๐ฎ๐น
CoreTech srl
2026-09-24 03:23:57
(9 minutes ago)
cloudlinux2 fail2ban: 2026-09-24 05:19:10,641 fail2ban.filter [1603]: INFO [recidive] Fou ...
show more
cloudlinux2 fail2ban: 2026-09-24 05:19:10,641 fail2ban.filter [1603]: INFO [recidive] Found 34.7.160.114 - 2026-09-24 05:19:10cloudlinux2 fail2ban: 2026-09-24 05:19:08,835 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 34.7.160.114 - 2026-09-24 05:19:08cloudlinux2 fail2ban: 2026-09-24 05:19:10,624 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 34.7.160.114 - 2026-09-24 05:19:10cloudlinux2 fail2ban: 2026-09-24 05:19:12,656 fail2ban.actions [1603]: NOTICE [plesk-modsecurity] Unban 34.59.55.249cloudlinux2 fail2ban: 2026-09-24 05:19:10,637 fail2ban.actions [1603]: NOTICE [plesk-modsecurity] Ban 34.7.160.114cloudlinux2 fail2ban: 2026-09-24 05:19:09,908 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 34.7.160.114 - 2026-09-24 05:19:09cloudlinux2 fail2ban: 2026-09-24 05:19:09,897 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 34.7.160.114 - 2026-09-24 05:19:09cloudlinux2 fail2ban: 2026-09-24 05:19:10,631 fail2ban.fi
show less
Brute-Force
Anonymous
2026-09-24 03:20:47
(12 minutes ago)
34.7.160.114 - - [24/Sep/2026:05:20:38 +0200] "GET /dist/.vite/manifest.json HTTP/1.1" 404 30109
34. ...
show more
34.7.160.114 - - [24/Sep/2026:05:20:38 +0200] "GET /dist/.vite/manifest.json HTTP/1.1" 404 30109
34.7.160.114 - - [24/Sep/2026:05:20:38 +0200] "GET /build/manifest.json HTTP/1.1" 404 30109
34.7.160.114 - - [24/Sep/2026:05:20:38 +0200] "GET /z9x8c7v6b5-debug-trigger-crypcool.com HTTP/1.1" 404 30109
34.7.160.114 - - [24/Sep/2026:05:20:38 +0200] "GET /dist/manifest.json HTTP/1.1" 404 30109
34.7.160.114 - - [24/Sep/2026:05:20:38 +0200] "GET /46w4ewavtf8xh2jej2du HTTP/1.1" 404 30109
34.7.160.114 - - [24/Sep/2026:05:20:38 +0200] "GET /fjsdvpl783dp86c6swr8 HTTP/1.1" 404 30109
34.7.160.114 - - [24/Sep/2026:05:20:40 +0200] "POST /api/fs/exec HTTP/1.1" 404 29471
34.7.160.114 - - [24/Sep/2026:05:20:41 +0200] "POST /graphql HTTP/1.1" 404 29471
34.7.160.114 - - [24/Sep/2026:05:20:43 +0200] "GET /proc/self/cmdline HTTP/1.1" 404 30109
34.7.160.114 - - [24/Sep/2026:05:20:43 +0200] "POST /api/graphql HTTP/1.1" 404 27931
...
show less
Web Spam
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 02:41:11
(52 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 22:41:04.698051 2026] [security2:error] [pid 23644:tid 23644] [client 34.7.160.114:40938] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||deweysearch.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deweysearch.com"] [uri "/z9x8c7v6b5-debug-trigger-deweysearch.com"] [unique_id "arSNwFpXHszJa7s0TKu2-wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 01:59:22
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 21:59:14.979751 2026] [security2:error] [pid 30823:tid 30823] [client 34.7.160.114:41340] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dginstruments.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dginstruments.com"] [uri "/z9x8c7v6b5-debug-trigger-dginstruments.com"] [unique_id "arSD8jcsLj4z0uFtWlSWfwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-24 01:54:34
(1 hour ago)
This address declares itself a crawler and keeps requesting pages after being refused (HTTP 403/429) ...
show more
This address declares itself a crawler and keeps requesting pages after being refused (HTTP 403/429) and told to stop by robots.txt. A crawler that ignores refusals costs our servers capacity for nothing and is treated as abusive; blocked. Please make it honour robots.txt and the refusals it is given. | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] ) (+2 more) | path: /build/manifest.json (+13 more) | 2026-09-24 01:54 UTC
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-24 01:29:49
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 21:29:41.968598 2026] [security2:error] [pid 29273:tid 29378] [client 34.7.160.114:38424] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dhsandberg.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dhsandberg.com"] [uri "/z9x8c7v6b5-debug-trigger-dhsandberg.com"] [unique_id "arR9BUCFIcQjcm4r8XeJOgAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
andypiper
2026-09-24 01:02:02
(2 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 01:00:08
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 20:59:58.902069 2026] [security2:error] [pid 17500:tid 17500] [client 34.7.160.114:39944] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||dianamead.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "dianamead.com"] [uri "/z9x8c7v6b5-debug-trigger-dianamead.com"] [unique_id "arR2DgkpidyODWyU1N6s3AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-24 00:48:48
(2 hours ago)
โฃ๏ธ WAF rule violation. Dangerous payload detected in the request.
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-24 00:42:36
(2 hours ago)
cloudlinux2 fail2ban: 2026-09-24 02:35:30,129 fail2ban.filter [1603]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-24 02:35:30,129 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 120.242.140.159 - 2026-09-24 02:35:30cloudlinux2 fail2ban: 2026-09-24 02:36:39,686 fail2ban.actions [1603]: NOTICE [plesk-modsecurity] Unban 143.105.152.80cloudlinux2 fail2ban: 2026-09-24 02:36:52,305 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 34.7.160.114 - 2026-09-24 02:36:52cloudlinux2 fail2ban: 2026-09-24 02:36:51,921 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 34.7.160.114 - 2026-09-24 02:36:51cloudlinux2 fail2ban: 2026-09-24 02:36:51,207 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 34.7.160.114 - 2026-09-24 02:36:51cloudlinux2 fail2ban: 2026-09-24 02:36:52,315 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 34.7.160.114 - 2026-09-24 02:36:52cloudlinux2 fail2ban: 2026-09-24 02:36:52,291 fail2ban.filter [1603]: INFO [plesk-modsecurity] Found 34.7.160.114 - 2026-09-24 02:36:52cloudlinux2 fail2ba
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-24 00:40:11
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.160.114 (114.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 20:40:08.488006 2026] [security2:error] [pid 22461:tid 22461] [client 34.7.160.114:37234] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||diceknobs.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "diceknobs.com"] [uri "/z9x8c7v6b5-debug-trigger-diceknobs.com"] [unique_id "arRxaCdp5LEpYDS1XiReHAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-09-24 00:25:14
(3 hours ago)
11.211 requests from abuseipdb.com blacklisted IP (1yr3mos2w)
Brute-Force
Bad Web Bot
๐ฉ๐ช
Skyrider
2026-09-24 00:12:28
(3 hours ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
๐ฉ๐ช
TheDjRider
2026-09-24 00:08:38
(3 hours ago)
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ...
show more
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-09-24T00:08:33.320207328Z. Context: http_status=301, http_status=200
show less
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-09-23 23:37:48
(3 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack