🇺🇸
TPI-Abuse
2026-06-08 16:03:04
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.53.205.111 (111.205.53.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.53.205.111 (111.205.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 12:02:56.219494 2026] [security2:error] [pid 14019:tid 14019] [client 34.53.205.111:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||ipv6.caspina.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipv6.caspina.com"] [uri "/dump.sql"] [unique_id "aibnsMfzhTB4jCRpHQYdfgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Dominik Lysiak
2026-06-08 15:50:08
(1 week ago)
34.53.205.111 - - [08/Jun/2026:17:50:07 +0200] "GET /actuator/dump HTTP/1.1" 444 0 "-" "Mozilla/5.0 ...
show more
34.53.205.111 - - [08/Jun/2026:17:50:07 +0200] "GET /actuator/dump HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.5(0x17000523) NetType/4G Language/zh_CN"
34.53.205.111 - - [08/Jun/2026:17:50:07 +0200] "GET /actuator/heapdump HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
34.53.205.111 - - [08/Jun/2026:17:50:07 +0200] "GET /actuator/auditevents HTTP/1.1" 444 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.5(0x17000523) NetType/WIFI Language/zh_CN"
34.53.205.111 - - [08/Jun/2026:17:50:07 +0200] "GET /actuator/configprops HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36 OPR/62.0.3331.116"
34.53.205.111 - - [08/Jun/2026:17:50:07 +0200] "GET /actuator/httptrace HTTP/1.1"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 15:12:35
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.53.205.111 (111.205.53.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.53.205.111 (111.205.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:12:28.945813 2026] [security2:error] [pid 25148:tid 25148] [client 34.53.205.111:43238] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.albertacottagebuilder.com.weyoungrenovations.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.albertacottagebuilder.com.weyoungrenovations.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aibb3FawnmppcV6yMAV1yQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-06-08 15:12:33
(1 week ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇫🇷
masterguru
2026-06-08 13:24:48
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "YaBrowser" at REQUEST_HEADERS:User-Agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "YaBrowser" at REQUEST_HEADERS:User-Agent. (1100000-195)
show less
Bad Web Bot
2026-06-08 09:13:18
(1 week ago)
fail2ban: Sensitive web probes detected
Web App Attack
🇺🇸
daveoctober
2026-06-08 08:53:21
(1 week ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
🇩🇪
webanyone
2026-06-08 04:00:26
(1 week ago)
Apache web server attack detected by Fail2Ban in plesk-apache jail
Web App Attack
🇩🇪
webanyone
2026-06-08 03:45:25
(1 week ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇨🇭
backslash
2026-06-08 03:36:00
(1 week ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇩🇪
updown.io
2026-06-08 02:29:08
(1 week ago)
{"level":"info","ts":1780885746.0557888,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1780885746.0557888,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.53.205.111","remote_port":"55506","client_ip":"34.53.205.111","proto":"HTTP/1.1","method":"GET","host":"update.jihgfedgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/actuator/env","headers":{"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"],"Accept-Charset":["utf-8"]}},"bytes_read":0,"user_id":"","duration":0.000043653,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://update.jihgfedgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/actuator/env"]}}
{"level":"info","ts":1780885746.0603905,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.53.205.111","remote_port":"55510","client_ip":"34.53.
...
show less
DDoS Attack
Web App Attack
🇺🇸
mnsf
2026-06-08 02:07:31
(1 week ago)
Scanning/Probing (61)
Request Overload (383)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-06-08 01:22:19
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇮🇹
VHosting
2026-06-08 00:55:03
(1 week ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
2026-06-08 00:30:37
(1 week ago)
Multiple web server 400 error codes from same source ip
Web App Attack