Triggered Cloudflare WAF (firewallCustom) from GB.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show moreTriggered Cloudflare WAF (firewallCustom) from GB.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /wp-json/gravitysmtp/v1/tests/mock-data
Timestamp: 2026-06-11T12:59:24Z
Ray ID: a0a0caf8aeeea690
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Safari/537.36
show less
Bad Web Bot
Anonymous
scanning for potential vulnerable apps (wordpress etc.) and database accesses (ISR). Requested URI: ...
show morescanning for potential vulnerable apps (wordpress etc.) and database accesses (ISR). Requested URI: /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.39.76.206 (GB/United Kingdom/206.7 ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.39.76.206 (GB/United Kingdom/206.76.39.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Exploit scanner detected on NON existing URI:/wp-json/gravitysmtp/v1/tests/mock-data | User Agent:M ...
show moreExploit scanner detected on NON existing URI:/wp-json/gravitysmtp/v1/tests/mock-data | User Agent:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36 va
show less
[WedJun1001:33:57.8613962026][security2:error][pid3661301:tid3661357][client34.39.76.206:0]ModSecuri ...
show more[WedJun1001:33:57.8613962026][security2:error][pid3661301:tid3661357][client34.39.76.206:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"gustotondo.ch\"][uri\"/wp-json/gravitysmtp/v1/settings\"][unique_id\"aiii5QspWfsZFQIEA-HmjgAAAEM\"]
show less
(mod_security) mod_security (id:949110) triggered by 34.39.76.206 (GB/United Kingdom/206.76.39.34.bc ...
show more(mod_security) mod_security (id:949110) triggered by 34.39.76.206 (GB/United Kingdom/206.76.39.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less