🇳🇱
homeshowdomain.nl
2026-06-16 21:59:13
(23 hours ago)
Auto-ban: 327 malicious requests on 2026-06-15 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 327 malicious requests on 2026-06-15 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-15 04:32:58
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 35.246.204.51 (51.204.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.246.204.51 (51.204.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:32:52.220257 2026] [security2:error] [pid 17789:tid 17789] [client 35.246.204.51:53362] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||leviwalkerportfolio.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "leviwalkerportfolio.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai-AdL0wpvci2yTjQJAgrAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-15 02:54:31
(2 days ago)
15 attempts against mh-modsecurity-ban on mist
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-15 01:06:41
(2 days ago)
Too many Status 40X (24)
Brute-Force
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-15 00:13:03
(2 days ago)
categories: DDoS Attack
DDoS Attack
🇦🇹
Starburst SysOp Team
2026-06-14 16:07:48
(3 days ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-ams6-1)
Hacking
Bad Web Bot
🇪🇸
robotstxt
2026-06-14 15:44:23
(3 days ago)
35.246.204.51 - - [14/Jun/2026:15:44:19 +0000] "GET /mailer.zip HTTP/1.1" 404 146 "-" "Mozilla/5.0 ( ...
show more
35.246.204.51 - - [14/Jun/2026:15:44:19 +0000] "GET /mailer.zip HTTP/1.1" 404 146 "-" "Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 Nokia5700/3.27; Profile/MIDP-2.0 Configuration/CLDC-1.1) AppleWebKit/413 (KHTML, like Gecko) Safari/413" "-"
35.246.204.51 - - [14/Jun/2026:15:44:19 +0000] "GET /mail.zip HTTP/1.1" 404 146 "-" "Mozilla/5.0 (X11; U; Linux i686; pl-PL; rv:1.9.0.2) Gecko/20121223 Ubuntu/9.25 (jaunty) Firefox/3.8" "-"
35.246.204.51 - - [14/Jun/2026:15:44:23 +0000] "GET /mailer/sendgrid.js HTTP/1.1" 404 180 "-" "Mozilla/5.0 (Linux; Android 7.1.2; Redmi 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36" "-"
35.246.204.51 - - [14/Jun/2026:15:44:23 +0000] "GET /mailer/sendgrid.py HTTP/1.1" 404 180 "-" "Mozilla/5.0 (Linux; Android 9; LM-G710VM) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "-"
35.246.204.51 - - [14/Jun/2026:15:44:23 +0000] "GET /mail/sendgrid.py HTTP/1.1" 404 180 "-" "Mozilla/5.0 (Linux; Android 9;
...
show less
Bad Web Bot
🇳🇱
Savvii
2026-06-14 13:23:22
(3 days ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 07:33:44
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 35.246.204.51 (51.204.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.246.204.51 (51.204.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:33:38.502440 2026] [security2:error] [pid 28487:tid 28487] [client 35.246.204.51:38980] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||inlinesoftware.net|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "inlinesoftware.net"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai5ZUuTEO04pMyR4YBU2YAAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-14 07:19:13
(3 days ago)
Unauthorized access to webpage admin
Web App Attack
🇫🇷
dynamix
2026-06-14 06:33:19
(3 days ago)
Multiple WAF Violations
Web App Attack
🇮🇹
VHosting
2026-06-14 04:40:04
(3 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 03:51:34
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 35.246.204.51 (51.204.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.246.204.51 (51.204.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 23:51:30.329959 2026] [security2:error] [pid 10862:tid 10862] [client 35.246.204.51:35430] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||deborahbein.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "deborahbein.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai4lQg2HFhRrw5L_3qR-tgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Asimar
2026-06-14 02:23:49
(3 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.246.204.51 (DE/Ge ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.246.204.51 (DE/Germany/51.204.246.35.bc.googleusercontent.com): (CF_ENABLE)
show less
Bad Web Bot