|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 02:15:28.971503 2026] [security2:error] [pid 10120:tid 1017 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 02:15:28.971503 2026] [security2:error] [pid 10120:tid 10170] [client 34.80.133.7:44176] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.m3sxa.com|F|2"] [data ".m3sxa.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.m3sxa.com"] [uri "/z9x8c7v6b5-debug-trigger-www.m3sxa.com"] [unique_id "ar9MADi2KoR3d5SjFAbf_wAAAVE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 01:50:20.205665 2026] [security2:error] [pid 4867:tid 4867] ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 01:50:20.205665 2026] [security2:error] [pid 4867:tid 4867] [client 34.80.133.7:53960] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||futuresgrowhere.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "futuresgrowhere.com"] [uri "/z9x8c7v6b5-debug-trigger-futuresgrowhere.com"] [unique_id "ar9GHLpXT2JamNP5TpB5TQAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
rh24
|
|
(badbots) Bad bot user-agent [redacted] from 34.80.133.7 (TW/Taiwan/7.133.80.34.bc.googleusercontent.com)
|
Hacking
|
|
🇨🇭
🇨🇭 Hosting
|
|
Automated WAF report: 100-125 blocked requests from this IP detected by our WAF.
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 00:30:00.826490 2026] [security2:error] [pid 10174:tid 1017 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 00:30:00.826490 2026] [security2:error] [pid 10174:tid 10174] [client 34.80.133.7:36512] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fynyx.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fynyx.com"] [uri "/z9x8c7v6b5-debug-trigger-fynyx.com"] [unique_id "ar8zSKCtdJWTJylBfZasZgAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇪🇸
elcruzado.es
|
|
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.80.133.7 (TW/Taiwan/7.133.80.34.bc.googleusercontent.com)
|
Bad Web Bot
|
|
🇧🇪
cmbplf
|
|
152 requests with url.path */@fs/*
|
Brute-Force
Bad Web Bot
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
Anonymous
|
|
| Multiple common web attacks from same source ip. (multiple servers)
|
Web App Attack
Hacking
SQL Injection
|
|
🇵🇱
wielorzeczownik
|
|
5 failed attempts
2026-10-02 00:02:55 GET /app/.env -> 404
2026-10-02 00:02:55 GET /server/.env -> 404
2026-10-02 00:02:55 GET /src/.env -> 404
2026-10-02 00:02:55 GET /web/.env -> 404
2026-10-02 00:02:55 GET /public/.env -> 404
|
Web App Attack
Hacking
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇿🇦
vanderhost
|
|
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/firebase-admin.json via rule: /config
|
Web App Attack
Bad Web Bot
|
|
🇩🇪
Scheerer Logistik GmbH & Co KG
|
|
Automated web scanner detected by HAProxy Security Center. Node: HA03. Reason: Fail2ban HAProxy Scanner
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:26:42.761467 2026] [security2:error] [pid 19190:tid 1919 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:26:42.761467 2026] [security2:error] [pid 19190:tid 19190] [client 34.80.133.7:48170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.fxbgsanta.com"] [uri "/.env.dev"] [unique_id "ar6X0s0xHfMLcYsphg5UkgAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:04:43.362967 2026] [security2:error] [pid 18392:tid 1839 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.133.7 (7.133.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 12:04:43.362967 2026] [security2:error] [pid 18392:tid 18392] [client 34.80.133.7:37004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.fundaciondamashcc.org.ec"] [uri "/userfiles"] [unique_id "ar6EmwU0GCbHy8azNmYT7AAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
