🇳🇱
homeshowdomain.nl
2026-09-15 22:01:08
(1 month ago)
Auto-ban: >3000 req/min op 2026-09-15
Web App Attack
SSH
Hacking
🇩🇪
todix
2026-09-15 19:16:50
(1 month ago)
Web App Attack Exploid from 35.246.171.17
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-12 22:20:19
(1 month ago)
Brute-Force
Web App Attack
2026-09-11 14:33:00
(1 month ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
🇳🇱
melroy89
2026-09-11 05:46:01
(1 month ago)
35.246.171.17 - - [11/Sep/2026:07:45:14 +0200] "GET /rclone.conf HTTP/2.0" 403 93 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "melroy.org" 0.001
35.246.171.17 - - [11/Sep/2026:07:45:15 +0200] "GET ...
show more
35.246.171.17 - - [11/Sep/2026:07:45:14 +0200] "GET /rclone.conf HTTP/2.0" 403 93 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "melroy.org" 0.001
35.246.171.17 - - [11/Sep/2026:07:45:15 +0200] "GET /z9x8c7v6b5-debug-trigger-melroy.org HTTP/2.0" 403 93 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "melroy.org" 0.000
35.246.171.17 - - [11/Sep/2026:07:45:15 +0200] "GET /assets/manifest.json HTTP/2.0" 403 64 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" "melroy.org" 0.001
35.246.171.17 - - [11/Sep/2026:07:45:15 +0200] "POST /graphql HTTP/2.0" 403 64 "https://melroy.org" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" "melroy.org" 0.002
35.246.171.17 - - [11/Sep/2026:07:45:19 +0200] "POST /api/graphql HTTP/2.0" 403 64 "https://melroy.org" "Mozilla/5.
...
show less
Web App Attack
2026-09-11 05:26:53
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
dynamix
2026-09-11 05:06:21
(1 month ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Cuteminded
2026-09-11 05:05:19
(1 month ago)
Detected malicious web traffic
Web App Attack
🇨🇭
4server
2026-09-11 04:33:10
(1 month ago)
[FriSep1106:33:06.9808422026][security2:error][pid1560719:tid1560737][client35.246.171.17:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"96072 ...
show more
[FriSep1106:33:06.9808422026][security2:error][pid1560719:tid1560737][client35.246.171.17:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"labaita-lanzo.it\"][uri\"/.env.production\"][unique_id\"aqOEgitFFCJ9iKgcNRLchgAAAUA\"]
show less
Hacking
Web App Attack
2026-09-11 04:20:05
(1 month ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇺🇸
helios.live
2026-09-11 04:18:35
(1 month ago)
2026/09/11 04:18:31 [error] 271859#271859: *2797825 access forbidden by rule, client: 35.246.171.17, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/11 04:18:31 [error] 271856#271856: *2797824 access ...
show more
2026/09/11 04:18:31 [error] 271859#271859: *2797825 access forbidden by rule, client: 35.246.171.17, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/11 04:18:31 [error] 271856#271856: *2797824 access forbidden by rule, client: 35.246.171.17, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "kocerroxy.com"
2026/09/11 04:18:32 [error] 271856#271856: *2797925 access forbidden by rule, client: 35.246.171.17, server: kocerroxy.com, request: "GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1", host: "kocerroxy.com"
2026/09/11 04:18:35 [error] 271859#271859: *2797825 access forbidden by rule, client: 35.246.171.17, server: kocerroxy.com, request: "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1", host: "kocerroxy.com"
2026/09/11 04:18:35 [error] 271859#271859: *2797825 access forbidden by rule, client: 35.246.171.17, server: kocerroxy.com, request: "GET /@fs/root/.aws/credentials?
...
show less
Web App Attack
🇳🇱
e.fierstra
2026-09-11 03:54:28
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-11 03:34:02
(1 month ago)
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot) | path: /.docker/config.json (+1 more) | 2026-09-11 03:34 UTC
Bad Web Bot
🇧🇪
cmbplf
2026-09-11 03:32:56
(1 month ago)
248 requests with url.path */proc/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-11 03:30:47
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.246.171.17 (17.171.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 23:30:41.384134 2026] [security2:error] [pid 3153:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.171.17 (17.171.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 23:30:41.384134 2026] [security2:error] [pid 3153:tid 3153] [client 35.246.171.17:59906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jbaydeliveries.com"] [uri "/%2e%2e/.env"] [unique_id "aqN14a_w8ACtKDI35175UgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
