🇲🇽
octageeks.com
2026-10-01 04:17:17
(57 minutes ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 16:21:57
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 12:21:53.849692 2026] [security2:error] [pid 8959:tid 8959] [client 34.7.168.93:54276] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||acmax.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "acmax.com"] [uri "/z9x8c7v6b5-debug-trigger-acmax.com"] [unique_id "ar03ITI0MLvhzu8vNlpUQgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 15:55:44
(13 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:55:39.402677 2026] [security2:error] [pid 31483:tid 31483] [client 34.7.168.93:35242] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.chitsey.com|F|2"] [data ".chitsey.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.chitsey.com"] [uri "/z9x8c7v6b5-debug-trigger-www.chitsey.com"] [unique_id "ar0w-1Jt7FyHD3yT8SbeRAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-30 15:17:10
(13 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 15:13:22
(14 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 11:13:18.230622 2026] [security2:error] [pid 17205:tid 17205] [client 34.7.168.93:33424] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com|F|2"] [data ".78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/z9x8c7v6b5-debug-trigger-www.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [unique_id "ar0nDtltzEm4hSoUVOmHZwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 14:42:23
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 10:42:18.060344 2026] [security2:error] [pid 32374:tid 32374] [client 34.7.168.93:41920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cooteconsultinggroup.com"] [uri "/.env"] [unique_id "ar0fysD2n0KbYStDDRklUwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 14:11:17
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 10:11:09.866047 2026] [security2:error] [pid 8175:tid 8175] [client 34.7.168.93:36920] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.carboncreekwood.com|F|2"] [data ".carboncreekwood.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.carboncreekwood.com"] [uri "/z9x8c7v6b5-debug-trigger-www.carboncreekwood.com"] [unique_id "ar0YfUjMUO3K0ljR3_4LJwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 13:41:18
(15 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 09:41:10.065399 2026] [security2:error] [pid 16180:tid 16180] [client 34.7.168.93:40554] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||consolidatedoperationsgroup.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "consolidatedoperationsgroup.com"] [uri "/z9x8c7v6b5-debug-trigger-consolidatedoperationsgroup.com"] [unique_id "ar0Rdjtzr4kAeCwqgjC1OgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 13:07:17
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 09:07:13.212205 2026] [security2:error] [pid 29023:tid 29023] [client 34.7.168.93:40052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.calebdavison.com"] [uri "/images../.env"] [unique_id "ar0Jga8Fu4X8CQEOJ25hRQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 12:36:03
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:35:56.334350 2026] [security2:error] [pid 14094:tid 14094] [client 34.7.168.93:40916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.avalderlaw.com"] [uri "/static../.env"] [unique_id "ar0CLKl9zZc9OKa3XJPdeQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 12:11:33
(17 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:11:25.233501 2026] [security2:error] [pid 17328:tid 17328] [client 34.7.168.93:55640] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.craftammie.com|F|2"] [data ".craftammie.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.craftammie.com"] [uri "/z9x8c7v6b5-debug-trigger-www.craftammie.com"] [unique_id "arz8bW009HcPN2hvkWeZrAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 11:55:23
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:55:17.562380 2026] [security2:error] [pid 28607:tid 28607] [client 34.7.168.93:36968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.darkalleyproductions.com"] [uri "/.env.js"] [unique_id "arz4pc0B73MU8e0yyg26BAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
robotstxt
2026-09-30 11:52:55
(17 hours ago)
34.7.168.93 - - [30/Sep/2026:11:52:13 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 36424 "-" "Mozi ...
show more
34.7.168.93 - - [30/Sep/2026:11:52:13 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 36424 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "34.7.168.93" edge="162.159.106.182"
34.7.168.93 - - [30/Sep/2026:11:52:19 +0000] "GET /.env.js HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "34.7.168.93" edge="104.22.148.30"
34.7.168.93 - - [30/Sep/2026:11:52:24 +0000] "GET /.dockerenv HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" "34.7.168.93" edge="104.23.172.52"
34.7.168.93 - - [30/Sep/2026:11:52:25 +0000] "GET /.env.prod HTTP/2.0" 403 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" "34.7.168.93" edge="104.23.172.52"
34.7.168.93 - - [30/Sep/2026:11:52:25 +0000] "GET /.env.save HTTP/2.0" 403 0 "-" "M
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 11:34:31
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:34:26.906963 2026] [security2:error] [pid 25625:tid 25650] [client 34.7.168.93:34574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventuresdotcom.com"] [uri "/docker/.env"] [unique_id "arzzwkTyFob6tqikbBP2VQAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 11:18:32
(17 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.168.93 (93.168.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:18:27.942181 2026] [security2:error] [pid 1211:tid 1211] [client 34.7.168.93:34586] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.darrowco.com|F|2"] [data ".darrowco.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.darrowco.com"] [uri "/z9x8c7v6b5-debug-trigger-www.darrowco.com"] [unique_id "arzwA6JMgOU5pUf2gexxqQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
