🇺🇸
snappic
2026-10-11 12:40:35
(3 days ago)
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (c ...
show more
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)]
show less
Bad Web Bot
Web App Attack
🇫🇷
security.rdmc.fr
2026-10-11 02:24:44
(3 days ago)
Sensitive File Scan
Web App Attack
🇺🇸
dot.mg
2026-10-11 02:23:05
(3 days ago)
Bad behaviour
Web Spam
2026-10-11 02:20:03
(3 days ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:53:15
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.87.132.55 (55.132.87.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.87.132.55 (55.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:53:11.595871 2026] [security2:error] [pid 6236:tid 6236] [client 34.87.132.55:34502] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||twangcaster.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "twangcaster.com"] [uri "/z9x8c7v6b5-debug-trigger-twangcaster.com"] [unique_id "asrsB-eOaMfH7vcS-_PaGwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
tvipper.com
2026-10-11 01:49:48
(4 days ago)
path traversal and probing for exposed files and admin pages: 12 attempts within 1 minutes, seen by ...
show more
path traversal and probing for exposed files and admin pages: 12 attempts within 1 minutes, seen by web server log, WAF, fail2ban and CrowdSec (reported by RemotePower)
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:38:08
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.87.132.55 (55.132.87.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.87.132.55 (55.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:38:01.608693 2026] [security2:error] [pid 19521:tid 19521] [client 34.87.132.55:40278] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||turtle-trap.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "turtle-trap.com"] [uri "/z9x8c7v6b5-debug-trigger-turtle-trap.com"] [unique_id "asroeW-EbhsNRoWvIQCYoAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-11 01:27:44
(4 days ago)
34.87.132.55 - - [11/Oct/2026:09:27:43 +0800] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 196 "-" "Mozill ...
show more
34.87.132.55 - - [11/Oct/2026:09:27:43 +0800] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
ismailk
2026-10-11 01:19:05
(4 days ago)
WordPress attack on tuncayozkan.com (auto-detected): tur=imza ulke=SG puan=100 nginx=14 wf=7 cf=31 h ...
show more
WordPress attack on tuncayozkan.com (auto-detected): tur=imza ulke=SG puan=100 nginx=14 wf=7 cf=31 hiz=58 404cesit=43 gizliyol=5. Blocked by adaptive firewall.
show less
Web App Attack
Bad Web Bot
🇩🇪
rh24
2026-10-11 01:15:25
(4 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.87.132.55 (SG/Sin ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.87.132.55 (SG/Singapore/55.132.87.34.bc.googleusercontent.com)
show less
Bad Web Bot
🇩🇪
BlueWire Hosting
2026-10-11 00:26:59
(4 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack
2026-10-10 23:04:38
(4 days ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 23:03:27
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.87.132.55 (55.132.87.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.87.132.55 (55.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:03:26.013972 2026] [security2:error] [pid 28819:tid 28819] [client 34.87.132.55:50398] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tribwatch.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tribwatch.com"] [uri "/z9x8c7v6b5-debug-trigger-tribwatch.com"] [unique_id "asrEPlr4YNS9tv0f8160PAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
EmilGH
2026-10-10 22:57:51
(4 days ago)
34.87.132.55 - - [10/Oct/2026:22:57:49 +0000] "GET /41d3wu60i21suh2vk69z HTTP/1.1" 404 540 "-" "Mozi ...
show more
34.87.132.55 - - [10/Oct/2026:22:57:49 +0000] "GET /41d3wu60i21suh2vk69z HTTP/1.1" 404 540 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.87.132.55 - - [10/Oct/2026:22:57:49 +0000] "GET /assets/manifest.json HTTP/1.1" 404 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.87.132.55 - - [10/Oct/2026:22:57:50 +0000] "GET /dist/manifest.json HTTP/1.1" 404 4517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.87.132.55 - - [10/Oct/2026:22:57:50 +0000] "GET /z9x8c7v6b5-debug-trigger-triadtradinggroup.com HTTP/1.1" 404 4518 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.87.132.55 - - [10/Oct/2026:22:57:50 +0000] "GET /rz91ojrgvyzttitqaezz HTTP/1.1" 404 4518 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 22:37:24
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.87.132.55 (55.132.87.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.87.132.55 (55.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:37:18.476646 2026] [security2:error] [pid 8993:tid 8993] [client 34.87.132.55:38584] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||treeofloveproductions.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "treeofloveproductions.com"] [uri "/z9x8c7v6b5-debug-trigger-treeofloveproductions.com"] [unique_id "asq-Hv8YuNeXPx-Ancw5jQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
