🇳🇱
homeshowdomain.nl
2026-09-05 22:00:57
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-04.
show less
Web App Attack
SSH
Hacking
🇳🇱
homeshowdomain.nl
2026-09-04 22:02:03
(1 month ago)
Auto-ban: >3000 req/min op 2026-09-04
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-04 15:14:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:14:27.558387 2026] [security2:error] [pid 16768:tid 16768] [client 35.255.158.231:35210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.grancanariaholidays.com"] [uri "/.env.local"] [unique_id "aprgUzC58k11TaUvDt8otgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-04 15:05:46
(1 month ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:06:57
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:06:53.694564 2026] [security2:error] [pid 9060:tid 9060] [client 35.255.158.231:47360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.treeofloveproductions.com"] [uri "/wp-config.php~"] [unique_id "aprQfXhhnJP95k3qSaNOvgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MyGlobalFlowers
2026-09-04 12:25:57
(1 month ago)
Multiple WAF Violations
Web App Attack
🇭🇺
miszterx.hu
2026-09-04 11:05:54
(1 month ago)
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ipt ...
show more
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-04 10:52:06
(1 month ago)
(mod_security) mod_security (id:949110) triggered by 35.255.158.231 (US/United States/231.158.255.35 ...
show more
(mod_security) mod_security (id:949110) triggered by 35.255.158.231 (US/United States/231.158.255.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:45:01
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:44:58.087689 2026] [security2:error] [pid 12101:tid 12101] [client 35.255.158.231:56012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koshland.com"] [uri "/.env.backup"] [unique_id "apqhKirf04hpgk06lEMEMwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-04 10:41:42
(1 month ago)
URL Probing: /wp-config.php.bak
Web App Attack
🇫🇷
COMAITE
2026-09-04 10:04:05
(1 month ago)
Suspicious URL access.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:55:41
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:55:33.808697 2026] [security2:error] [pid 2907:tid 2907] [client 35.255.158.231:35902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grayarea.us"] [uri "/.env"] [unique_id "apqVlXhollgYo9uQXMsTkgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 08:30:15
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.255.158.231 (231.158.255.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:30:12.241946 2026] [security2:error] [pid 26312:tid 26312] [client 35.255.158.231:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.earscript.net"] [uri "/.env.dev"] [unique_id "apqBlLT-XiXYn8hj5sZAMwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
clamehost.it
2026-09-04 07:46:42
(1 month ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
2026-09-04 07:40:04
(1 month ago)
suspicious request in access.log
Web App Attack
