🇳🇱
homeshowdomain.nl
2026-06-10 22:04:52
(13 minutes ago)
Auto-ban: 268 malicious requests on 2026-06-09 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 268 malicious requests on 2026-06-09 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇨🇦
polycoda
2026-06-10 21:03:14
(1 hour ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-06-10 19:56:50
(2 hours ago)
{"level":"info","ts":1781121409.5756698,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781121409.5756698,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.23.240.40","remote_port":"34642","client_ip":"34.23.240.40","proto":"HTTP/1.1","method":"GET","host":"baupdate.yxupdate.ponmlkjmlknmlkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/actuator/configprops","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 YaBrowser/19.7.2.455 Yowser/2.5 Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000055586,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://baupdate.yxupdate.ponmlkjmlknmlkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/actuator/configprops"],"Content-Type":[]}}
{"level":"info","ts":1781121409.5863032,"logger":"http.log.access.log1","msg":"handled request","re
...
show less
DDoS Attack
Web App Attack
2026-06-10 12:47:18
(9 hours ago)
34.23.240.40 - - [10/Jun/2026:14:47:16 +0200] "GET /actuator/configprops HTTP/1.1" 404 438 "-" "Peac ...
show more
34.23.240.40 - - [10/Jun/2026:14:47:16 +0200] "GET /actuator/configprops HTTP/1.1" 404 438 "-" "Peach/1.01 (Ubuntu 8.04 LTS; U; en)"
34.23.240.40 - - [10/Jun/2026:14:47:16 +0200] "GET /actuator/configprops HTTP/1.1" 404 243 "-" "Peach/1.01 (Ubuntu 8.04 LTS; U; en)"
34.23.240.40 - - [10/Jun/2026:14:47:16 +0200] "GET /threaddump HTTP/1.1" 404 438 "-" "Mozilla/5.0 (X11; NetBSD amd64; rv:16.0) Gecko/20121102 Firefox/16.0"
34.23.240.40 - - [10/Jun/2026:14:47:16 +0200] "GET /threaddump HTTP/1.1" 404 243 "-" "Mozilla/5.0 (X11; NetBSD amd64; rv:16.0) Gecko/20121102 Firefox/16.0"
34.23.240.40 - - [10/Jun/2026:14:47:16 +0200] "GET /api/actuator/heapdump HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Linux; U; Android 3.0.1; en-us; GT-P7100 Build/HRI83) AppleWebkit/534.13 (KHTML, like Gecko) Version/4.0 Safari/534.13"
34.23.240.40 - - [10/Jun/2026:14:47:16 +0200] "GET /api/actuator/heapdump HTTP/1.1" 404 243 "-" "Mozilla/5.0 (Linux; U; Android 3.0.1; en-us; GT-P7100 Build/HRI83) AppleWebkit/534.13 (KHTML, l
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 07:53:53
(14 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.23.240.40 (40.240.23.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.23.240.40 (40.240.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 03:53:47.158239 2026] [security2:error] [pid 25807:tid 25807] [client 34.23.240.40:53314] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sb-adventures.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sb-adventures.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aikYCyflrB1J6wE66XsM4QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-10 07:18:22
(15 hours ago)
IM360 WAF: Information Disclosure Attempt in WordPress MV:/wp-config.bak
Web App Attack
🇳🇱
Site.eu
2026-06-10 06:08:03
(16 hours ago)
Excessive multi-domain requests
Brute-Force
🇮🇹
clamehost.it
2026-06-10 05:36:01
(16 hours ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇳🇱
Cloud86 B.V.
2026-06-10 03:26:05
(18 hours ago)
categories: DDoS Attack
DDoS Attack
2026-06-10 00:42:40
(21 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
2026-06-10 00:39:48
(21 hours ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 00:31:41
(21 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.23.240.40 (40.240.23.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.23.240.40 (40.240.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 20:31:35.863218 2026] [security2:error] [pid 15725:tid 15725] [client 34.23.240.40:46500] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||humanicelement.com.zentinex.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "humanicelement.com.zentinex.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiiwZxc9T5YMmq3h8YpLkwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 23:56:28
(22 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.23.240.40 (40.240.23.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.23.240.40 (40.240.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 19:56:21.975006 2026] [security2:error] [pid 14497:tid 14497] [client 34.23.240.40:57712] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||yvonnebraden.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "yvonnebraden.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiioJXvy5Y-8KbbRMYCGVAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-09 22:01:33
(1 day ago)
Auto-ban: >3000 req/min op 2026-06-09
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-09 21:02:27
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.23.240.40 (40.240.23.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.23.240.40 (40.240.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 17:02:23.085146 2026] [security2:error] [pid 6707:tid 6714] [client 34.23.240.40:59532] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mysavvygourmet.meanmouse.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mysavvygourmet.meanmouse.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aih_X4KiSCDnC1bsR-eunwAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack