🇩🇪
updown.io
2026-10-21 08:26:12
(1 day ago)
{"level":"info","ts":1792571166.9533236,"logger":"http.log.access.log0","msg":"handled request","req ...
show more
{"level":"info","ts":1792571166.9533236,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.153.210.255","remote_port":"46674","client_ip":"34.153.210.255","proto":"HTTP/2.0","method":"GET","host":"mlw8.status.updown.io","uri":"/secrets.json","headers":{"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"mlw8.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000171828,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts
...
show less
DDoS Attack
Web App Attack
2026-10-21 08:07:27
(1 day ago)
34.153.210.255 - - [21/Oct/2026:16:07:27 +0800] "GET /_nuxt/../.env HTTP/2.0" 403 162 "-" "Mozilla/5 ...
show more
34.153.210.255 - - [21/Oct/2026:16:07:27 +0800] "GET /_nuxt/../.env HTTP/2.0" 403 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
show less
Brute-Force
SSH
🇺🇸
dot.mg
2026-10-21 05:00:03
(1 day ago)
Bad behaviour
Web Spam
🇺🇸
EmilGH
2026-10-21 04:57:23
(1 day ago)
34.153.210.255 - - [21/Oct/2026:04:57:21 +0000] "GET /z9x8c7v6b5-debug-trigger-luthersales.com HTTP/ ...
show more
34.153.210.255 - - [21/Oct/2026:04:57:21 +0000] "GET /z9x8c7v6b5-debug-trigger-luthersales.com HTTP/1.1" 404 3343 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.153.210.255 - - [21/Oct/2026:04:57:21 +0000] "GET /static/manifest.json HTTP/1.1" 404 3343 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
34.153.210.255 - - [21/Oct/2026:04:57:22 +0000] "GET /dist/manifest.json HTTP/1.1" 404 7299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
34.153.210.255 - - [21/Oct/2026:04:57:22 +0000] "GET /5dtzuyu7ol6a9rwyt8qu HTTP/1.1" 404 7298 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.153.210.255 - - [21/Oct/2026:04:57:22 +0000] "GET /manifest.json HTTP/1.1" 404 7299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alboweb B.V.
2026-10-20 23:11:08
(1 day ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇺🇸
TPI-Abuse
2026-10-20 22:04:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:04:50.297504 2026] [security2:error] [pid 13501:tid 13501] [client 34.153.210.255:39482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lo-family.org"] [uri "/assets../.env"] [unique_id "atflgrGKWqERqdOie_O_aQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 21:47:53
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 17:47:47.781232 2026] [security2:error] [pid 12862:tid 12862] [client 34.153.210.255:41090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lidart.org"] [uri "/dist../.env"] [unique_id "atfhg79wrvTRNhvsQ373vAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 21:31:47
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 17:31:39.567779 2026] [security2:error] [pid 4319:tid 4352] [client 34.153.210.255:60888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.lavonnesells.com"] [uri "/dist../.env"] [unique_id "atfdu7H-EljpEl911QCn2wAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 21:12:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 17:12:30.798921 2026] [security2:error] [pid 21610:tid 21610] [client 34.153.210.255:42266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "support.leonardodecaprio.com"] [uri "/userfiles"] [unique_id "atfZPsqMJeLI4w8iQHf_VQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 19:51:52
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:51:44.641658 2026] [security2:error] [pid 6584:tid 6584] [client 34.153.210.255:54302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lodge84.org"] [uri "/.htpasswd"] [unique_id "atfGUNuggMbuaAqQUq8VRwAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kkw
2026-10-20 19:05:30
(2 days ago)
[REDACTED] 34.153.210.255 - - [20/Oct/2026:21:05:29 +0200] "GET /media../.env HTTP/2.0" 301 393 "-" ...
show more
[REDACTED] 34.153.210.255 - - [20/Oct/2026:21:05:29 +0200] "GET /media../.env HTTP/2.0" 301 393 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
Web App Attack
🇳🇱
Alboweb B.V.
2026-10-20 18:11:06
(2 days ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
2026-10-20 17:21:13
(2 days ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 16:55:16
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.153.210.255 (255.210.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 12:55:11.457503 2026] [security2:error] [pid 15748:tid 15748] [client 34.153.210.255:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||local639.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "local639.com"] [uri "/z9x8c7v6b5-debug-trigger-local639.com"] [unique_id "atec79BS0q6DwPUksjW_1QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-20 16:52:28
(2 days ago)
IP matched detection query many 3xx errors.
Brute-Force