๐ธ๐ฆ
BenTahily
2026-10-24 07:01:28
(1 day ago)
Malicious activity against marketblitzer.com (BLITZER Trading Platform)
Web App Attack
Hacking
๐ธ๐ฆ
BenTahily
2026-10-23 07:00:06
(2 days ago)
Malicious activity against marketblitzer.com (BLITZER Trading Platform)
Web App Attack
Hacking
๐ซ๐ฎ
as211431.net
2026-10-21 11:38:22
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from JP.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 ...
show more
Triggered Cloudflare WAF (firewallCustom) from JP.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/2 (POST method)
Endpoint: /icecoder/lib/file-control.php
UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-21 11:35:00
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.146.222.21 (21.222.146.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.146.222.21 (21.222.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 07:34:54.507343 2026] [security2:error] [pid 28417:tid 28417] [client 34.146.222.21:43790] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.markrudin.com|F|2"] [data ".markrudin.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.markrudin.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.markrudin.com"] [unique_id "atijXsAQ26GBGVxN-7qJDQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-10-21 11:31:21
(4 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ฌ๐ง
Aetherweb Ark
2026-10-21 11:29:28
(4 days ago)
(mod_security) mod_security (id:949110) triggered by 34.146.222.21 (JP/Japan/21.222.146.34.bc.google ...
show more
(mod_security) mod_security (id:949110) triggered by 34.146.222.21 (JP/Japan/21.222.146.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-21 11:16:07
(4 days ago)
34.146.222.21 - - [21/Oct/2026:12:16:06 +0100] "GET /z9x8c7v6b5-debug-trigger-log.tmxnews.co.uk HTTP ...
show more
34.146.222.21 - - [21/Oct/2026:12:16:06 +0100] "GET /z9x8c7v6b5-debug-trigger-log.tmxnews.co.uk HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐บ๐ธ
jormaster3k
2026-10-21 10:52:56
(4 days ago)
Attack against Apache (too many 404s)
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-21 10:37:53
(4 days ago)
34.146.222.21 - - [21/Oct/2026:11:37:52 +0100] "GET /.env.prod.local HTTP/2.0" 401 410 "-" "Mozilla/ ...
show more
34.146.222.21 - - [21/Oct/2026:11:37:52 +0100] "GET /.env.prod.local HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-21 10:21:25
(4 days ago)
34.146.222.21 - - [21/Oct/2026:11:21:24 +0100] "GET /.env.keys HTTP/2.0" 401 410 "-" "Mozilla/5.0 (c ...
show more
34.146.222.21 - - [21/Oct/2026:11:21:24 +0100] "GET /.env.keys HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-21 09:57:49
(4 days ago)
34.146.222.21 - - [21/Oct/2026:10:57:48 +0100] "GET /.env.supabase HTTP/2.0" 401 410 "-" "Mozilla/5. ...
show more
34.146.222.21 - - [21/Oct/2026:10:57:48 +0100] "GET /.env.supabase HTTP/2.0" 401 410 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-21 09:39:25
(4 days ago)
34.146.222.21 - - [21/Oct/2026:10:39:25 +0100] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccoun ...
show more
34.146.222.21 - - [21/Oct/2026:10:39:25 +0100] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt?raw?? HTTP/2.0" 401 433 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-21 09:16:26
(4 days ago)
34.146.222.21 - - [21/Oct/2026:10:16:25 +0100] "GET /docker-compose.yaml HTTP/2.0" 401 410 "-" "Mozi ...
show more
34.146.222.21 - - [21/Oct/2026:10:16:25 +0100] "GET /docker-compose.yaml HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-21 09:00:18
(4 days ago)
34.146.222.21 - - [21/Oct/2026:10:00:18 +0100] "GET /uploads../.env HTTP/2.0" 401 410 "-" "Mozilla/5 ...
show more
34.146.222.21 - - [21/Oct/2026:10:00:18 +0100] "GET /uploads../.env HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-21 08:30:04
(4 days ago)
34.146.222.21 - - [21/Oct/2026:09:30:03 +0100] "GET /.env?import&url&inline HTTP/2.0" 401 410 "-" "M ...
show more
34.146.222.21 - - [21/Oct/2026:09:30:03 +0100] "GET /.env?import&url&inline HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack