🇧🇷
radardatelecom
2026-11-07 16:54:10
UTC ·
(1 week ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇩🇪
Holger
2026-11-07 16:04:34
UTC ·
(1 week ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
Secure Gateway®️
2026-11-05 22:00:37
UTC ·
(1 week ago)
Report By Secure Gateway Security Team: Brute Force Login Attempt
Web App Attack
🇺🇸
ALSCO®️
2026-11-05 22:00:37
UTC ·
(1 week ago)
Report By ALSCO Security Team: Brute Force Login Attempt
SQL Injection
🇩🇪
Holger
2026-11-05 18:29:20
UTC ·
(1 week ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇩🇪
XICTRON
2026-11-05 12:10:03
UTC ·
(1 week ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇺🇸
Blue Pumpkin
2026-11-05 12:06:40
UTC ·
(1 week ago)
35.234.245.89 - - [05/Nov/2026:12:06:40 +0000] "GET /auth.json HTTP/1.1" 307 718 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
Brute-Force
🇫🇷
Zundapper
2026-11-05 11:59:18
UTC ·
(1 week ago)
35.234.245.89 - - [05/Nov/2026:12:59:16 +0100] "GET /robots.txt HTTP/2.0" 404 106 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.234.245.89 - - [05/Nov/2026:12:59:16 +0100] "G ...
show more
35.234.245.89 - - [05/Nov/2026:12:59:16 +0100] "GET /robots.txt HTTP/2.0" 404 106 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.234.245.89 - - [05/Nov/2026:12:59:16 +0100] "GET /sitemap.xml HTTP/2.0" 404 106 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.234.245.89 - - [05/Nov/2026:12:59:16 +0100] "GET /sitemap.xml HTTP/2.0" 404 106 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.234.245.89 - - [05/Nov/2026:12:59:17 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 106 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Web App Attack
Port Scan
🇦🇺
AWW-Admin
2026-11-05 11:35:17
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 35.234.245.89 (CA/Canada/89.245.234.35.bc.googleusercontent.com)
SQL Injection
🇺🇸
TPI-Abuse
2026-11-05 10:19:48
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 35.234.245.89 (89.245.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:19:42.622543 2026] [security2:error] [pid 22929:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.234.245.89 (89.245.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:19:42.622543 2026] [security2:error] [pid 22929:tid 22929] [client 35.234.245.89:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hondabvi.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hondabvi.com"] [uri "/z9x8c7v6b5-debug-trigger-hondabvi.com"] [unique_id "auxYPlqS52498ZvR0CX9eAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-11-05 09:21:19
UTC ·
(1 week ago)
Automatically blocked due to distributed attack
Hacking
🇩🇪
akasolutions.de
2026-11-05 08:38:28
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 35.234.245.89 (CA/Canada/89.245.234.35.bc.googleusercontent.com)
SQL Injection
🇩🇪
svr
2026-11-05 08:15:54
UTC ·
(1 week ago)
Abusive Automated Web Scanner
Web App Attack
🇩🇰
floyd_dk
2026-11-05 07:58:21
UTC ·
(1 week ago)
35.234.245.89 - - [05/Nov/2026:07:58:20 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
35.234.245.89 - - [05/Nov/2026:07:58:20 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "M ...
show more
35.234.245.89 - - [05/Nov/2026:07:58:20 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
35.234.245.89 - - [05/Nov/2026:07:58:20 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
35.234.245.89 - - [05/Nov/2026:07:58:20 +0000] "GET /ycoc9vmnowf2h3vo2wts HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.234.245.89 - - [05/Nov/2026:07:58:20 +0000] "GET /asset-manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
35.234.245.89 - - [05/Nov/2026:07:58:20 +0000] "GET /static/manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
35.234.245.89 - - [05/Nov/2026:07:58:20 +0000] "GET /assets/manifest.json HTTP/2.0" 404 555 "-" "Mozil
...
show less
Web App Attack
🇵🇷
HRCOM
2026-11-05 07:26:37
UTC ·
(1 week ago)
Web attack: probing for sensitive files with path traversal / file inclusion attempts. 15 malicious requests (33 in total) between 2026-11-05 07:26:35 UTC and 2026-11-05 07:26:38 UTC. Examples: GET /.env.supabase; GET /userfiles?path=../../.env; GET ...
show more
Web attack: probing for sensitive files with path traversal / file inclusion attempts. 15 malicious requests (33 in total) between 2026-11-05 07:26:35 UTC and 2026-11-05 07:26:38 UTC. Examples: GET /.env.supabase; GET /userfiles?path=../../.env; GET /storage/.env; GET /.env.swp; GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared (+10 more). Attack requests answered 302 x15; no file was disclosed. User-Agent claims to be Googlebot, but reverse DNS of the IP does not belong to Googlebot (spoofed crawler). Rotated 22 different User-Agent strings during the attack. Burst of 10+ requests at 2+ per second. Target: web server (HTTPS). Blocked automatically after repeated requests for sensitive files.
show less
Web App Attack
Hacking
Bad Web Bot
