🇩🇪
Philister11
2026-11-04 00:23:38
UTC ·
(4 days ago)
CrowdSec: crowdsecurity/http-sensitive-files (AU/AS396982)
Web App Attack
Hacking
🇬🇧
consul.to
2026-11-03 22:53:43
UTC ·
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
i-turnradio.nl
2026-11-03 15:02:14
UTC ·
(4 days ago)
2026-11-03 @ 16:01:52 (CET) ~ Blocked for trying to access: /.env.local
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 13:47:04
UTC ·
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 35.189.58.176 (176.58.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:46:59.111322 2026] [security2:error] [pid 27367:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.189.58.176 (176.58.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:46:59.111322 2026] [security2:error] [pid 27367:tid 27367] [client 35.189.58.176:56322] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wildrosestudios.tv|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wildrosestudios.tv"] [uri "/.env.bak"] [unique_id "aunl0_z7182aR4bSxXzlLwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 09:18:58
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.58.176 (176.58.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:18:51.631823 2026] [security2:error] [pid 2719132:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.58.176 (176.58.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:18:51.631823 2026] [security2:error] [pid 2719132:tid 2719184] [client 35.189.58.176:37650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitecrosslibrary.com"] [uri "/.git/config"] [unique_id "aumm-08JPeckkpCJsf8isAAAAYw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 09:03:39
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.58.176 (176.58.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:03:33.387739 2026] [security2:error] [pid 11068:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.58.176 (176.58.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 04:03:33.387739 2026] [security2:error] [pid 11068:tid 11068] [client 35.189.58.176:37782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitecranemanagement.com"] [uri "/.git/config"] [unique_id "aumjZVhlYu4TdD_HpiGFJwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
NotCool
2026-11-03 07:33:35
UTC ·
(5 days ago)
[7200] (DOTENVPROBE,ROBOTSIGNORE3,GITPROBE) Login failure/trigger from 35.189.58.176 (AU/Australia/176.58.189.35.bc.googleusercontent.com): 50 in the last 3600 secs
Brute-Force
🇺🇸
nyt
2026-11-03 03:45:57
UTC ·
(5 days ago)
Sensitive File Probe
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:02:14
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.58.176 (176.58.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:02:09.963816 2026] [security2:error] [pid 16047:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.58.176 (176.58.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:02:09.963816 2026] [security2:error] [pid 16047:tid 16047] [client 35.189.58.176:48304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whiteblackbird.com"] [uri "/.git/config"] [unique_id "aulAoYHHBTuj4WMeHG8AcAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-02 23:00:34
UTC ·
(5 days ago)
Auto-ban: >3000 req/min op 2026-11-02
Web App Attack
SSH
Hacking
2026-11-02 22:42:53
UTC ·
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-11-02 18:59:43
UTC ·
(5 days ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-02 17:00:20
UTC ·
(5 days ago)
(mod_security) mod_security (id:949110) triggered by 35.189.58.176 (AU/Australia/176.58.189.35.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇮🇹
VHosting
2026-11-02 16:45:04
UTC ·
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-11-02 14:30:23
UTC ·
(5 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
