🇺🇸
TPI-Abuse
2026-09-21 23:53:28
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:53:20.641553 2026] [security2:error] [pid 30630:tid 30671] [client 34.87.88.51:39752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kaulaniconsulting.com"] [uri "/.git/config"] [unique_id "arHDcIRDGGopYmNzgDEsGAAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 22:43:28
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 18:43:23.668372 2026] [security2:error] [pid 32298:tid 32352] [client 34.87.88.51:50758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lifecoachcertified.com"] [uri "/.env.production"] [unique_id "arGzC9UByUX9O9EarLgLWAAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 16:32:42
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 12:32:36.766410 2026] [security2:error] [pid 3647:tid 3647] [client 34.87.88.51:42658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mjkhan.com"] [uri "/.env.local"] [unique_id "arFcJGSKPkuMyMaSbgvhRgAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-09-21 15:30:13
(4 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 15:27:41
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 11:27:33.981420 2026] [security2:error] [pid 32034:tid 32034] [client 34.87.88.51:59040] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.cgballard.com|F|2"] [data ".cgballard.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.cgballard.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.cgballard.com"] [unique_id "arFM5RlGN6TySJFXOdIZ4AAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-21 15:05:59
(4 days ago)
Too many Status 40X (15)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 14:58:21
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 10:58:17.655683 2026] [security2:error] [pid 923:tid 923] [client 34.87.88.51:35014] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mitchellart.com|F|2"] [data ".mitchellart.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mitchellart.com"] [uri "/z9x8c7v6b5-debug-trigger-www.mitchellart.com"] [unique_id "arFGCfvBUJm9PSBO6589pgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 14:52:40
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇸🇪
vaia.cloud
2026-09-21 14:30:02
(4 days ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-21 14:29:28
(4 days ago)
Multiple WAF Violations
Web App Attack
2026-09-21 14:10:04
(4 days ago)
| [Dangerous/Singapore] Aggressive IP 34.87.88.51 (~30 hits). Type: DoS Defender- Web server 400 err ...
show more
| [Dangerous/Singapore] Aggressive IP 34.87.88.51 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-09-21 14:05:55
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.87.88.51 (51.88.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 10:05:49.826661 2026] [security2:error] [pid 8318:tid 8318] [client 34.87.88.51:40846] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.misscharlottemusic.com|F|2"] [data ".misscharlottemusic.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.misscharlottemusic.com"] [uri "/z9x8c7v6b5-debug-trigger-www.misscharlottemusic.com"] [unique_id "arE5va97i8Et7wWVnOPlxAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 13:47:15
(4 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
xmission.com
2026-09-21 13:41:58
(4 days ago)
Blocked by UFW (TCP on 8080)
Source port: 49814
TTL: 61
Packet length: 60
TOS: 0x00
This report (fo ...
show more
Blocked by UFW (TCP on 8080)
Source port: 49814
TTL: 61
Packet length: 60
TOS: 0x00
This report (for 34.87.88.51) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
🇫🇷
vtchost.com
2026-09-21 10:33:17
(4 days ago)
scanning closed ports
...
Port Scan
