🇳🇱
Site.eu
2026-06-12 10:22:43
(42 minutes ago)
Excessive multi-domain requests
Brute-Force
🇧🇪
cmbplf
2026-06-12 07:04:41
(4 hours ago)
3.772 requests from abuseipdb.com blacklisted IP (1yr7mos2w)
Brute-Force
Bad Web Bot
🇩🇪
Skyrider
2026-06-12 05:50:23
(5 hours ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇫🇷
Campus France
2026-06-10 18:18:01
(1 day ago)
...
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 08:30:50
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 216.73.217.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 216.73.217.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:30:42.754503 2026] [security2:error] [pid 17093:tid 17093] [client 216.73.217.59:7397] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.photosatthebeach.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.photosatthebeach.com"] [uri "/index.php/2010/06/http:jimmygilmorephotography.com"] [unique_id "aikgsoQBdu8fXUBbn5RxfwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 06:31:48
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 216.73.217.59 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 216.73.217.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 02:31:42.099844 2026] [security2:error] [pid 4340:tid 4340] [client 216.73.217.59:18924] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.landjudging.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.landjudging.com"] [uri "/a2002/WS_FTP.LOG"] [unique_id "aikEzjVOnZV0TvjLfQlsLgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-06-10 05:46:44
(2 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
2026-06-10 02:24:02
(2 days ago)
Unauthorized SSH login attempts
Brute-Force
SSH
🇩🇪
psauxit
2026-06-10 02:20:27
(2 days ago)
Fail2Ban - NGINX heavily bad-bot, possible vulnerability scanning and excessive crawling/scraping
Bad Web Bot
Web App Attack
Hacking
Web Spam
🇫🇷
conseilgouz
2026-06-09 22:11:40
(2 days ago)
loe-88 : Bloc AI bots=>/robots.txt(anthropic)
Hacking
🇦🇹
Pingger Shikkoken
2026-06-09 21:54:36
(2 days ago)
2026-06-09T21:54:36+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-06-09T21:54:36+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=216.73.217.59 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=35770 DF PROTO=TCP SPT=31925 DPT=443 WINDOW=62727 RES=0x00 SYN URGP=0 2026-06-09T21:54:37+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=216.73.217.59 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=35771 DF PROTO=TCP SPT=31925 DPT=443 WINDOW=62727 RES=0x00 SYN URGP=0 2026-06-09T21:54:38+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:58:1a:08:00 SRC=216.73.217.59 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=118 ID=35772 DF PROTO=TCP SPT=31925 DPT=443 WINDOW=62727 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
🇺🇸
LotPhantom
2026-06-09 21:30:01
(2 days ago)
216.73.217.59 - - [09/Jun/2026:21:29:41 +0000] "GET /robots.txt HTTP/2.0" 200 57 "-" "Mozilla/5.0 Ap ...
show more
216.73.217.59 - - [09/Jun/2026:21:29:41 +0000] "GET /robots.txt HTTP/2.0" 200 57 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Web App Attack
Bad Web Bot
🇩🇪
iNetWorker
2026-06-09 21:28:35
(2 days ago)
trolling for resource vulnerabilities
Web App Attack
🇮🇹
Progetto1
2026-06-09 21:15:02
(2 days ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇬🇧
seniorlinuxadmin
2026-06-09 17:06:43
(2 days ago)
216.73.217.59 - - [09/Jun/2026:18:06:38 +0100] "GET / HTTP/2.0" 403 158 "-" "Mozilla/5.0 AppleWebKit ...
show more
216.73.217.59 - - [09/Jun/2026:18:06:38 +0100] "GET / HTTP/2.0" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
show less
Port Scan
Web App Attack