34.105.193.20 ***.*** - [11/Jun/2026:15:42:23 +0200] "GET /wp-json/gravitysmtp/v1/settings HTTP/1.1" ...
show more34.105.193.20 ***.*** - [11/Jun/2026:15:42:23 +0200] "GET /wp-json/gravitysmtp/v1/settings HTTP/1.1" 302 250 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36"
AND :
GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1
GET /wp-json/gravitysmtp/v1/config HTTP/1.1
GET /wp-json/wp/v2/settings HTTP/1.1
GET /wp-json/gravitysmtp/v1/tests/mock-data HTTP/1.1
show less
Bad Web Bot
Web App Attack
Anonymous
34.105.193.20 - - [11/Jun/2026:08:35:56 +0000] "GET /wp-json/wp/v2/settings HTTP/1.1" 404 50034 "-" ...
show more34.105.193.20 - - [11/Jun/2026:08:35:56 +0000] "GET /wp-json/wp/v2/settings HTTP/1.1" 404 50034 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/16C104 MicroMessenger/7.0.5(0x17000523) NetType/4G Language/zh_CN"
...
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.105.193.20 (GB/United Kingdom/20.1 ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.105.193.20 (GB/United Kingdom/20.193.105.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
[WedJun1022:31:12.1049672026][security2:error][pid3859926:tid3860167][client34.105.193.20:0]ModSecur ...
show more[WedJun1022:31:12.1049672026][security2:error][pid3859926:tid3860167][client34.105.193.20:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mondo-it.ch.81-17-25-250.cpanel.site\"][uri\"/wp-json/gravitysmtp/v1/config\"][unique_id\"ainJkL345cX-xj9D_jqT0gAAAE4\"]
show less
Web App Attack (ModSecurity Block). Evidence: Automated block: Evidence found in system journals but ...
show moreWeb App Attack (ModSecurity Block). Evidence: Automated block: Evidence found in system journals but could not be parsed.
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.105.193.20 (GB/United Kingdom/20.1 ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.105.193.20 (GB/United Kingdom/20.193.105.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
{"ClientAddr":"34.105.193.20:45574","ClientHost":"34.105.193.20","ClientPort":"45574","ClientUsernam ...
show more{"ClientAddr":"34.105.193.20:45574","ClientHost":"34.105.193.20","ClientPort":"45574","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":30219,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":0,"OriginStatus":0,"Overhead":30219,"RequestAddr":"browserless.vdkln.com","RequestContentSize":0,"RequestCount":31760,"RequestHost":"browserless.vdkln.com","RequestMethod":"GET","RequestPath":"/wp-json/gravitysmtp/v1/settings","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"StartLocal":"2026-06-09T21:49:48.686131693Z","StartUTC":"2026-06-09T21:49:48.686131693Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-06-09T21:49:48Z"}
{"ClientAddr":"34.105.193.20:45592","ClientHost":"34.105.193.20","ClientPort":"45592","ClientUsername":"-","DownstreamContentSize":19,"DownstreamStatus":404,"Duration":37860,"GzipRatio":0,"OriginContentSize":0,"OriginDuration":
...
show less
[TueJun0918:51:25.3610242026][security2:error][pid1979875:tid1980053][client34.105.193.20:0]ModSecur ...
show more[TueJun0918:51:25.3610242026][security2:error][pid1979875:tid1980053][client34.105.193.20:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.rssolution.rs-solution.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"aihEjaY1-VHFAlCAOtMB6wAAAIs\"]
show less