🇺🇸
TPI-Abuse
2026-10-14 18:45:24
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.185.140.44 (44.140.185.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.140.44 (44.140.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 14:45:15.367143 2026] [security2:error] [pid 31944:tid 31944] [client 34.185.140.44:50576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.notariacoelemu.cl"] [uri "/.htpasswd"] [unique_id "as_NuwKHSRGQ1LcB3jdzMgAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇭
thaizone.com
2026-10-14 16:36:48
(18 hours ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
🇳🇱
Alt255
2026-10-14 16:32:00
(18 hours ago)
[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.185.140.44 - - [14/Oct/2026:18:31:38 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.185.140.44 - - [14/Oct/2026:18:31:38 +0200] "GET /build/manifest.json HTTP/2.0" 404 16838 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.185.140.44 - - [14/Oct/2026:18:31:38 +0200] "GET /z9x8c7v6b5-debug-trigger-lastafelshop.com HTTP/2.0" 404 16838 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.185.140.44 - - [14/Oct/2026:18:31:38 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0
...
show less
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2026-10-14 16:23:46
(18 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.185.140.44 (DE/Ge ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.185.140.44 (DE/Germany/44.140.185.34.bc.googleusercontent.com)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-14 16:10:43
(18 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.185.140.44 (44.140.185.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.185.140.44 (44.140.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:10:35.284991 2026] [security2:error] [pid 29766:tid 29781] [client 34.185.140.44:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.mindgardens.com|F|2"] [data ".mindgardens.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.mindgardens.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.mindgardens.com"] [unique_id "as-pe9vqUUP6K4ehMXOragAAAYw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-10-14 16:05:16
(18 hours ago)
csagent: score 20.7: 404 noise floor x3, secrets grab x1, spoofed crawler UA x1; 1 domain(s) in 3s
Web App Attack
🇦🇺
screwlooseit.com.au
2026-10-14 15:54:20
(18 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/44.140.185.34.bc.googleuserconten ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/44.140.185.34.bc.googleusercontent.com
show less
Web App Attack
🇳🇱
Alt255
2026-10-14 15:53:39
(18 hours ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.185.140.44 - - [14/Oct/2026:17:53:36 +0200] "GET /.env.prod HTTP/2.0" 410 309 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
...
show less
Bad Web Bot
Web App Attack
2026-10-14 15:45:01
(19 hours ago)
suspicious request in access.log
Web App Attack
🇧🇾
lns.bz
2026-10-14 15:22:10
(19 hours ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 14:29:13
(20 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.185.140.44 (44.140.185.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.185.140.44 (44.140.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 10:29:04.674517 2026] [security2:error] [pid 1933:tid 1961] [client 34.185.140.44:47360] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||koublacat.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "koublacat.com"] [uri "/z9x8c7v6b5-debug-trigger-koublacat.com"] [unique_id "as-RsCjfDwg4ZQq9i8RxGgAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-14 14:05:52
(20 hours ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
updown.io
2026-10-14 13:51:55
(21 hours ago)
{"level":"info","ts":1791985914.4938145,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791985914.4938145,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.185.140.44","remote_port":"49474","client_ip":"34.185.140.44","proto":"HTTP/2.0","method":"GET","host":"status.plushost.gr","uri":"/","headers":{"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua-Mobile":["?1"],"Priority":["u=0, i"],"Sec-Ch-Ua-Platform":["\"Android\""],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Microsoft Edge\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Sec-Fetch-Site":["none"],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Mode":["navigate"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Accept-Language":["en-US,en;q=0.9"],"X-Nextjs-Data":["1"],"User-Agent":["
...
show less
DDoS Attack
Web App Attack
2026-10-14 13:43:43
(21 hours ago)
Blocked by ModSec and CSF
Port Scan
🇳🇱
Site.eu
2026-10-14 13:42:10
(21 hours ago)
Excessive 404/403 errors
Brute-Force
