🇬🇷
setupgr
2026-09-14 07:33:04
(1 month ago)
(mod_security) mod_security (id:11000011) triggered by 34.26.230.152 (US/United States/South Carolin ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.26.230.152 (US/United States/South Carolina/North Charleston/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Mon Sep 14 10:33:00.360754 2026] [security2:error] [pid 309813:tid 309935] [client 34.26.230.152:53623] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 152.230.26.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "mail.ftiaxtomonosou.gr"] [uri "/"] [unique_id "aqejK1GYFyu-8z7Zli3wDwAAAsQ"]
show less
Port Scan
🇳🇱
svr
2026-09-14 07:31:03
(1 month ago)
Abusive Automated Web Scanner
Web App Attack
🇩🇪
maxpower
2026-09-14 07:14:00
(1 month ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.26.230.152 (US/United States/152.230.26.34. ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.26.230.152 (US/United States/152.230.26.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.26.230.152 - - [14/Sep/2026:09:13:56 +0200] "GET /xmlrpc.php?rsd HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "-" host=mail.digiampaolo.it
2026/09/14 09:13:56 [error] 3827471#3827471: *622838 access forbidden by rule, client: 34.26.230.152, server: digiampaolosrl.it, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "mail.digiampaolosrl.it"
2026/09/14 09:13:56 [error] 3827455#3827455: *622841 access forbidden by rule, client: 34.26.230.152, server: digiampaolosrl.it, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "mail.digiampaolo.it"
show less
Port Scan
🇷🇺
DZBOT
2026-09-14 07:12:05
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇮🇹
CoreTech srl
2026-09-14 07:10:11
(1 month ago)
CloudLinux/Plesk alert - host=cloudlinux dominio=mitan.it ip=34.26.230.152 richieste=1439 rischio=AL ...
show more
CloudLinux/Plesk alert - host=cloudlinux dominio=mitan.it ip=34.26.230.152 richieste=1439 rischio=ALTO score=13 motivi=molte_richieste,molte_post,path_sospetti,poco_statico,dinamico cat_id=21,19,18 periodo=10min
show less
Web App Attack
Bad Web Bot
Brute-Force
2026-09-14 07:09:01
(1 month ago)
Apache vulnerability scan
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-09-14 07:00:56
(1 month ago)
excessive HTTP 404 errors
Bad Web Bot
🇩🇪
Blexyel
2026-09-14 06:53:21
(1 month ago)
34.26.230.152 - - [14/Sep/2026:08:53:21 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 ...
show more
34.26.230.152 - - [14/Sep/2026:08:53:21 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇺🇸
aks4226
2026-09-14 06:44:49
(1 month ago)
Bot search, attacking common web applications.
Web App Attack
🇺🇸
oralunal
2026-09-14 06:43:57
(1 month ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-09-14 06:43:39
(1 month ago)
trolling for resource vulnerabilities
Web App Attack
🇩🇪
abdubhai
2026-09-14 06:43:27
(1 month ago)
34.26.230.152 - - [14/Sep/2026:1
...
Brute-Force
🇩🇪
BlueWire Hosting
2026-09-14 06:43:26
(1 month ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
🇨🇦
swk
2026-09-14 06:40:59
(1 month ago)
34.26.230.152 - - [14/Sep/2026:06:40:57 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT ...
show more
34.26.230.152 - - [14/Sep/2026:06:40:57 +0000] "GET / HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.26.230.152 - - [14/Sep/2026:06:40:58 +0000] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.26.230.152 - - [14/Sep/2026:06:40:58 +0000] "GET //feed/ HTTP/1.1" 404 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.26.230.152 - - [14/Sep/2026:06:40:58 +0000] "GET //xmlrpc.php?rsd HTTP/1.1" 404 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.26.230.152 - - [14/Sep/2026:06:40:58 +0000] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,
...
show less
Hacking
Web App Attack
🇨🇭
Origon
2026-09-14 06:39:33
(1 month ago)
http-probing - IP: 34.26.230.152 - time="2026-09-14T08:39:33+02:00" level=info msg="(555f66b4f6a745 ...
show more
http-probing - IP: 34.26.230.152 - time="2026-09-14T08:39:33+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.26.230.152 (US/396982) : 4h ban on Ip 34.26.230.152" module=db
show less
Web App Attack