🇩🇪
klaus_ph
2026-09-26 17:29:06
(2 weeks ago)
2026-09-25 18:44:34,568 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.77.10.98
...
Bad Web Bot
🇮🇳
evicky2002
2026-09-23 06:00:01
(2 weeks ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇲🇽
octageeks.com
2026-09-23 04:22:31
(2 weeks ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇨🇦
lakered
2026-09-23 02:20:46
(2 weeks ago)
Detectors: [NGINX, SURICATA] | Reasons: Suricata: Web Server attack | Automated scan targeting an un ...
show more
Detectors: [NGINX, SURICATA] | Reasons: Suricata: Web Server attack | Automated scan targeting an unauthorized host or default server sinkhole | Evidence: Verified-Bot-JA4-Match (t13d1516h2) | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Web App Attack
Hacking
Port Scan
Bad Web Bot
🇮🇩
Burayot
2026-09-23 00:44:16
(2 weeks ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.77.10.98 (BE/Belgium/98.10.77.34. ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.77.10.98 (BE/Belgium/98.10.77.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 17:44:34
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:44:30.388248 2026] [security2:error] [pid 14747:tid 14747] [client 34.77.10.98:51342] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||389thbg.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "389thbg.com"] [uri "/z9x8c7v6b5-debug-trigger-389thbg.com"] [unique_id "arK-fhV7Ec7ylaRNNx58fgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:16:44
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:16:36.919405 2026] [security2:error] [pid 3207:tid 3207] [client 34.77.10.98:59686] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aiamur.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aiamur.com"] [uri "/z9x8c7v6b5-debug-trigger-aiamur.com"] [unique_id "arKp5AHQO6C5WbKAqZNb3wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-09-22 16:01:50
(2 weeks ago)
Bad bot identified by user agent
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-22 15:50:28
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:50:23.810396 2026] [security2:error] [pid 19413:tid 19413] [client 34.77.10.98:53438] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alessiaalessandra.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alessiaalessandra.com"] [uri "/z9x8c7v6b5-debug-trigger-alessiaalessandra.com"] [unique_id "arKjv2l0gRKr2d_o83XakAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-22 15:43:00
(2 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 15:20:03
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:19:56.792792 2026] [security2:error] [pid 1222:tid 1222] [client 34.77.10.98:34122] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||altered-egos.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "altered-egos.com"] [uri "/z9x8c7v6b5-debug-trigger-altered-egos.com"] [unique_id "arKcnEOp26Pi9PKIPaRyBAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:59:00
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:58:55.698991 2026] [security2:error] [pid 11043:tid 11043] [client 34.77.10.98:48112] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||amybeam.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "amybeam.com"] [uri "/z9x8c7v6b5-debug-trigger-amybeam.com"] [unique_id "arKXr5xKew_4iJdtJFxQYQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:24:40
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:24:35.725338 2026] [security2:error] [pid 32532:tid 32532] [client 34.77.10.98:58122] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||appsdips.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "appsdips.com"] [uri "/z9x8c7v6b5-debug-trigger-appsdips.com"] [unique_id "arKPo1Fi_puao8aBpZQlEAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
noise.agency
2026-09-22 14:12:54
(2 weeks ago)
34.77.10.98 (BE/Belgium/98.10.77.34.bc.googleusercontent.com), more than 30 Apache 404 hits
Hacking
🇺🇸
TPI-Abuse
2026-09-22 14:05:21
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.10.98 (98.10.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:05:16.440900 2026] [security2:error] [pid 32295:tid 32295] [client 34.77.10.98:60470] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aroilcontrolsystem.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aroilcontrolsystem.com"] [uri "/z9x8c7v6b5-debug-trigger-aroilcontrolsystem.com"] [unique_id "arKLHMX4bUldgmXrKrBcPgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
