๐บ๐ธ
TPI-Abuse
2026-09-22 18:04:40
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:04:35.000627 2026] [security2:error] [pid 15812:tid 15957] [client 34.73.194.0:37688] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.potashbarn.com|F|2"] [data ".potashbarn.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.potashbarn.com"] [uri "/z9x8c7v6b5-debug-trigger-www.potashbarn.com"] [unique_id "arLDMlYZ76xF58oh2QXaCwAAAlc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-22 14:06:33
(3 weeks ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 13:29:21
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:29:13.411251 2026] [security2:error] [pid 28106:tid 28106] [client 34.73.194.0:38234] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||36hoursonly.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "36hoursonly.com"] [uri "/z9x8c7v6b5-debug-trigger-36hoursonly.com"] [unique_id "arKCqVGwFR4lrwr7V0fdpwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 12:36:36
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:36:32.570062 2026] [security2:error] [pid 11491:tid 11491] [client 34.73.194.0:55640] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||389thbg.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "389thbg.com"] [uri "/z9x8c7v6b5-debug-trigger-389thbg.com"] [unique_id "arJ2UKWbGgYst2ixc0B6AQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 12:10:09
(3 weeks ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
Anonymous
2026-09-22 12:08:57
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 11:48:12
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:48:06.324262 2026] [security2:error] [pid 27552:tid 27552] [client 34.73.194.0:38990] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||3fabgals.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3fabgals.com"] [uri "/z9x8c7v6b5-debug-trigger-3fabgals.com"] [unique_id "arJq9hQ3xVVu-i3NzJECNgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 11:06:56
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 07:06:51.843090 2026] [security2:error] [pid 7933:tid 7973] [client 34.73.194.0:41994] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||3stepreviewforyou.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "3stepreviewforyou.com"] [uri "/z9x8c7v6b5-debug-trigger-3stepreviewforyou.com"] [unique_id "arJhS6YtTkFWwP-GXBe7YQAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 09:55:18
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:55:13.057580 2026] [security2:error] [pid 4279:tid 4279] [client 34.73.194.0:47558] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||415test.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "415test.com"] [uri "/z9x8c7v6b5-debug-trigger-415test.com"] [unique_id "arJQgeUkUo0miP3gnxJ-uQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
Mediashaker
2026-09-22 09:45:55
(3 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.73.194.0 (US/Unit ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.73.194.0 (US/United States/0.194.73.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐ฉ๐ช
Vegascosmetics
2026-09-22 09:41:43
(3 weeks ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after repeated server-error fuzzing. Eviden ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after repeated server-error fuzzing. Evidence: Repeated Server Errors (500)
show less
Hacking
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 09:38:31
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:38:24.804460 2026] [security2:error] [pid 1995:tid 1995] [client 34.73.194.0:42266] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bridgital.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bridgital.com"] [uri "/z9x8c7v6b5-debug-trigger-bridgital.com"] [unique_id "arJMkFtuGpSdDMETjc_OtAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 09:22:28
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.194.0 (0.194.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:22:24.198491 2026] [security2:error] [pid 18677:tid 18677] [client 34.73.194.0:36564] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||flashbackmusicmemories.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "flashbackmusicmemories.com"] [uri "/z9x8c7v6b5-debug-trigger-flashbackmusicmemories.com"] [unique_id "arJI0KXHoi2dkDueoYecgQAAAG0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 08:40:58
(3 weeks ago)
GET public/env.js | UA: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/) | Time: 2026-09-22 08: ...
show more
GET public/env.js | UA: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/) | Time: 2026-09-22 08:40:58 UTC
show less
Web App Attack
๐ฎ๐น
VHosting
2026-09-22 08:40:03
(3 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack