2026-09-05 21:14:26
(2 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing
show less
Bad Web Bot
Web App Attack
🇩🇪
MarkGGN
2026-09-05 00:59:31
(22 hours ago)
Web attack. 35.253.73.82 - - [05/Sep/2026:02:59:30 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "http://*/b ...
show more
Web attack. 35.253.73.82 - - [05/Sep/2026:02:59:30 +0200] "HEAD /backup/ HTTP/2.0" 404 0 "http://*/backup/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.5 Safari/605.1.15"
35.253.73.82 - - [05/Sep/2026:02:59:30 +0200] "HEAD /new/ HTTP/2.0" 404 0 "http://*/new/" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36"
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-05 00:43:10
(23 hours ago)
furst.com.au:443 35.253.73.82 - - [05/Sep/2026:10:43:08 +1000] "HEAD /backup/ HTTP/1.1" 404 5074 "ht ...
show more
furst.com.au:443 35.253.73.82 - - [05/Sep/2026:10:43:08 +1000] "HEAD /backup/ HTTP/1.1" 404 5074 "http://furst.com.au/backup/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
...
show less
Web App Attack
🇫🇷
✨
2026-09-05 00:32:21
(23 hours ago)
Domain : gairlochholidayhomes.co.uk
Rule : Method-Head
2026-09-05 00:22:50 ***hidden-privacy*** HEAD ...
show more
Domain : gairlochholidayhomes.co.uk
Rule : Method-Head
2026-09-05 00:22:50 ***hidden-privacy*** HEAD /old/ - 80 - 35.253.73.82 HTTP/1.1 Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36 - gairlochholidayhomes.co.uk 301 0 0 328 211 98 - -
show less
Port Scan
🇯🇵
ki3
2026-09-05 00:21:53
(23 hours ago)
Fail2Ban: Web App Attacks and Forum Spam 35.253.73.82 1788567713.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇨🇭
filou812
2026-09-05 00:20:13
(23 hours ago)
urls tried are "/backup/", "/new/", "/old/", "/blog/", "/wp/"
Web App Attack
🇱🇻
garmtech.com
2026-09-05 00:00:30
(23 hours ago)
Attempted access to sensitive endpoint (/blog/) detected. Automated scan or unauthorized probing.
Web App Attack
2026-09-04 23:57:55
(23 hours ago)
T: f2b 404 5x
Web App Attack
🇺🇸
Penny Packer
2026-09-04 23:52:14
(23 hours ago)
Fail2Ban apache-tripwires
Web App Attack
🇬🇧
Greg Poulson
2026-09-04 23:35:04
(1 day ago)
Our website was hit by this DDOS at a rate of 21 in 5 minutes.
DDoS Attack
Web Spam
Brute-Force
🇧🇪
cmbplf
2026-09-04 23:02:44
(1 day ago)
5.614 head requests in 1 hour (5d16h12m)
Brute-Force
Bad Web Bot
🇪🇸
netfactotum
2026-09-04 22:50:19
(1 day ago)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 22:01:21
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 35.253.73.82 (82.73.253.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 35.253.73.82 (82.73.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 18:01:15.933933 2026] [security2:error] [pid 18799:tid 18799] [client 35.253.73.82:53478] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gamepart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "aps_q7e5Yy7VxCmA5SIGTwAAAA4"], referer: http://gamepart.com/home/tancedi1/gamepart.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-09-04 21:57:20
(1 day ago)
WebAttack or semilar from 35.253.73.82
Web App Attack
🇬🇷
setupgr
2026-09-04 21:45:32
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 35.253.73.82 (US/United States/Iowa/Council B ...
show more
(mod_security) mod_security (id:11000011) triggered by 35.253.73.82 (US/United States/Iowa/Council Bluffs/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Sep 05 00:45:31.867834 2026] [security2:error] [pid 3355:tid 3463] [client 35.253.73.82:34830] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 82.73.253.35.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/backup/"] [unique_id "aps7-9PFm4TfMzHN2JhGKwAAAwc"]
show less
Port Scan
