🇳🇱
e.fierstra
2026-09-20 15:28:58
(3 weeks ago)
excessive HTTP 404 errors
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-20 15:01:04
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.77.225.187 (187.225.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.225.187 (187.225.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:00:55.868461 2026] [security2:error] [pid 27056:tid 27056] [client 34.77.225.187:51644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigskyprints.com"] [uri "/.env.prod"] [unique_id "aq_1J5hXWSLCWJC0QeBnJAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-09-20 14:45:01
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.225.187 (BE/Belgium/187.225.77.34.bc.goog ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.225.187 (BE/Belgium/187.225.77.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 14:28:10
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.225.187 (187.225.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.225.187 (187.225.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:28:06.220095 2026] [security2:error] [pid 24312:tid 24312] [client 34.77.225.187:58768] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bigcoins.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bigcoins.com"] [uri "/z9x8c7v6b5-debug-trigger-bigcoins.com"] [unique_id "aq_tduTxK4p8X_KwWyq8dgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-20 14:18:59
(3 weeks ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.77.225.187 - - [20/Sep/2026:16:18:57 +0200] "GET /.git/config HTTP/2.0" 403 372 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 14:03:43
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.77.225.187 (187.225.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.225.187 (187.225.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:03:40.479707 2026] [security2:error] [pid 1381:tid 1381] [client 34.77.225.187:47808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biff0.com"] [uri "/.git/HEAD"] [unique_id "aq_nvHx8wjsN6mGI5TOq4AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-20 13:34:11
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 13:33:30
(3 weeks ago)
(mod_security) mod_security (id:210580) triggered by 34.77.225.187 (187.225.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210580) triggered by 34.77.225.187 (187.225.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:33:25.338215 2026] [security2:error] [pid 19343:tid 19343] [client 34.77.225.187:54250] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||biblemathprojects.com|F|2"] [data "Matched Data: proc/self/environ found within ARGS:path: ../../../../proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "biblemathprojects.com"] [uri "/userfiles"] [unique_id "aq_gpYJDDyik7AM0fWsezQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-20 13:33:01
(3 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
🇮🇹
VHosting
2026-09-20 13:15:03
(3 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 12:34:44
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.77.225.187 (187.225.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.225.187 (187.225.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:34:39.793323 2026] [security2:error] [pid 25412:tid 25412] [client 34.77.225.187:59610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bgellis.com"] [uri "/.env.example"] [unique_id "aq_S37_qDGzz_9iDYzrSCAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-20 12:20:47
(3 weeks ago)
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 (compatible; Byt ...
show more
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36 (+3 more) | path: /.env (+15 more) | 2026-09-20 12:20 UTC
show less
Bad Web Bot
🇺🇸
nyt
2026-09-20 11:58:54
(3 weeks ago)
Sensitive File Probe
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 11:56:03
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.77.225.187 (187.225.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.77.225.187 (187.225.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 07:55:59.646636 2026] [security2:error] [pid 11371:tid 11375] [client 34.77.225.187:54776] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aussiepens.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aussiepens.com"] [uri "/z9x8c7v6b5-debug-trigger-aussiepens.com"] [unique_id "aq_JzzGpyP_qF6a1Uxe9wwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack