🇳🇱
homeshowdomain.nl
2026-09-30 22:01:28
(6 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-29.
show less
Web App Attack
SSH
Hacking
🇫🇷
IRISIO
2026-09-30 08:22:59
(6 days ago)
scans/SQL injection/spam posts : 18552 queries
Web App Attack
SQL Injection
🇺🇸
TPI-Abuse
2026-09-30 03:32:36
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.82.120.21 (21.120.82.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.82.120.21 (21.120.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:32:32.519412 2026] [security2:error] [pid 29067:tid 29067] [client 34.82.120.21:55026] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.advantagebrandservices.advantageinvestigation.com|F|2"] [data ".advantagebrandservices.advantageinvestigation.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.advantagebrandservices.advantageinvestigation.com"] [uri "/z9x8c7v6b5-debug-trigger-www.advantagebrandservices.advantageinvestigation.com"] [unique_id "aryC0IrJEqipC-7UvtUpHwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-09-30 03:08:53
(1 week ago)
Scanning for web/db/file exploits on www.alblaswatersport.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 03:03:55
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.82.120.21 (21.120.82.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.82.120.21 (21.120.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 23:03:50.255291 2026] [security2:error] [pid 20549:tid 20549] [client 34.82.120.21:54720] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.afterpromcruise.com.salsberggroup.com|F|2"] [data ".afterpromcruise.com.salsberggroup.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.afterpromcruise.com.salsberggroup.com"] [uri "/z9x8c7v6b5-debug-trigger-www.afterpromcruise.com.salsberggroup.com"] [unique_id "arx8FuRIGfHecArSrARCGgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-09-30 03:03:27
(1 week ago)
Malicious activity from IP detected: crowdsecurity/http-probing.
Web App Attack
Hacking
🇩🇪
SiyCah
2026-09-30 03:00:02
(1 week ago)
IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 02:44:44
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.82.120.21 (21.120.82.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.82.120.21 (21.120.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 22:44:38.570825 2026] [security2:error] [pid 2104:tid 2124] [client 34.82.120.21:41416] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.aliqshacommoditiescorporation.com.aliqsha.com|F|2"] [data ".aliqshacommoditiescorporation.com.aliqsha.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.aliqshacommoditiescorporation.com.aliqsha.com"] [uri "/z9x8c7v6b5-debug-trigger-www.aliqshacommoditiescorporation.com.aliqsha.com"] [unique_id "arx3lnL6y_2N-NSeKdwjFQAAAJA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 01:50:55
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.82.120.21 (21.120.82.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.82.120.21 (21.120.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:50:49.113567 2026] [security2:error] [pid 14915:tid 14941] [client 34.82.120.21:43852] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cynosureinternetservices.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cynosureinternetservices.com"] [uri "/z9x8c7v6b5-debug-trigger-cynosureinternetservices.com"] [unique_id "arxq-WMjADcl_YADLl97RgAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2026-09-30 01:33:06
(1 week ago)
URL scan
Brute-Force
Web App Attack
🇫🇷
Catalin Negru
2026-09-30 01:18:29
(1 week ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇺🇸
mnsf
2026-09-30 01:05:55
(1 week ago)
Abuse Detected (5)
Brute-Force
Web App Attack
🇬🇧
andypiper
2026-09-30 01:02:17
(1 week ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
2026-09-30 00:12:32
(1 week ago)
IP matched detection query many 3xx errors.
Brute-Force
🇧🇪
cmbplf
2026-09-30 00:07:14
(1 week ago)
4.442 requests from abuseipdb.com blacklisted IP (1yr5mos5d)
Brute-Force
Bad Web Bot
