🇳🇱
homeshowdomain.nl
2026-06-29 22:03:25
(1 week ago)
Auto-ban: 201 malicious requests on 2026-06-28 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 201 malicious requests on 2026-06-28 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇭🇳
unph
2026-06-29 11:04:57
(1 week ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
🇬🇧
AvonleaConsulting
2026-06-21 22:49:40
(2 weeks ago)
Brute force attack stopped by firewall
Web Spam
Brute-Force
Web App Attack
🇬🇧
AvonleaConsulting
2026-06-20 18:10:14
(2 weeks ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇬🇷
setupgr
2026-06-19 10:19:02
(2 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 91.98.176.9 (DE/Germany/Saxony/Falkenstein/-/ ...
show more
(mod_security) mod_security (id:11000011) triggered by 91.98.176.9 (DE/Germany/Saxony/Falkenstein/-/[AS24940 HETZNER-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 19 13:18:57.113742 2026] [security2:error] [pid 202885:tid 202909] [remote 91.98.176.9:49420] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.9.176.98.91.clients.your-server.de"] [severity "CRITICAL"] [hostname "fashionfragonard.gr"] [uri "/"] [unique_id "ajUXkUrlp52aw72Tw8fWLgABDRc"]
show less
Port Scan
🇬🇷
setupgr
2026-06-18 18:23:13
(2 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 91.98.176.9 (DE/Germany/Saxony/Falkenstein/-/ ...
show more
(mod_security) mod_security (id:11000011) triggered by 91.98.176.9 (DE/Germany/Saxony/Falkenstein/-/[AS24940 HETZNER-AS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 18 21:23:09.864204 2026] [security2:error] [pid 3299841:tid 3299891] [remote 91.98.176.9:57638] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.9.176.98.91.clients.your-server.de"] [severity "CRITICAL"] [hostname "cpanagiotou.gr"] [uri "/%CE%B5%CF%80%CE%B9%CE%BA%CE%BF%CE%B9%CE%BD%CF%89%CE%BD%CE%AF%CE%B1/"] [unique_id "ajQ3jegpCrSMSCd7XgcX3AAB0QI"]
show less
Port Scan
🇷🇺
DZBOT
2026-06-17 13:13:40
(2 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇬🇷
setupgr
2026-06-13 09:34:55
(3 weeks ago)
(mod_security) mod_security (id:11000011) triggered by 91.98.176.9: 1 in the last 86400 secs; Ports: ...
show more
(mod_security) mod_security (id:11000011) triggered by 91.98.176.9: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 13 12:34:50.858511 2026] [security2:error] [pid 705243:tid 767271] [remote 91.98.176.9:46474] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "clients.your-server.de" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "128"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: static.9.176.98.91.clients.your-server.de"] [hostname "ftiaxtomonosou.gr"] [uri "/"] [unique_id "ai0kOvTTK8tviUcnqp_P5wAABCE"]
show less
Port Scan
🇩🇰
ScamAware
2026-06-12 07:14:38
(3 weeks ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: bad_bot_scanner (Bad bot / scanner behavior). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: managed_challenge. Cloudflare source: botFight.
show less
Bad Web Bot
🇫🇷
masterguru
2026-06-02 02:26:18
(1 month ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 91.98.176.9 (DE/Germany/static.9.176.98.91.cli ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 91.98.176.9 (DE/Germany/static.9.176.98.91.clients.your-server.de): 1 in the last 3600 secs (0-197)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-01 16:12:05
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 91.98.176.9 (static.9.176.98.91.clients.your-se ...
show more
(mod_security) mod_security (id:210730) triggered by 91.98.176.9 (static.9.176.98.91.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 01 12:11:59.229011 2026] [security2:error] [pid 23930:tid 23944] [client 91.98.176.9:54298] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||adventistdeathconfusion.com|F|2"] [data ".deathconfusion.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "adventistdeathconfusion.com"] [uri "/www.deathconfusion.com"] [unique_id "ah2vT3SylKHSYfCLndeCDAAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-05-31 00:05:32
(1 month ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇫🇷
YF
2026-05-29 10:31:08
(1 month ago)
WordPress directory enumeration
Web App Attack
🇺🇸
Mehmet_The_Script_Kiddie
2026-05-24 13:14:31
(1 month ago)
CloudFlare WAF REPORT: Disobey robots.txt. Suspicious web crawler.
Bad Web Bot
Web App Attack
🇮🇩
soc-yk
2026-05-23 16:45:30
(1 month ago)
Type: exploitation_attempt
Threat: public_web_exploitation_scanner
Risk: 85
Events: 6
Evidence:
- R ...
show more
Type: exploitation_attempt
Threat: public_web_exploitation_scanner
Risk: 85
Events: 6
Evidence:
- Repeated exploitation attempts detected
- Malicious infrastructure behavior observed
show less
Web App Attack
Hacking