๐บ๐ธ
TPI-Abuse
2026-10-11 00:02:48
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:02:41.604233 2026] [security2:error] [pid 11557:tid 11557] [client 34.80.50.12:33150] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||postermodelsworldwideinc.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "postermodelsworldwideinc.com"] [uri "/z9x8c7v6b5-debug-trigger-postermodelsworldwideinc.com"] [unique_id "asrSIVnfCdvqS95UNr9smgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 23:45:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:45:27.568698 2026] [security2:error] [pid 13771:tid 13771] [client 34.80.50.12:47878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "indie100.com"] [uri "/.git/HEAD"] [unique_id "asrOF1HQaSkwVhIW-OF1PwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
psauxit
2026-10-10 23:17:41
(1 day ago)
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrp ...
show more
Fail2Ban - NGINX bad requests 400-401-403-404-444, high level vulnerability scanning, commonly xmlrpc_attack, wp-login brute force, excessive crawling/scraping
show less
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-10 23:00:26
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:00:19.627355 2026] [security2:error] [pid 25437:tid 25437] [client 34.80.50.12:50900] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||debosden.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "debosden.com"] [uri "/z9x8c7v6b5-debug-trigger-debosden.com"] [unique_id "asrDg8VsJZb1tjsi69_F8gAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 22:32:49
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:32:42.579219 2026] [security2:error] [pid 18873:tid 18873] [client 34.80.50.12:56950] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dcmillerjr.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dcmillerjr.com"] [uri "/z9x8c7v6b5-debug-trigger-dcmillerjr.com"] [unique_id "asq9ChkPkiYDmsM-kAjdSQAAAGA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
radardatelecom
2026-10-10 22:27:03
(1 day ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-10 22:20:09
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฆ๐น
penguin-solutions.at
2026-10-10 22:14:18
(1 day ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
Anonymous
2026-10-10 22:11:22
(1 day ago)
Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, BadPath=23,7, Rate=20, Diversity=20.
show less
Web App Attack
DDoS Attack
Bad Web Bot
Anonymous
2026-10-10 22:10:08
(1 day ago)
| [Dangerous/Taiwan] Aggressive IP 34.80.50.12 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/Taiwan] Aggressive IP 34.80.50.12 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
๐ฉ๐ช
yitzhaq
2026-10-10 22:06:10
(1 day ago)
34.80.50.12 - - [11/Oct/2026:00:06:07 +0200] "GET /gc-service.json HTTP/2.0" 404 28007 "-" "CCBot/2. ...
show more
34.80.50.12 - - [11/Oct/2026:00:06:07 +0200] "GET /gc-service.json HTTP/2.0" 404 28007 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.80.50.12 - - [11/Oct/2026:00:06:07 +0200] "GET /firebase.json HTTP/2.0" 404 28025 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.80.50.12 - - [11/Oct/2026:00:06:07 +0200] "GET /push_config.json HTTP/2.0" 404 28016 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.80.50.12 - - [11/Oct/2026:00:06:07 +0200] "GET /google-services.json HTTP/2.0" 404 28016 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.80.50.12 - - [11/Oct/2026:00:06:08 +0200] "GET /admin/.env HTTP/2.0" 403 300 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email])"
34.80.50.12 - - [11/Oct/2026:00:06:08 +0200] "GET /config/.env HTTP/2.0" 403 300 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchB
show less
Bad Web Bot
๐ฏ๐ต
Valhalla
2026-10-10 22:01:05
(1 day ago)
/z9x8c7v6b5-debug-trigger-davidgreenmusician.com
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 21:55:15
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.50.12 (12.50.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 17:55:11.247194 2026] [security2:error] [pid 31527:tid 31527] [client 34.80.50.12:46200] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||davesastro.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "davesastro.com"] [uri "/z9x8c7v6b5-debug-trigger-davesastro.com"] [unique_id "asq0P3bojUZdyGhcwH2k2AAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-10 21:42:20
(1 day ago)
Web application attack detected.
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-10 21:29:40
(1 day ago)
Excessive multi-domain requests
Brute-Force