🇺🇸
abuse-opdc
2026-11-05 12:26:34
UTC ·
(1 week ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force
🇺🇸
Starburst SysOp Team
2026-11-05 12:22:28
UTC ·
(1 week ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-srv1)
show less
Bad Web Bot
🇺🇸
VanKoh
2026-11-05 08:18:28
UTC ·
(1 week ago)
(cpanel) Failed cPanel login from 34.104.176.74 (JP/Japan/Tokyo/Shibuya City/74.176.104.34.bc.googleusercontent.com): 5 in the last 3600 secs; IP: 34.104.176.74; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [2026-11-05 02:18:19 -0600] info [cpa ...
show more
(cpanel) Failed cPanel login from 34.104.176.74 (JP/Japan/Tokyo/Shibuya City/74.176.104.34.bc.googleusercontent.com): 5 in the last 3600 secs; IP: 34.104.176.74; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [2026-11-05 02:18:19 -0600] info [cpaneld] 34.104.176.74 - - "GET /sitemap.xml HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-11-05 02:18:20 -0600] info [cpaneld] 34.104.176.74 - - "GET /z9x8c7v6b5-debug-trigger-cpanel.navieraintermar.com HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-11-05 02:18:22 -0600] info [cpaneld] 34.104.176.74 - - "GET /netlify.toml HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-11-05 02:18:23 -0600] info [cpaneld] 34.104.176.74 - - "GET /.bashrc HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-11-05 02:18:23 -0600] info [cpaneld] 34.104.176.74 - - "GET /.env.development HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
show less
Brute-Force
🇹🇭
thaizone.com
2026-11-05 07:11:04
UTC ·
(1 week ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
🇫🇮
sibahota
2026-11-05 06:56:23
UTC ·
(1 week ago)
34.104.176.74 - - [05/Nov/2026:06:56:19 +0000] www.nidandiagnostic.com "GET /sitemap.xml HTTP/2.0" 404 6649 0.004 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 172.17.0.1:3051 404 0.004 "http://www.nidandiagnostic.com/sitemap.xml"
34.10 ...
show more
34.104.176.74 - - [05/Nov/2026:06:56:19 +0000] www.nidandiagnostic.com "GET /sitemap.xml HTTP/2.0" 404 6649 0.004 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 172.17.0.1:3051 404 0.004 "http://www.nidandiagnostic.com/sitemap.xml"
34.104.176.74 - - [05/Nov/2026:06:56:19 +0000] www.nidandiagnostic.com "GET /sitemap_index.xml HTTP/2.0" 404 6649 0.003 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 172.17.0.1:3051 404 0.003 "http://www.nidandiagnostic.com/sitemap_index.xml"
34.104.176.74 - - [05/Nov/2026:06:56:18 +0000] www.nidandiagnostic.com "GET /robots.txt HTTP/2.0" 404 6649 0.004 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 172.17.0.1:3051 404 0.004 "http://www.nidandiagnostic.com/robots.txt"
34.104.176.74 - - [05/Nov/2026:06:56:20 +0000] www.nidandiagnostic.com "GET /8eofzb0sjlo4yckyccvo HTTP/2.0" 404 6649 0.004 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 172.17.0.1:3051 404 0.003 "http://w
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 06:26:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.176.74 (74.176.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:26:35.279143 2026] [security2:error] [pid 3429:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.176.74 (74.176.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:26:35.279143 2026] [security2:error] [pid 3429:tid 3429] [client 34.104.176.74:60562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.musicfreakcentral.com"] [uri "/.env.secret"] [unique_id "auwhm2Ai_H7tjRt3bx-THAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Matthew Ping
2026-11-05 06:15:02
UTC ·
(1 week ago)
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on d865.
DDoS Attack
Brute-Force
🇪🇸
masterguru
2026-11-05 04:45:39
UTC ·
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "amazonbot" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
🇿🇦
conure.sh
2026-11-05 03:53:49
UTC ·
(1 week ago)
csagent: score 20.7: 404 noise floor x3, secrets grab x2; 1 domain(s) in 5s
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 02:36:22
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.176.74 (74.176.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:36:18.401080 2026] [security2:error] [pid 20640:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.176.74 (74.176.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:36:18.401080 2026] [security2:error] [pid 20640:tid 20640] [client 34.104.176.74:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nyemdr.org"] [uri "/userfiles/x"] [unique_id "auvrotkgR5sa-3BVRz1o8gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
artful
2026-11-05 02:18:00
UTC ·
(1 week ago)
Excessive errors ~1k in recent hours
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 02:09:29
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.176.74 (74.176.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:09:26.495960 2026] [security2:error] [pid 30000:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.176.74 (74.176.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 21:09:26.495960 2026] [security2:error] [pid 30000:tid 30000] [client 34.104.176.74:40310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.ostborg.com"] [uri "/.env.dev.local"] [unique_id "auvlVhStKfCgEnC8NQzAIAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
the-jani
2026-11-05 01:02:16
UTC ·
(1 week ago)
HTTP GET sensitive-file probing (.env, Git metadata, path traversal): 33 requests. UTC 2026-11-05T01:02:16Z to 2026-11-05T01:02:20Z.
Web App Attack
🇺🇸
oralunal
2026-11-05 00:41:06
UTC ·
(1 week ago)
Banned by Fail2Ban - access.log - mavifinds
Web App Attack
Bad Web Bot
🇳🇱
e.fierstra
2026-11-05 00:40:47
UTC ·
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
