|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇫🇷
masterguru
|
|
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-195)
|
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 17:52:52.007486 2026] [security2:error] [pid 31562:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 17:52:52.007486 2026] [security2:error] [pid 31562:tid 31577] [client 35.188.252.221:51600] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||philacentric.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "philacentric.com"] [uri "/z9x8c7v6b5-debug-trigger-philacentric.com"] [unique_id "asLKtFBsvSMW8gY7r2HnAAAAAM0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.188.252.221 - - [04/Oct/2026:23:51:39 +0200] "GET /.env HTTP/2.0" 301 105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.188.252.221 - - [04/Oct/2026:23:51:39 +0200] "GET /.env HTTP/2.0" 301 105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 17:36:43.504371 2026] [security2:error] [pid 5188:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 17:36:43.504371 2026] [security2:error] [pid 5188:tid 5207] [client 35.188.252.221:52628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maxelon.com"] [uri "/.htpasswd"] [unique_id "asLG60OmZhMDhbe6u7XpBQAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 17:21:35.506539 2026] [security2:error] [pid 19119:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 17:21:35.506539 2026] [security2:error] [pid 19119:tid 19119] [client 35.188.252.221:58458] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||jbcllcnet.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jbcllcnet.com"] [uri "/z9x8c7v6b5-debug-trigger-jbcllcnet.com"] [unique_id "asLDX-wenfI3LH7yChxDjAAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇫🇷
ELYAZ
|
|
(y3) Failed access -byebye- from 35.188.252.221 (US/United States/221.252.188.35.bc.googleusercontent.com): (CF_ENABLE)
|
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 16:53:12.721818 2026] [security2:error] [pid 22524:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 16:53:12.721818 2026] [security2:error] [pid 22524:tid 22524] [client 35.188.252.221:52094] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||drbolen.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "drbolen.com"] [uri "/z9x8c7v6b5-debug-trigger-drbolen.com"] [unique_id "asK8uCQGi9vHoH8mdnqBYwAAADY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
Dunham Support
|
|
(mod_security) mod_security triggered on hostname [redacted] 35.188.252.221 (US/United States/221.252.188.35.bc.googleusercontent.com)
|
SQL Injection
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 16:35:09.053776 2026] [security2:error] [pid 13546:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 35.188.252.221 (221.252.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 16:35:09.053776 2026] [security2:error] [pid 13546:tid 13546] [client 35.188.252.221:49556] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||buynorthwest.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "buynorthwest.com"] [uri "/z9x8c7v6b5-debug-trigger-buynorthwest.com"] [unique_id "asK4fXUgPetTNkPvS1cFEAAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
oralunal
|
|
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
OceanTreasure
|
|
tcp/8443; Unsolicited SYN to a port that has never been offered on this address (closed, no service ever) @ 2026-10-04T18:27:28Z
|
Port Scan
|
