🇳🇱
Alboweb B.V.
2026-06-15 02:11:11
(2 hours ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 00:49:55
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.151.219.180 (180.219.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.151.219.180 (180.219.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:49:50.971654 2026] [security2:error] [pid 2920:tid 2920] [client 34.151.219.180:59880] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||microkerneltechnologies.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "microkerneltechnologies.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai9MLsflrqGGgPyDvFadJwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:03:19
(4 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.151.219.180 (180.219.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.151.219.180 (180.219.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:03:13.986684 2026] [security2:error] [pid 19976:tid 19976] [client 34.151.219.180:58322] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||guller.net|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "guller.net"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai9BQUpDIQkoXdMjm17Z9gAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:09:56
(5 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.151.219.180 (180.219.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.151.219.180 (180.219.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:09:49.519056 2026] [security2:error] [pid 19304:tid 19327] [client 34.151.219.180:44802] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.certifiedecommerceconsultant.com.aafm.us|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.certifiedecommerceconsultant.com.aafm.us"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai80vQmhlCfpTyhf9fSIawAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 22:18:53
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.151.219.180 (180.219.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.151.219.180 (180.219.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:18:46.954506 2026] [security2:error] [pid 5106:tid 5106] [client 34.151.219.180:40062] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thewillsmith.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thewillsmith.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai8oxkdY8BZuFufFTcGWTAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-14 20:52:01
(7 hours ago)
categories: DDoS Attack
DDoS Attack
🇳🇱
Savvii
2026-06-14 17:51:57
(10 hours ago)
20 attempts against mh-misbehave-ban on lime
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-14 07:07:07
(21 hours ago)
Scanning/Probing (61)
Request Overload (427)
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-06-14 06:40:04
(21 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇫🇷
Baking333
2026-06-13 23:37:57
(1 day ago)
[redacted] 34.151.219.180 - - [14/Jun/2026:00:37:56 +0100] "GET /.aws/config HTTP/1.1" 200 3937 0/12 ...
show more
[redacted] 34.151.219.180 - - [14/Jun/2026:00:37:56 +0100] "GET /.aws/config HTTP/1.1" 200 3937 0/12934 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3844.0 Safari/537.36" [redacted] 34.151.219.180 - - [14/Jun/2026:00:37:56 +0100] "GET /admin/[redacted] HTTP/1.1" 200 3937 0/18425 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36 OPR/62.0.3331.116"
show less
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-13 20:13:07
(1 day ago)
categories: DDoS Attack
DDoS Attack