🇺🇸
TPI-Abuse
2026-10-09 04:54:11
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.118.134.107 (107.134.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.118.134.107 (107.134.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 00:54:06.432038 2026] [security2:error] [pid 11991:tid 11991] [client 34.118.134.107:35514] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||app.oxfordgliding.com|F|2"] [data ".oxfordgliding.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "app.oxfordgliding.com"] [uri "/z9x8c7v6b5-debug-trigger-app.oxfordgliding.com"] [unique_id "ashzboa3D3Qyq5BCy91yZwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
Abuse Buster
2026-10-09 03:26:42
(2 weeks ago)
34.118.134.107 - - [09/Oct/2026:05:26:39 +0200] "GET /8jwqkjrzupmwqilgod35 HTTP/2.0" 404 22 "-" "Moz ...
show more
34.118.134.107 - - [09/Oct/2026:05:26:39 +0200] "GET /8jwqkjrzupmwqilgod35 HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.118.134.107 - - [09/Oct/2026:05:26:39 +0200] "GET /sxdgbq358un32ixs0s4c HTTP/2.0" 404 22 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.118.134.107 - - [09/Oct/2026:05:26:39 +0200] "GET /z9x8c7v6b5-debug-trigger-api.wingthor.net HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
show less
Web App Attack
🇫🇷
dynamix
2026-10-09 02:45:04
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇩🇪
ger-stg-sifi1
2026-10-08 23:41:58
(2 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
wolfemium
2026-10-08 23:05:00
(2 weeks ago)
34.118.134.107 - - [09/Oct/2026:02:04:59 +0300] "GET /phpinfo.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 ...
show more
34.118.134.107 - - [09/Oct/2026:02:04:59 +0300] "GET /phpinfo.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.118.134.107 - - [09/Oct/2026:02:04:59 +0300] "GET /info.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.118.134.107 - - [09/Oct/2026:02:04:59 +0300] "GET /pi.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.118.134.107 - - [09/Oct/2026:02:04:59 +0300] "GET /test.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.118.134.107 - - [09/Oct/2026:02:04:59 +0300] "GET /i.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.118.134.107 - - [09/Oct/2026:02:04:59 +0300] "GET /app_dev.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
DDoS Attack
🇫🇷
venar
2026-10-08 22:28:23
(2 weeks ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
🇮🇹
mgarofano80
2026-10-08 22:19:02
(2 weeks ago)
Brute-Force
Web App Attack
🇮🇹
ciccio diddo
2026-10-08 20:50:29
(2 weeks ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
🇦🇺
2000cn.com.au
2026-10-08 20:41:26
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
altenglaner
2026-10-08 20:40:51
(2 weeks ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇮🇹
VHosting
2026-10-08 20:30:03
(2 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
jormaster3k
2026-10-08 20:19:34
(2 weeks ago)
Attack against Apache (too many 404s)
Web App Attack
🇺🇸
mnsf
2026-10-08 20:05:32
(2 weeks ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 19:53:27
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.118.134.107 (107.134.118.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.118.134.107 (107.134.118.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 15:53:24.301252 2026] [security2:error] [pid 14619:tid 14619] [client 34.118.134.107:59238] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||myclassicvw.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "myclassicvw.com"] [uri "/z9x8c7v6b5-debug-trigger-myclassicvw.com"] [unique_id "asf0tLqG7M35gHu1ahb8YQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-10-08 19:51:43
(2 weeks ago)
(badbots) Bad bot user-agent [redacted] from 34.118.134.107 (CA/Canada/107.134.118.34.bc.googleuserc ...
show more
(badbots) Bad bot user-agent [redacted] from 34.118.134.107 (CA/Canada/107.134.118.34.bc.googleusercontent.com)
show less
Hacking
