|
🇩🇪
klaus_ph
|
|
2026-09-25 19:59:28,260 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.87.182.213
...
|
Bad Web Bot
|
|
🇩🇪
klaus_ph
|
|
2026-09-22 23:43:41,014 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.87.182.213
...
|
Bad Web Bot
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.87.182.213 (213.182.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:23:27.139209 2026] [security2:error] [pid 1236:tid 1 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.87.182.213 (213.182.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:23:27.139209 2026] [security2:error] [pid 1236:tid 1236] [client 34.87.182.213:50144] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||hyps.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hyps.com"] [uri "/rclone.conf"] [unique_id "aq_6b0P53jS1VXxUsYg_tgAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
ELYAZ
|
|
(y3) Failed access -byebye- from 34.87.182.213 (SG/Singapore/213.182.87.34.bc.googleusercontent.com): (CF_ENABLE)
|
Hacking
|
|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted])
|
SQL Injection
|
|
🇩🇪
konseptit
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.87.182.213 (SG/Singapore/213.182.87.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.87.182.213 (213.182.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:38:28.483539 2026] [security2:error] [pid 464:tid 46 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.182.213 (213.182.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:38:28.483539 2026] [security2:error] [pid 464:tid 464] [client 34.87.182.213:42040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hxctechllc.com"] [uri "/.env.js"] [unique_id "aq_v5KCywj3girgMZZgekQAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.87.182.213 (213.182.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:18:28.000061 2026] [security2:error] [pid 16400:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.182.213 (213.182.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:18:28.000061 2026] [security2:error] [pid 16400:tid 16400] [client 34.87.182.213:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hvacs-aircon.com"] [uri "/deploy/.env"] [unique_id "aq_rM7Wqokkf_SGqHIgaUAAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
mnsf
|
|
Too many Status 40X (11)
|
Brute-Force
Web App Attack
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/grafana-cve-2021-43798
|
Brute-Force
Web App Attack
|
|
🇳🇱
svr
|
|
Abusive Automated Web Scanner
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:243320) triggered by 34.87.182.213 (213.182.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:01:47.169732 2026] [security2:error] [pid 5934:tid 5 ...
show more
(mod_security) mod_security (id:243320) triggered by 34.87.182.213 (213.182.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:01:47.169732 2026] [security2:error] [pid 5934:tid 5958] [client 34.87.182.213:36562] ModSecurity: Access denied with code 403 (phase 2). String match "/.profile" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6621"] [id "243320"] [rev "1"] [msg "COMODO WAF: Information disclosure vulnerability in Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products (CVE-2016-6639)||humaehealth.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "humaehealth.com"] [uri "/.profile"] [unique_id "aq_ZO3dtCEIx02CpOfyF8wAAAFY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇺
AWW-Admin
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.87.182.213 (SG/Singapore/213.182.87.34.bc.googleusercontent.com)
|
SQL Injection
|
