tid 4236] [client 34.39.183.51:48634] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||supportconvalelementary.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "supportconvalelementary.com"] [uri "/z9x8c7v6b5-debug-trigger-supportconvalelementary.com"] [unique_id "asrRHSOLbKVP-OT2MUF85gAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 23:36:06
(26 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:35:58.560320 2026] [security2:error] [pid 27699:tid 27699] [client 34.39.183.51:41884] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||suedblick.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "suedblick.com"] [uri "/z9x8c7v6b5-debug-trigger-suedblick.com"] [unique_id "asrL3sRH9wn0ThemO3_sOwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Stara
2026-10-10 23:25:51
(36 minutes ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack
🇬🇧
Mendip_Defender
2026-10-10 23:22:15
(40 minutes ago)
34.39.183.51 - - [11/Oct/2026:00:22:14 +0100] "GET /admin HTTP/1.1" 404 1227 "http://www.stringertra ...
show more
34.39.183.51 - - [11/Oct/2026:00:22:14 +0100] "GET /admin HTTP/1.1" 404 1227 "http://www.stringertrailriding.com/admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.39.183.51 - - [11/Oct/2026:00:22:14 +0100] "GET /user/login HTTP/1.1" 404 1227 "http://www.stringertrailriding.com/user/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.39.183.51 - - [11/Oct/2026:00:22:15 +0100] "GET /users/login HTTP/1.1" 404 1227 "http://www.stringertrailriding.com/users/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 23:12:44
(49 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:12:39.042740 2026] [security2:error] [pid 26336:tid 26336] [client 34.39.183.51:49516] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||stoneageartifacts.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "stoneageartifacts.com"] [uri "/z9x8c7v6b5-debug-trigger-stoneageartifacts.com"] [unique_id "asrGZzZnmVrn0bMB6rJ16gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CDO
2026-10-10 23:10:58
(51 minutes ago)
URL Injection attempt detected. Automated web attack.
Hacking
Bad Web Bot
Web App Attack
2026-10-10 23:01:32
(1 hour ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 22:51:02
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:50:57.870631 2026] [security2:error] [pid 15876:tid 15876] [client 34.39.183.51:47046] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||starthreadingsalon.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "starthreadingsalon.com"] [uri "/z9x8c7v6b5-debug-trigger-starthreadingsalon.com"] [unique_id "asrBUWxZmbUC8I9OruNgJwAAAF0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Starburst SysOp Team
2026-10-10 22:47:37
(1 hour ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-mnz6-1)
show less
Bad Web Bot
🇨🇦
zXero
2026-10-10 22:35:08
(1 hour ago)
Fail2Ban automatic report - jail: web-exploit
Brute-Force
SSH
DDoS Attack
🇺🇸
TPI-Abuse
2026-10-10 22:27:08
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:27:01.567374 2026] [security2:error] [pid 31435:tid 31435] [client 34.39.183.51:51600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "springmeadowventures.com"] [uri "/api/.env"] [unique_id "asq7tYC0QnTb3wn4AHMqKAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 22:12:07
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:12:00.971617 2026] [security2:error] [pid 23101:tid 23101] [client 34.39.183.51:47782] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||spectorworld.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spectorworld.com"] [uri "/z9x8c7v6b5-debug-trigger-spectorworld.com"] [unique_id "asq4MBhkaR1WBpN0uDAtgQAAAHU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-10 22:06:03
(1 hour ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 21:48:59
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.39.183.51 (51.183.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 17:48:53.602490 2026] [security2:error] [pid 30367:tid 30367] [client 34.39.183.51:56116] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||soonerstone.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "soonerstone.com"] [uri "/z9x8c7v6b5-debug-trigger-soonerstone.com"] [unique_id "asqyxfydkbZ5FrszKS3JkgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
