🇬🇷
setupgr
2026-11-10 08:03:33
UTC ·
(4 days ago)
(mod_security) mod_security (id:11000011) triggered by 34.181.134.71 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Nov 10 1 ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.181.134.71 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:03:29.465111 2026] [security2:error] [pid 1263654:tid 1263783] [client 34.181.134.71:12300] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 71.134.181.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "cpanagiotou.gr"] [uri "/about-us"] [unique_id "avLP0XMg3jukn9OSuyZ6iAAAAgw"]
show less
Port Scan
🇦🇺
Klaverstyn
2026-11-10 03:42:06
UTC ·
(4 days ago)
Excessive HTTP request rate
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 15:36:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.181.134.71 (71.134.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:36:17.793507 2026] [security2:error] [pid 5069:tid 5 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.181.134.71 (71.134.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:36:17.793507 2026] [security2:error] [pid 5069:tid 5069] [client 34.181.134.71:21880] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||glassclublake.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "glassclublake.com"] [uri "/[email protected] "] [unique_id "au3z8YA13EsAQukBXzoMWQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
agentos
2026-11-06 00:37:44
UTC ·
(1 week ago)
Automated report from AgentOS edge defense: observed scanner (1 detections, medium severity). Source IP only; no further data shared.
Port Scan
🇺🇸
mnsf
2026-11-04 12:05:29
UTC ·
(1 week ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
🇩🇪
bescared
2026-11-01 11:01:16
UTC ·
(1 week ago)
F2B - Malicious activity detected. Too many 403. -8ff06ede-
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2026-10-25 08:11:51
UTC ·
(2 weeks ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
Hacking
Brute-Force
SSH
2026-10-23 04:09:49
UTC ·
(3 weeks ago)
34.181.134.71 www.rolistore.com - [22/Oct/2026:12:13:54 -0600] "GET /index.php?route=account/login HTTP/1.1" 200 310379 "-" "Mozilla/5.0 (compatible; Orbbot/1.1;)"\n34.181.134.71 www.rolistore.com - [22/Oct/2026:12:13:55 -0600] "GET /index.php?route= ...
show more
34.181.134.71 www.rolistore.com - [22/Oct/2026:12:13:54 -0600] "GET /index.php?route=account/login HTTP/1.1" 200 310379 "-" "Mozilla/5.0 (compatible; Orbbot/1.1;)"\n34.181.134.71 www.rolistore.com - [22/Oct/2026:12:13:55 -0600] "GET /index.php?route=product/manufacturer HTTP/1.1" 200 616310 "-" "Mozilla/5.0 (compatible; Orbbot/1.1;)"\n34.181.134.71 kids.rolistore.com - [22/Oct/2026:22:09:48 -0600] "GET / HTTP/1.1" 200 543139 "-" "Mozilla/5.0 (compatible; Orbbot/1.1;)"
show less
Bad Web Bot
🇺🇸
leasj
2026-10-21 20:53:46
UTC ·
(3 weeks ago)
Observed malicious network activity confirmed via internal security review.
Hacking
🇧🇪
micmor_asbl
2026-10-19 20:39:49
UTC ·
(3 weeks ago)
asw-Joomla User : try to access forms...
Hacking
🇫🇷
claude CALVET
2026-10-19 15:28:56
UTC ·
(3 weeks ago)
gew-Joomla User : try to access forms...
Hacking
🇮🇹
Progetto1
2026-10-19 10:45:03
UTC ·
(3 weeks ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
2026-10-18 13:34:53
UTC ·
(3 weeks ago)
34.181.134.71 www.irwindalecycles.com - [18/Oct/2026:07:34:51 -0600] "GET /index.php?route=product/category&path=34 HTTP/1.1" 200 362928 "-" "Mozilla/5.0 (compatible; Orbbot/1.1;)"\n34.181.134.71 www.irwindalecycles.com - [18/Oct/2026:07:34:51 -0600] ...
show more
34.181.134.71 www.irwindalecycles.com - [18/Oct/2026:07:34:51 -0600] "GET /index.php?route=product/category&path=34 HTTP/1.1" 200 362928 "-" "Mozilla/5.0 (compatible; Orbbot/1.1;)"\n34.181.134.71 www.irwindalecycles.com - [18/Oct/2026:07:34:51 -0600] "GET /index.php?route=product/catalog HTTP/1.1" 200 359413 "-" "Mozilla/5.0 (compatible; Orbbot/1.1;)"\n34.181.134.71 www.irwindalecycles.com - [18/Oct/2026:07:34:51 -0600] "GET /index.php?route=product/manufacturer HTTP/1.1" 200 292926 "-" "Mozilla/5.0 (compatible; Orbbot/1.1;)"
show less
Bad Web Bot
🇩🇪
netclix.gr
2026-10-18 04:49:07
UTC ·
(3 weeks ago)
(bot_qv) Bot Scraping QuickView 34.181.134.71 (US/United States/71.134.181.34.bc.googleusercontent.com)
Hacking
🇬🇷
setupgr
2026-10-17 06:16:56
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 34.181.134.71 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 0 ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.181.134.71 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 17 09:16:51.517158 2026] [security2:error] [pid 2547:tid 2685] [client 34.181.134.71:18318] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 71.134.181.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "setworldup.com"] [uri "/"] [unique_id "atMS07XtHu08p1qyogx7VAAAAUw"]
show less
Port Scan
