🇳🇱
homeshowdomain.nl
2026-10-02 21:59:36
(1 day ago)
Auto-ban: >3000 req/min op 2026-10-02
Web App Attack
SSH
Hacking
2026-10-02 13:45:12
(1 day ago)
Observed scanned 8 known-sensitive endpoint(s), e.g.: /.//.env, /.env, /@fs/..%252f..%252f..%252f..% ...
show more
Observed scanned 8 known-sensitive endpoint(s), e.g.: /.//.env, /.env, /@fs/..%252f..%252f..%252f..%252f..%252froot/.env, /@fs/app/.env, /@fs/src/.env, /@fs/var/task/.env
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 04:42:00
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 35.245.39.6 (6.39.245.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 35.245.39.6 (6.39.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 00:41:55.409028 2026] [security2:error] [pid 16927:tid 16927] [client 35.245.39.6:37688] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.comicpreservation.com|F|2"] [data ".comicpreservation.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.comicpreservation.com"] [uri "/z9x8c7v6b5-debug-trigger-www.comicpreservation.com"] [unique_id "ar82E0Ke6dNc9WdCuf5AIAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-10-02 04:03:18
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
2026-10-02 03:24:53
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.245.39.6 (US/United States/6.39.245. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.245.39.6 (US/United States/6.39.245.35.bc.googleusercontent.com)
show less
SQL Injection
2026-10-02 03:01:19
(2 days ago)
Web App Attack
2026-10-02 02:00:04
(2 days ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 00:30:44
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 35.245.39.6 (6.39.245.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 35.245.39.6 (6.39.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 20:30:37.826786 2026] [security2:error] [pid 24550:tid 24550] [client 35.245.39.6:34588] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||comfortcartel.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "comfortcartel.com"] [uri "/z9x8c7v6b5-debug-trigger-comfortcartel.com"] [unique_id "ar77LfIXhiaBYZ_HdWqiIwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-10-01 23:27:28
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇧🇪
cmbplf
2026-10-01 23:21:58
(2 days ago)
3.023 requests from abuseipdb.com blacklisted IP (1mo15h44m)
Brute-Force
Bad Web Bot
🇧🇷
radardatelecom
2026-10-01 22:26:03
(2 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
2026-10-01 22:06:42
(2 days ago)
Observed scanned 1 known-sensitive endpoint(s), e.g.: /var/run/secrets/kubernetes.io/serviceaccount/ ...
show more
Observed scanned 1 known-sensitive endpoint(s), e.g.: /var/run/secrets/kubernetes.io/serviceaccount/token
show less
Bad Web Bot
Web App Attack
2026-10-01 20:15:35
(2 days ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.colorbar.gr; logs=/var/log/httpd/domains/colorbar.gr.log ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.colorbar.gr; logs=/var/log/httpd/domains/colorbar.gr.log; samples=/.ssh/id_ed25519 | /@fs/app/.env?raw?? | /@fs/src/.env?raw??
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 20:10:36
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 35.245.39.6 (6.39.245.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 35.245.39.6 (6.39.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 16:10:28.850384 2026] [security2:error] [pid 31046:tid 31046] [client 35.245.39.6:49928] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.banis-associates.com|F|2"] [data ".banis-associates.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.banis-associates.com"] [uri "/z9x8c7v6b5-debug-trigger-www.banis-associates.com"] [unique_id "ar6-NGNOGK1r0Qvfa52KpAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
www.mammazone.it
2026-10-01 19:41:56
(2 days ago)
[Thu Oct 01 21:41:51.099720 2026] [access_compat:error] [pid 2645832] [client 35.245.39.6:33686] AH0 ...
show more
[Thu Oct 01 21:41:51.099720 2026] [access_compat:error] [pid 2645832] [client 35.245.39.6:33686] AH01797: client denied by server configuration: /var/www/mammazone.it/web.config
[Thu Oct 01 21:41:56.046229 2026] [access_compat:error] [pid 2645799] [client 35.245.39.6:34292] AH01797: client denied by server configuration: /var/www/mammazone.it/rclone.conf
...
show less
Hacking
