🇩🇪
XICTRON
2026-10-11 02:25:08
(1 day ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:42:40
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:42:35.685064 2026] [security2:error] [pid 13511:tid 13511] [client 34.89.168.5:36602] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zoticus.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zoticus.com"] [uri "/z9x8c7v6b5-debug-trigger-zoticus.com"] [unique_id "asrpi7c7pqPw1K4lAhCVNQAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-10-11 01:34:18
(1 day ago)
(mod_security) mod_security (id:930100) triggered by 34.89.168.5 (DE/Germany/5.168.89.34.bc.googleus ...
show more
(mod_security) mod_security (id:930100) triggered by 34.89.168.5 (DE/Germany/5.168.89.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
2026-10-11 01:32:23
(1 day ago)
Banned by Fail2Ban on server
Web App Attack
🇸🇬
khairilgunawan
2026-10-11 01:32:18
(1 day ago)
ZonaKuota Sentinel: Malicious automated scanner/exploit probe trapped. Blocked.
Web App Attack
Bad Web Bot
🇩🇪
Gwyneth Llewelyn
2026-10-11 01:32:12
(1 day ago)
2026/10/11 02:32:10 [error] 4060693#4060693: *2006653 access forbidden by rule, client: 34.89.168.5, ...
show more
2026/10/11 02:32:10 [error] 4060693#4060693: *2006653 access forbidden by rule, client: 34.89.168.5, server: zonadetestes.com, request: "GET /_nuxt/../.env HTTP/2.0", host: "zonadetestes.com"
2026/10/11 02:32:10 [error] 4060693#4060693: *2006653 access forbidden by rule, client: 34.89.168.5, server: zonadetestes.com, request: "GET /api/orders/..%2f..%2f.env HTTP/2.0", host: "zonadetestes.com"
2026/10/11 02:32:10 [error] 4060693#4060693: *2006653 access forbidden by rule, client: 34.89.168.5, server: zonadetestes.com, request: "GET /api/data/..%2f..%2f.env HTTP/2.0", host: "zonadetestes.com"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:26:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:26:02.464435 2026] [security2:error] [pid 19047:tid 19047] [client 34.89.168.5:52694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zoboz.com"] [uri "/.env"] [unique_id "asrlqtpAkbiJc_NhRebGMgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-10-11 00:09:53
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-10 23:47:25
(1 day ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.89.168.5 - - [11/Oct/2026:01:47:11 +0200] "GET /app/.env HTTP/2.0" 301 64 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 23:47:08
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:47:04.789746 2026] [security2:error] [pid 11709:tid 11709] [client 34.89.168.5:50416] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zendogenpets.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zendogenpets.com"] [uri "/z9x8c7v6b5-debug-trigger-zendogenpets.com"] [unique_id "asrOeHT1uWOefnpE2Tj8gAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 23:20:37
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:20:31.580810 2026] [security2:error] [pid 21502:tid 21502] [client 34.89.168.5:33722] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zaril.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zaril.com"] [uri "/z9x8c7v6b5-debug-trigger-zaril.com"] [unique_id "asrIP_rIpQYie1g84S6FywAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-10 23:06:40
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 22:52:01
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:51:59.079993 2026] [security2:error] [pid 17195:tid 17195] [client 34.89.168.5:48206] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zacharyschwartzman.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zacharyschwartzman.com"] [uri "/z9x8c7v6b5-debug-trigger-zacharyschwartzman.com"] [unique_id "asrBj__rmsHb7MFHiV6p2gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 22:33:35
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.89.168.5 (5.168.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:33:29.652302 2026] [security2:error] [pid 22436:tid 22436] [client 34.89.168.5:44982] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||yvonnebraden.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "yvonnebraden.com"] [uri "/z9x8c7v6b5-debug-trigger-yvonnebraden.com"] [unique_id "asq9OQt26UA4_jf_weMtPwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-10-10 22:27:03
(1 day ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
