🇩🇪
updown.io
2026-10-11 14:49:18
(5 days ago)
{"level":"info","ts":1791730155.035692,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1791730155.035692,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.146.39.244","remote_port":"58574","client_ip":"34.146.39.244","proto":"HTTP/2.0","method":"GET","host":"status.acso.org.au","uri":"/login","headers":{"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Microsoft Edge\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"X-Nextjs-Data":["1"],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["en-US,en;q=0.9"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 08:06:42
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.39.244 (244.39.146.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.39.244 (244.39.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 04:06:36.458874 2026] [security2:error] [pid 28126:tid 28126] [client 34.146.39.244:58616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.whipchecks.com.au"] [uri "/files../.env"] [unique_id "astDjJwTxzr7laPZaTYuQwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇬
Stoyko Stoykov
2026-10-11 07:56:18
(5 days ago)
34.146.39.244 - - [11/Oct/2026:10:56:17 +0300] "GET /@fs/root/.aws/credentials?raw?? HTTP/2.0" 404 0 ...
show more
34.146.39.244 - - [11/Oct/2026:10:56:17 +0300] "GET /@fs/root/.aws/credentials?raw?? HTTP/2.0" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
...
show less
Hacking
Web App Attack
🇦🇺
rubixstudios
2026-10-11 07:23:02
(5 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇫🇷
Baking333
2026-10-11 07:22:34
(5 days ago)
[redacted] 34.146.39.244 - - [11/Oct/2026:08:22:33 +0100] "GET /settings%[redacted] HTTP/2.0" 404 30 ...
show more
[redacted] 34.146.39.244 - - [11/Oct/2026:08:22:33 +0100] "GET /settings%[redacted] HTTP/2.0" 404 307 "-" "CCBot/2.0 (https://[redacted]/faq/)" [redacted] 34.146.39.244 - - [11/Oct/2026:08:22:33 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 337 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://[redacted]/)"
show less
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-10-11 05:19:32
(5 days ago)
(modsec_attack) srv103 ModSecurity attack 34.146.39.244 (JP/Japan/244.39.146.34.bc.googleusercontent ...
show more
(modsec_attack) srv103 ModSecurity attack 34.146.39.244 (JP/Japan/244.39.146.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 00:58:31
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.39.244 (244.39.146.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.39.244 (244.39.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:58:26.586548 2026] [security2:error] [pid 476:tid 476] [client 34.146.39.244:40520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.volkerjahn.link"] [uri "/media../.env"] [unique_id "asrfMqAu7HrL_-w_omr17gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
simpeg-adm.bandung.go.id
2026-10-11 00:36:29
(5 days ago)
11/Oct/2026:00:36:28 +0000;34.146.39.244;"/gycfpbpo0e4fze8c6wrt"
11/Oct/2026:00:36:28 +0000;34.146.3 ...
show more
11/Oct/2026:00:36:28 +0000;34.146.39.244;"/gycfpbpo0e4fze8c6wrt"
11/Oct/2026:00:36:28 +0000;34.146.39.244;"/dist/.vite/manifest.json"
11/Oct/2026:00:36:28 +0000;34.146.39.244;"/z9x8c7v6b5-debug-trigger-app.lukemunrophotography.com.au"
11/Oct/2026:00:36:28 +0000;34.146.39.244;"/lhs969xvbu3vt0ibuxnz"
11/Oct/2026:00:36:29 +0000;34.146.39.244;"/key.json"
11/Oct/2026:00:36:29 +0000;34.146.39.244;"/credentials.json"
11/Oct/2026:00:36:29 +0000;34.146.39.244;"/service-account.json"
...
show less
Web Spam
Brute-Force
Web App Attack
2026-10-11 00:27:36
(5 days ago)
IP matched detection query many 3xx errors.
Brute-Force
🇦🇺
Scrapline
2026-10-10 23:51:00
(6 days ago)
[Fail2Ban] nginx-scraper: banned after 5 failures
Web App Attack
🇲🇾
Rizzy
2026-10-10 23:43:03
(6 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇦🇺
Klaverstyn
2026-10-10 23:38:21
(6 days ago)
Persistent attacker, repeat offender
Hacking
🇦🇺
paulshipley.com.au
2026-10-10 23:37:58
(6 days ago)
[Sun Oct 11 10:37:57.914171 2026] [security2:error] [pid 856950] [client 34.146.39.244:51094] [clien ...
show more
[Sun Oct 11 10:37:57.914171 2026] [security2:error] [pid 856950] [client 34.146.39.244:51094] [client 34.146.39.244] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "winesbydesign.com.au"] [uri "/server.key"] [unique_id "asrMVcb_-Kx3pR4SJIOcjgAAAAs"]
...
show less
Web App Attack
🇩🇪
ger-stg-sifi1
2026-10-10 21:45:26
(6 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇦🇺
2000cn.com.au
2026-10-10 21:17:47
(6 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking