🇩🇪
updown.io
2026-10-12 23:24:52
(2 weeks ago)
{"level":"info","ts":1791847488.859396,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.201.146.14","remote_port":"37488","client_ip":"35.201.146.14","proto":"HTTP/2.0","method":"GET","host":"demo.updown.io","uri":"/ ...
show more
{"level":"info","ts":1791847488.859396,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.201.146.14","remote_port":"37488","client_ip":"35.201.146.14","proto":"HTTP/2.0","method":"GET","host":"demo.updown.io","uri":"/gca4et8v6oxiiqapd2lg","headers":{"Accept":["*/*"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"demo.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000706268,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1791847489.3385546,"logger":"http.log.access.log1","msg":"handled request
...
show less
DDoS Attack
Web App Attack
🇩🇪
Hazzard
2026-10-12 15:39:20
(2 weeks ago)
(PERMBLOCK) 35.201.146.14 (TW/Taiwan/Taipei City/Taipei/14.146.201.35.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
Hacking
🇫🇷
Octopuce
2026-10-12 10:45:25
(2 weeks ago)
Aggressive web search of vulnerable pages: //.env /static../.env /images../.env /files../.env /public../.env ...
Web App Attack
🇩🇪
Hazzard
2026-10-12 10:44:10
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇩🇪
akasolutions.de
2026-10-12 10:14:57
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 35.201.146.14 (TW/Taiwan/14.146.201.35.bc.googleusercontent.com)
SQL Injection
🇩🇰
ScamAware
2026-10-12 10:11:58
(2 weeks ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 69. Unique request paths counted internally: 66. Cloudflare acti ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 69. Unique request paths counted internally: 66. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack
🇨🇭
zynex
2026-10-12 10:04:47
(2 weeks ago)
URL Probing: /static/..;/..;/.env
Web App Attack
🇩🇪
dbmwebdesign
2026-10-12 09:45:19
(2 weeks ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇳🇱
Savvii
2026-10-12 09:39:35
(2 weeks ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-10-12 08:40:03
(2 weeks ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 08:39:14
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 35.201.146.14 (14.146.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:39:07.143819 2026] [security2:error] [pid 7830:tid 7 ...
show more
(mod_security) mod_security (id:210730) triggered by 35.201.146.14 (14.146.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 04:39:07.143819 2026] [security2:error] [pid 7830:tid 7830] [client 35.201.146.14:35962] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||xmlprotocol.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "xmlprotocol.com"] [uri "/z9x8c7v6b5-debug-trigger-xmlprotocol.com"] [unique_id "asycqweaBWNlZ0LT-UiF8wAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-12 08:33:43
(2 weeks ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.201.146.14 - - [12/Oct/2026:10:33:34 +0200] "GET /@fs/root/.env?raw?? HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1. ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.201.146.14 - - [12/Oct/2026:10:33:34 +0200] "GET /@fs/root/.env?raw?? HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Bad Web Bot
Web App Attack
🇨🇳
Bro Charlie
2026-10-12 08:29:07
(2 weeks ago)
35.201.146.14 - - [12/Oct/2026:16:29:06 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
35.201.146.14 - - [12/Oct/2026:16:29:06 +0800] "GET /r ...
show more
35.201.146.14 - - [12/Oct/2026:16:29:06 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
35.201.146.14 - - [12/Oct/2026:16:29:06 +0800] "GET /robots.txt HTTP/1.1" 403 16922 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" "-"
35.201.146.14 - - [12/Oct/2026:16:29:06 +0800] "POST / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" "-"
35.201.146.14 - - [12/Oct/2026:16:29:06 +0800] "GET /q8skiw2tglhljsbrf4qe HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "-"
35.201.146.14 - - [12/Oct/2026:16:29:06 +0800] "GET /72uf8b3zyh06ef8bnuyi HTTP/1.1" 403 16922 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-"
35.201.146.14 - - [12/Oct/2026:16:29:06 +0800] "GET /user/login HTTP/1.1" 403 16922 "-
...
show less
DDoS Attack
2026-10-12 07:48:10
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇪🇸
robotstxt
2026-10-12 07:46:52
(2 weeks ago)
35.201.146.14 - - [12/Oct/2026:07:46:12 +0000] "GET /robots.txt HTTP/2.0" 403 119 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "-" edge="35.201.146.14"
35.201.146.14 - - [12/ ...
show more
35.201.146.14 - - [12/Oct/2026:07:46:12 +0000] "GET /robots.txt HTTP/2.0" 403 119 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "-" edge="35.201.146.14"
35.201.146.14 - - [12/Oct/2026:07:46:12 +0000] "GET /wp-content/cache/autoptimize/1/js/autoptimize_single_6857ed16327f63b33982ea69d8f73350.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="35.201.146.14"
35.201.146.14 - - [12/Oct/2026:07:46:12 +0000] "GET /wp-content/cache/autoptimize/1/js/autoptimize_single_427aa2db63001bcd0c9f0aa21e9cb9f4.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="35.201.146.14"
35.201.146.14 - - [12/Oct/2026:07:46:12 +0000] "GET /wp-content/cache/autoptimize/1/js/autoptimize_single_71b0aad4f921e63fcb201424b1f3e3f5.js HTTP/2.0" 403 165 "-" "M
...
show less
Web App Attack
