🇫🇷
dynamix
2026-09-22 09:56:17
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mnsf
2026-09-22 09:05:31
(1 day ago)
Scanning/Probing (29)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 08:51:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.73.221.95 (95.221.73.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.73.221.95 (95.221.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 04:51:39.483772 2026] [security2:error] [pid 25689:tid 25689] [client 34.73.221.95:45606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "43cambridge.com"] [uri "/.env"] [unique_id "arJBm7cek3aFT2I9ARoZuwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
lufi
2026-09-22 08:45:15
(1 day ago)
2026-09-22T10:45:14+02:00 lufischer04 ids442 2026-09-22 10:45:14 34.73.221.95: blacklistedPath: /.en ...
show more
2026-09-22T10:45:14+02:00 lufischer04 ids442 2026-09-22 10:45:14 34.73.221.95: blacklistedPath: /.env
...
show less
Web Spam
Brute-Force
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 07:27:40
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.73.221.95 (95.221.73.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.221.95 (95.221.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 03:27:33.385281 2026] [security2:error] [pid 20742:tid 20742] [client 34.73.221.95:39516] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||48consultancy.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "48consultancy.com"] [uri "/z9x8c7v6b5-debug-trigger-48consultancy.com"] [unique_id "arIt5cBrB08z6JgJ6zWfJQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
magnetosphere-tarpit
2026-09-22 07:16:43
(1 day ago)
Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not ...
show more
Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not exist on this host. Tarpitted, then banned: 10 requests within 24h0m0s
show less
Port Scan
Bad Web Bot
Web App Attack
🇩🇰
HostingGroup
2026-09-22 06:46:53
(1 day ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 11. First blocked: 2026-09-22.
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 06:35:39
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.73.221.95 (95.221.73.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.73.221.95 (95.221.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 02:35:34.558715 2026] [security2:error] [pid 10149:tid 10149] [client 34.73.221.95:39112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sicktracks.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sicktracks.com"] [uri "/z9x8c7v6b5-debug-trigger-sicktracks.com"] [unique_id "arIhtieXciLL71EKx16dAwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack