🇨🇭
zynex
2026-06-15 02:57:08
(3 months ago)
URL Probing: /config.php
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:18:26
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 34.64.141.60 (60.141.64.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.64.141.60 (60.141.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:18:18.942531 2026] [security2:error] [pid 19655:tid 19655] [client 34.64.141.60:58810] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||amazinghydraulics.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "amazinghydraulics.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai82us6NRH8TA7UM3wTKGgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-14 22:52:04
(3 months ago)
categories: DDoS Attack
DDoS Attack
2026-06-14 21:58:15
(3 months ago)
34.64.141.60 - - [14/Jun/2026:23:58:11 +0200] "GET /docker-compose.yml HTTP/1.1" 403 7933 "-" "Mozil ...
show more
34.64.141.60 - - [14/Jun/2026:23:58:11 +0200] "GET /docker-compose.yml HTTP/1.1" 403 7933 "-" "Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 NokiaE90-1/07.24.0.3; Profile/MIDP-2.0 Configuration/CLDC-1.1 ) AppleWebKit/413 (KHTML, like Gecko) Safari/413 UP.Link/6.2.3.18.0"
34.64.141.60 - - [14/Jun/2026:23:58:11 +0200] "GET /docker-compose.yaml HTTP/1.1" 403 7933 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.31 (KHTML like Gecko) Chrome/26.0.1410.63 Safari/537.31"
34.64.141.60 - - [14/Jun/2026:23:58:11 +0200] "GET /docker-compose.prod.yml HTTP/1.1" 403 7933 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.186 Safari/537.36"
34.64.141.60 - - [14/Jun/2026:23:58:11 +0200] "GET /docker-compose.prod.yaml HTTP/1.1" 403 7933 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3436.0 Safari/537.36"
34.64.141.60 - - [14/Jun/2026:23:58:11 +0200] "GET /actuator/heapdump HTTP/
...
show less
DDoS Attack
🇩🇪
updown.io
2026-06-14 21:55:57
(3 months ago)
{"level":"info","ts":1781474156.409502,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1781474156.409502,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.64.141.60","remote_port":"54430","client_ip":"34.64.141.60","proto":"HTTP/1.1","method":"GET","host":"updown.discountoffice.be","uri":"/cloud.json","headers":{"User-Agent":["Mozilla/5.0 (Linux; Android 9; SM-G950U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"updown.discountoffice.be","ech":false}},"bytes_read":0,"user_id":"","duration":0.000103659,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1781474156.4141066,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.64.141.60","remote_port":"54352","client_ip":"34.64.141.60","proto":"HTTP/1.1","method":
...
show less
DDoS Attack
Web App Attack
🇫🇮
mickp
2026-06-14 17:42:41
(3 months ago)
34.64.141.60 - - [14/Jun/2026:17:42:39 +0000] "GET /actuator/heapdump HTTP/1.1" 403 118 "-" "Mozilla ...
show more
34.64.141.60 - - [14/Jun/2026:17:42:39 +0000] "GET /actuator/heapdump HTTP/1.1" 403 118 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:41.0) Gecko/20100101 Firefox/41.0"
34.64.141.60 - - [14/Jun/2026:17:42:39 +0000] "GET /actuator/threaddump HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SM-J700F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36"
34.64.141.60 - - [14/Jun/2026:17:42:39 +0000] "GET /actuator/configprops HTTP/1.1" 403 118 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.7) Gecko/20060909 Firefox/1.5.0.7 MG(Novarra-Vision/6.9)"
34.64.141.60 - - [14/Jun/2026:17:42:39 +0000] "GET /actuator/logfile HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36"
34.64.141.60 - - [14/Jun/2026:17:42:39 +0000] "GET /actuator/env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36"
34.6
...
show less
Bad Web Bot
Web App Attack
🇦🇺
Proton7214
2026-06-14 14:26:45
(3 months ago)
GGS honeypot: Scanner hit honeypot `/actuator/heapdump` — GET /actuator/heapdump
Web App Attack
🇮🇹
mgarofano80
2026-06-14 06:33:18
(3 months ago)
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-06-14 05:35:04
(3 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack