🇳🇱
homeshowdomain.nl
2026-06-13 22:02:12
(1 day ago)
Auto-ban: >3000 req/min op 2026-06-13
Web App Attack
SSH
Hacking
🇵🇱
dcnet
2026-06-13 22:00:09
(1 day ago)
FortiGate detected DOS attack from IPv4 address 34.162.101.201
DDoS Attack
🇺🇸
TPI-Abuse
2026-06-13 16:34:23
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.162.101.201 (201.101.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.162.101.201 (201.101.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:34:19.302136 2026] [security2:error] [pid 1346:tid 1346] [client 34.162.101.201:41466] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.island.cleanhorizons.org|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.island.cleanhorizons.org"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai2Giz8tpwtaJciCtPwT0gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
Starburst SysOp Team
2026-06-13 15:48:35
(2 days ago)
BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked.. Matched phrase "Huawei" at REQUEST_HEADE ...
show more
BAD BOT, BAD BOT, WHAT YA GONNA DO - Detected and Blocked.. Matched phrase "Huawei" at REQUEST_HEADERS:User-Agent. (1100000-ams6-1)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-13 15:27:06
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.162.101.201 (201.101.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.162.101.201 (201.101.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:27:01.106463 2026] [security2:error] [pid 15928:tid 15928] [client 34.162.101.201:37282] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||boat-registration-hong-kong.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "boat-registration-hong-kong.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai12xRamAqnr7sCJIOK5owAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 14:39:00
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.162.101.201 (201.101.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.162.101.201 (201.101.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 10:38:53.283113 2026] [security2:error] [pid 28340:tid 28340] [client 34.162.101.201:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vl.365soft.top|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vl.365soft.top"] [uri "/backup.sql"] [unique_id "ai1rfewKK8hN0TQjRh3AHwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-13 10:05:33
(2 days ago)
Abuse Detected (14)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 10:03:54
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.162.101.201 (201.101.162.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.162.101.201 (201.101.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:03:48.971366 2026] [security2:error] [pid 29952:tid 29990] [client 34.162.101.201:33782] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.gavinblair.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.gavinblair.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai0rBLFNOE3aijTJmKQm1QAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-06-13 09:19:12
(2 days ago)
Aggressive web search of vulnerable pages: /secrets/aws.json /secrets/gcp.json /secrets/azure.json / ...
show more
Aggressive web search of vulnerable pages: /secrets/aws.json /secrets/gcp.json /secrets/azure.json /secrets/credentials.json /docker-compose.ym ...
show less
Web App Attack
🇨🇭
4server
2026-06-13 09:04:39
(2 days ago)
[SatJun1311:04:34.2115472026][security2:error][pid457819:tid458303][client34.162.101.201:0]ModSecuri ...
show more
[SatJun1311:04:34.2115472026][security2:error][pid457819:tid458303][client34.162.101.201:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpanel.creazione-siti-ticino.ch\"][uri\"/config.env\"][unique_id\"ai0dIqoAXZKD1J3V22Ne2AAAARE\"]
show less
Hacking
Web App Attack
2026-06-13 08:45:10
(2 days ago)
Aggressive web scan
Web App Attack
🇳🇱
Site.eu
2026-06-13 07:16:53
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇮🇹
VHosting
2026-06-13 04:40:02
(2 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-13 04:08:25
(2 days ago)
Too many Status 40X (11)
Scanning/Probing (61)
Request Overload (383)
Brute-Force
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-13 03:39:04
(2 days ago)
categories: DDoS Attack
DDoS Attack