🇳🇱
homeshowdomain.nl
2026-09-30 22:01:40
UTC ·
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-29.
Web App Attack
SSH
Hacking
🇪🇸
robotstxt
2026-09-30 05:00:46
UTC ·
(1 month ago)
35.236.141.45 - - [30/Sep/2026:04:59:56 +0000] "GET /wp-content/cache/autoptimize/1/js/autoptimize_single_04fb3be45e83f10f4b853484ebb3ba98.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152. ...
show more
35.236.141.45 - - [30/Sep/2026:04:59:56 +0000] "GET /wp-content/cache/autoptimize/1/js/autoptimize_single_04fb3be45e83f10f4b853484ebb3ba98.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "35.236.141.45" edge="172.69.221.177"
35.236.141.45 - - [30/Sep/2026:04:59:56 +0000] "GET /wp-content/cache/autoptimize/1/js/autoptimize_single_6857ed16327f63b33982ea69d8f73350.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "35.236.141.45" edge="162.158.243.169"
35.236.141.45 - - [30/Sep/2026:04:59:56 +0000] "GET /wp-content/cache/autoptimize/1/js/autoptimize_single_ed53c301c6456fc8c0f3c1f9857b2b13.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "35.236.141.45" edge="162.158.243.143"
35.23
...
show less
Web App Attack
Anonymous
2026-09-30 04:43:35
UTC ·
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
antlac1
2026-09-30 03:44:01
UTC ·
(1 month ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇩🇪
mxbl
2026-09-30 03:00:13
UTC ·
(1 month ago)
Scanning for CMS vulnerabilities on a non-CMS system: /wp-json
Web App Attack
🇳🇱
e.fierstra
2026-09-30 02:43:32
UTC ·
(1 month ago)
excessive HTTP 404 errors
Bad Web Bot
🇫🇷
masterguru
2026-09-30 02:21:27
UTC ·
(1 month ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
Anonymous
2026-09-30 02:07:02
UTC ·
(1 month ago)
35.236.141.45 - - [30/Sep/2026:04:07:01 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
35.236.141.45 - - [30/Sep/2026:04:07:01 +0200] "GET /auth HT ...
show more
35.236.141.45 - - [30/Sep/2026:04:07:01 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
35.236.141.45 - - [30/Sep/2026:04:07:01 +0200] "GET /auth HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
35.236.141.45 - - [30/Sep/2026:04:07:01 +0200] "GET /users/login HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
35.236.141.45 - - [30/Sep/2026:04:07:02 +0200] "GET /sign-in HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
35.236.141.45 - - [30/Sep/2026:04:07:02 +0200] "GET /signin HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
35.236.141.45 - - [30/
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 01:56:36
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.236.141.45 (45.141.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:56:30.946226 2026] [security2:error] [pid 25263:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.236.141.45 (45.141.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:56:30.946226 2026] [security2:error] [pid 25263:tid 25263] [client 35.236.141.45:50612] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mininomotorfix.com.mininoarg.com|F|2"] [data ".mininomotorfix.com.mininoarg.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mininomotorfix.com.mininoarg.com"] [uri "/z9x8c7v6b5-debug-trigger-www.mininomotorfix.com.mininoarg.com"] [unique_id "arxsTniwtQAUpb1D_PrzUQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-30 01:23:00
UTC ·
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-196)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-30 00:18:57
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.236.141.45 (45.141.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:18:53.630543 2026] [security2:error] [pid 17573:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.236.141.45 (45.141.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 20:18:53.630543 2026] [security2:error] [pid 17573:tid 17600] [client 35.236.141.45:49402] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.miltonthepuppy.sailcleaner.com|F|2"] [data ".miltonthepuppy.sailcleaner.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.miltonthepuppy.sailcleaner.com"] [uri "/z9x8c7v6b5-debug-trigger-www.miltonthepuppy.sailcleaner.com"] [unique_id "arxVbVfug8SxE73HcvLAjAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-29 23:04:16
UTC ·
(1 month ago)
3.333 requests from abuseipdb.com blacklisted IP (11mos1w3d)
Brute-Force
Bad Web Bot
🇧🇷
radardatelecom
2026-09-29 22:26:02
UTC ·
(1 month ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-29 22:05:33
UTC ·
(1 month ago)
Too many Status 40X (14)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-29 21:59:34
UTC ·
(1 month ago)
Auto-ban: >3000 req/min op 2026-09-29
Web App Attack
SSH
Hacking