Anonymous
2026-10-07 12:17:05
(1 week ago)
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 ( ...
show more
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0 | net: Google LLC AS396982
show less
Bad Web Bot
Anonymous
2026-10-05 04:10:16
(1 week ago)
git/env leak probe
Web App Attack
๐จ๐ฆ
SSH-Admin
2026-10-05 04:00:15
(1 week ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
Anonymous
2026-10-04 21:26:36
(1 week ago)
malicious scanning tool activity
Web App Attack
๐ธ๐ฌ
khairilgunawan
2026-10-04 21:18:36
(1 week ago)
ZonaKuota Sentinel: Malicious automated scanner/exploit probe trapped. Blocked.
Web App Attack
Bad Web Bot
๐ช๐ธ
masterguru
2026-10-04 21:18:25
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
Anonymous
2026-10-04 21:17:00
(1 week ago)
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 ( ...
show more
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-04 21:06:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.38.222.114 (114.222.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.222.114 (114.222.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 17:06:42.526174 2026] [security2:error] [pid 1618:tid 1618] [client 34.38.222.114:58414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twccsolutions.com"] [uri "/images../.env"] [unique_id "asK_4pt7CgLclLhLfUdNnAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
tvipper.com
2026-10-04 21:06:38
(1 week ago)
Auto reported by IDS
Web App Attack
Anonymous
2026-10-04 20:51:12
(1 week ago)
Web App Attack
๐ซ๐ท
dynamix
2026-10-04 20:50:35
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ฌ๐ท
setupgr
2026-10-04 20:50:15
(1 week ago)
(mod_security) mod_security (id:11000011) triggered by 34.38.222.114 (BE/Belgium/Brussels Capital/Br ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.38.222.114 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 04 23:50:10.650846 2026] [security2:error] [pid 2332:tid 627167] [remote 34.38.222.114:46886] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 114.222.38.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "setworldup365.com"] [uri "/"] [unique_id "asK8ArMG-rtTVQniqHtRQwAASBw"]
show less
Port Scan
๐ฆ๐น
penguin-solutions.at
2026-10-04 20:32:24
(1 week ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
๐บ๐ธ
entangled_mongoose
2026-10-04 20:26:32
(1 week ago)
Probed /wp-json.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-04 20:15:14
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.38.222.114 (114.222.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.38.222.114 (114.222.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 16:15:09.998891 2026] [security2:error] [pid 23054:tid 23054] [client 34.38.222.114:39572] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||joeordie.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "joeordie.com"] [uri "/z9x8c7v6b5-debug-trigger-joeordie.com"] [unique_id "asKzzeIOUoMh0xBfKNbL5QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack