๐บ๐ธ
TPI-Abuse
2026-10-11 10:42:03
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 06:41:58.254004 2026] [security2:error] [pid 12148:tid 12148] [client 34.81.33.186:46752] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||mtalame.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mtalame.com"] [uri "/z9x8c7v6b5-debug-trigger-mtalame.com"] [unique_id "astn9n5al2HmuIT4FNdNKAAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-11 07:20:06
(2 days ago)
| [Dangerous/Taiwan] Aggressive IP 34.81.33.186 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/Taiwan] Aggressive IP 34.81.33.186 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
๐ฉ๐ช
rh24
2026-10-11 07:12:58
(2 days ago)
(badbots) Bad bot user-agent [redacted] from 34.81.33.186 (TW/Taiwan/186.33.81.34.bc.googleuserconte ...
show more
(badbots) Bad bot user-agent [redacted] from 34.81.33.186 (TW/Taiwan/186.33.81.34.bc.googleusercontent.com)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-11 07:06:40
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:06:33.164585 2026] [security2:error] [pid 25172:tid 25172] [client 34.81.33.186:47566] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||postermodelsworldwideinc.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "postermodelsworldwideinc.com"] [uri "/z9x8c7v6b5-debug-trigger-postermodelsworldwideinc.com"] [unique_id "ass1efBDoTCfKMdN0GI1hQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 06:51:11
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 02:51:06.962267 2026] [security2:error] [pid 17290:tid 17420] [client 34.81.33.186:34016] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lasertagmetairie.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lasertagmetairie.com"] [uri "/z9x8c7v6b5-debug-trigger-lasertagmetairie.com"] [unique_id "assx2gmPrFcMCGKByPqpDAAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 06:26:04
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 02:25:56.482677 2026] [security2:error] [pid 1651:tid 1651] [client 34.81.33.186:41814] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gibraltar-boat-registration.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gibraltar-boat-registration.com"] [uri "/z9x8c7v6b5-debug-trigger-gibraltar-boat-registration.com"] [unique_id "assr9M3kbx2MXVA2MJbndQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-11 05:07:37
(2 days ago)
2.702 requests from abuseipdb.com blacklisted IP (1w6d22h)
Brute-Force
Bad Web Bot
๐ฉ๐ช
paissangroup
2026-10-11 00:38:36
(2 days ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 00:25:06
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:24:57.681132 2026] [security2:error] [pid 17598:tid 17598] [client 34.81.33.186:47380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ggisoft.com"] [uri "/.git/config"] [unique_id "asrXWUkqiChjamVTWSMpIQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 23:33:10
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:33:04.448491 2026] [security2:error] [pid 23393:tid 23417] [client 34.81.33.186:45900] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gestorialuengo.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gestorialuengo.com"] [uri "/z9x8c7v6b5-debug-trigger-gestorialuengo.com"] [unique_id "asrLMHUfvA_BK5VighUiegAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-10 23:21:15
(2 days ago)
34.81.33.186 - - [11/Oct/2026:01:21:14 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux ...
show more
34.81.33.186 - - [11/Oct/2026:01:21:14 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.81.33.186 - - [11/Oct/2026:01:21:14 +0200] "GET /z9x8c7v6b5-debug-trigger-georvice.com HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.81.33.186 - - [11/Oct/2026:01:21:14 +0200] "GET /account/login HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.81.33.186 - - [11/Oct/2026:01:21:14 +0200] "GET /panel HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.81.33.186 - - [11/Oct/2026:01:21:14 +0200] "GET /admin HTTP/1.1" 403 183 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.81.33.186 - - [11/Oct/2026:01:21:14 +0200] "GET /r1dkvofuua1
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-10 23:20:07
(2 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 23:16:33
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.81.33.186 (186.33.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:16:30.091553 2026] [security2:error] [pid 25061:tid 25113] [client 34.81.33.186:58470] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||georgementz.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "georgementz.com"] [uri "/z9x8c7v6b5-debug-trigger-georgementz.com"] [unique_id "asrHTvRTH7goAlSFGmPaIAAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-10 23:16:22
(2 days ago)
34.81.33.186 - - [11/Oct/2026:01:16:19 +0200] "GET /scripts/.env HTTP/2.0" 404 297 "-" "Mozilla/5.0 ...
show more
34.81.33.186 - - [11/Oct/2026:01:16:19 +0200] "GET /scripts/.env HTTP/2.0" 404 297 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.81.33.186 - - [11/Oct/2026:01:16:19 +0200] "GET /agents/.env HTTP/2.0" 404 297 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.81.33.186 - - [11/Oct/2026:01:16:19 +0200] "GET /chatbot/.env HTTP/2.0" 403 299 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.81.33.186 - - [11/Oct/2026:01:16:19 +0200] "GET /agent/.env HTTP/2.0" 404 297 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.81.33.186 - - [11/Oct/2026:01:16:19 +0200] "GET /llm/.env HTTP/2.0" 403 299 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.81.33.186 - - [11/Oct/2026:01:16:19 +0200] "GET /bot/.env HTTP/2.0" 403 299 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; O
show less
Bad Web Bot
๐บ๐ธ
jormaster3k
2026-10-10 23:15:56
(2 days ago)
Attack against Apache (too many 404s)
Web App Attack