🇺🇸
TPI-Abuse
2026-10-11 01:37:51
(14 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:37:44.106274 2026] [security2:error] [pid 25552:tid 25552] [client 34.84.73.73:50446] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||randeen.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "randeen.com"] [uri "/z9x8c7v6b5-debug-trigger-randeen.com"] [unique_id "asroaIBQ4JHAfHC5V-UAUwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ramazan
2026-10-11 01:24:46
(27 minutes ago)
Fail2Ban: nginx-4xx | Failures: 10 | Log: /.vite/manifest.json /bq3svynm28hwqsv7rz0r /build/manifest ...
show more
Fail2Ban: nginx-4xx | Failures: 10 | Log: /.vite/manifest.json /bq3svynm28hwqsv7rz0r /build/manifest.json /dist/.vite/manifest.json /dist/manifest.json
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-11 01:19:06
(33 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:19:00.866527 2026] [security2:error] [pid 8455:tid 8455] [client 34.84.73.73:41632] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rallyegroup.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rallyegroup.com"] [uri "/z9x8c7v6b5-debug-trigger-rallyegroup.com"] [unique_id "asrkBNOcliUuTf2JOnto-AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-10-11 01:01:09
(51 minutes ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-10-11 00:47:19
(1 hour ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-11 00:45:04
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:44:56.027773 2026] [security2:error] [pid 28005:tid 28005] [client 34.84.73.73:47656] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||radtraininginc.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "radtraininginc.com"] [uri "/z9x8c7v6b5-debug-trigger-radtraininginc.com"] [unique_id "asrcCC4R55FGjbfws41I4QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
j-tap
2026-10-11 00:40:38
(1 hour ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
🇬🇧
consul.to
2026-10-11 00:36:18
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
🇸🇪
vaia.cloud
2026-10-11 00:30:02
(1 hour ago)
crowdsecurity/grafana-cve-2021-43798
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 00:20:40
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:20:32.597704 2026] [security2:error] [pid 23032:tid 23032] [client 34.84.73.73:46710] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||rachel-heiko.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rachel-heiko.com"] [uri "/z9x8c7v6b5-debug-trigger-rachel-heiko.com"] [unique_id "asrWUH_bi4rWkjFDEjt-VwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-10-11 00:15:11
(1 hour ago)
(perplexity_bot) Blocked PerplexityBot 34.84.73.73 (JP/Japan/73.73.84.34.bc.googleusercontent.com)
Hacking
🇺🇸
TPI-Abuse
2026-10-11 00:03:36
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:03:28.905551 2026] [security2:error] [pid 26463:tid 26463] [client 34.84.73.73:56086] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||qwik-wash.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "qwik-wash.com"] [uri "/z9x8c7v6b5-debug-trigger-qwik-wash.com"] [unique_id "asrSUB-WGFBmsc5CwFA5_QAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
yvoictra
2026-10-10 23:51:07
(2 hours ago)
Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-path-traversal-probing
Web App Attack
2026-10-10 23:16:49
(2 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 22:53:17
(2 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:949110) triggered by 34.84.73.73 (73.73.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:53:11.767565 2026] [security2:error] [pid 4362:tid 4362] [client 34.84.73.73:45894] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "qualiabookings.com"] [uri "/z9x8c7v6b5-debug-trigger-qualiabookings.com"] [unique_id "asrB19cD-KSt3IsxAOo9KAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
