🇳🇱
homeshowdomain.nl
2026-06-27 22:02:47
(1 week ago)
Auto-ban: 264 malicious requests on 2026-06-26 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 264 malicious requests on 2026-06-26 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇫🇷
masterguru
2026-06-26 01:42:39
(1 week ago)
Restricted File Access Attempt. Matched phrase ".aws/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 01:10:26
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 8.235.16.155 (155.16.235.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 8.235.16.155 (155.16.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:10:19.314858 2026] [security2:error] [pid 8496:tid 8496] [client 8.235.16.155:35936] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||niximperial.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "niximperial.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aj3RezymQowlZ_-KPrC10AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Philister11
2026-06-26 00:11:53
(1 week ago)
CrowdSec: crowdsecurity/http-bad-user-agent (US/AS396982)
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-06-26 00:09:12
(1 week ago)
{"level":"info","ts":1782432550.9012134,"logger":"http.log.access.log0","msg":"handled request","req ...
show more
{"level":"info","ts":1782432550.9012134,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"8.235.16.155","remote_port":"56868","client_ip":"8.235.16.155","proto":"HTTP/1.1","method":"GET","host":"vtqd.status.updown.io","uri":"/heapdump","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Linux; Android 4.4.2; SM-T230NU Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.81 Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"vtqd.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000098067,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1782432550.9025323,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"8.235.16.155","remote_port":"56830","client_ip":"8.235.16.155","proto":"HTTP/1.1","metho
...
show less
DDoS Attack
Web App Attack
🇺🇸
Mainpine
2026-06-25 17:01:49
(1 week ago)
probing for vulnerable web apps
Web App Attack
🇸🇬
robotstxt
2026-06-25 16:53:05
(1 week ago)
8.235.16.155 - - [25/Jun/2026:16:53:01 +0000] "GET /mail.zip HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Lin ...
show more
8.235.16.155 - - [25/Jun/2026:16:53:01 +0000] "GET /mail.zip HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Linux; Android 9; Mi MIX 2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "-"
8.235.16.155 - - [25/Jun/2026:16:53:01 +0000] "GET /mailer.zip HTTP/1.1" 404 146 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/538.1 (KHTML, like Gecko) QupZilla/1.9.0 Safari/538.1" "-"
8.235.16.155 - - [25/Jun/2026:16:53:05 +0000] "GET /mailer/sendgrid.js HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.108 Safari/537.36" "-"
8.235.16.155 - - [25/Jun/2026:16:53:05 +0000] "GET /mailer/sendgrid.py HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-us; Silk/1.0.13.81_10003810) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16 Silk-Accelerated=true" "-"
8.235.16.155 - - [25/Jun/2026:16:53:05 +0000] "GET /mail/sendgrid.py HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; U; Intel Ma
...
show less
Bad Web Bot
🇳🇱
Savvii
2026-06-25 14:21:07
(1 week ago)
20 attempts against mh_ha-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Major Hostility
2026-06-25 11:44:56
(1 week ago)
"GET /actuator/heapdump HTTP/1.1" 404
"GET /actuator/env HTTP/1.1" 404
"GET /actuator/logfile HTTP/1 ...
show more
"GET /actuator/heapdump HTTP/1.1" 404
"GET /actuator/env HTTP/1.1" 404
"GET /actuator/logfile HTTP/1.1" 404
"GET /actuator/configprops HTTP/1.1" 404
"GET /actuator/threaddump HTTP/1.1" 404
"GET /actuator/dump HTTP/1.1" 404
"GET /actuator/trace HTTP/1.1" 404
"GET /actuator/httptrace HTTP/1.1" 404
"GET /actuator/auditevents HTTP/1.1" 404
"GET /heapdump HTTP/1.1" 404
"GET /actuator/sessions HTTP/1.1" 404
"GET /configprops HTTP/1.1" 404
"GET /env HTTP/1.1" 404
"GET /dump HTTP/1.1" 404
"GET /trace HTTP/1.1" 404
"GET /logfile HTTP/1.1" 404
"GET /threaddump HTTP/1.1" 404
"GET /api/actuator/heapdump HTTP/1.1" 404
"GET /api/actuator/env HTTP/1.1" 404
"GET /api/
show less
Web App Attack