🇩🇪
maxpower
2026-10-12 15:44:47
(14 minutes ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.85.124.160 (JP/Japan/160.124.85.34.bc ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.85.124.160 (JP/Japan/160.124.85.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.85.124.160 - - [12/Oct/2026:17:44:41 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 403 0 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "34.85.124.160" host=villapardi.it
show less
Port Scan
🇺🇸
TPI-Abuse
2026-10-12 15:40:06
(19 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.85.124.160 (160.124.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.85.124.160 (160.124.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:40:01.691791 2026] [security2:error] [pid 22289:tid 22289] [client 34.85.124.160:41660] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||title26.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "title26.com"] [uri "/z9x8c7v6b5-debug-trigger-title26.com"] [unique_id "asz_UaniXMkjDad1VgcTLgAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-10-12 15:39:36
(19 minutes ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
rh24
2026-10-12 15:35:35
(23 minutes ago)
(badbots) Bad bot user-agent [redacted] from 34.85.124.160 (JP/Japan/160.124.85.34.bc.googleusercont ...
show more
(badbots) Bad bot user-agent [redacted] from 34.85.124.160 (JP/Japan/160.124.85.34.bc.googleusercontent.com)
show less
Hacking
🇳🇱
e.fierstra
2026-10-12 15:23:03
(36 minutes ago)
excessive HTTP 404 errors
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-12 15:19:29
(39 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.85.124.160 (160.124.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.85.124.160 (160.124.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:19:22.861888 2026] [security2:error] [pid 12301:tid 12301] [client 34.85.124.160:54294] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||onlyincanada-eh.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "onlyincanada-eh.com"] [uri "/z9x8c7v6b5-debug-trigger-onlyincanada-eh.com"] [unique_id "asz6ehX12-jfx0kzGOnlFgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Cuteminded
2026-10-12 15:08:12
(51 minutes ago)
URL Probing: lib/terminal-xhr.php
Web Spam
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-12 15:03:01
(56 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.85.124.160 (160.124.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.85.124.160 (160.124.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:02:57.187286 2026] [security2:error] [pid 29293:tid 29293] [client 34.85.124.160:59870] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||johnandramonadunn.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "johnandramonadunn.com"] [uri "/z9x8c7v6b5-debug-trigger-johnandramonadunn.com"] [unique_id "asz2oYjJWJ-7jRdEvuOEiAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
YF
2026-10-12 15:00:35
(58 minutes ago)
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
🇫🇷
security.rdmc.fr
2026-10-12 14:59:37
(59 minutes ago)
Web App Attack
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-12 14:55:28
(1 hour ago)
Bad bot ignoring robot.txt
Bad Web Bot
2026-10-12 14:46:11
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted] 34.85.124.160 (JP/Japan/160.124.85.34.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.85.124.160 (JP/Japan/160.124.85.34.bc.googleusercontent.com)
show less
SQL Injection
🇨🇭
zynex
2026-10-12 14:45:00
(1 hour ago)
URL Probing: /lib/terminal-xhr.php
Web App Attack
🇩🇪
LRob
2026-10-12 14:36:10
(1 hour ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/), Mozilla/5.0 ( ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/), Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler) (+8 more) | path: /lib/terminal-xhr.php, /webpack-stats.json, /manifest.json (+11 more)
show less
Bad Web Bot
🇩🇪
macrob
2026-10-12 14:29:23
(1 hour ago)
2026/10/12 14:29:21 [error] 2896054#2896054: *43885231 access forbidden by rule, client: 34.85.124.1 ...
show more
2026/10/12 14:29:21 [error] 2896054#2896054: *43885231 access forbidden by rule, client: 34.85.124.160, server: infinsa.com, request: "GET /.vite/manifest.json HTTP/2.0", host: "infinsa.com"
2026/10/12 14:29:21 [error] 2896054#2896054: *43885233 access forbidden by rule, client: 34.85.124.160, server: infinsa.com, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "infinsa.com"
2026/10/12 14:29:22 [error] 2896054#2896054: *43885231 access forbidden by rule, client: 34.85.124.160, server: infinsa.com, request: "GET /web/.env HTTP/2.0", host: "infinsa.com"
...
show less
Web App Attack
