๐ณ๐ฑ
homeshowdomain.nl
2026-09-02 22:00:26
(22 minutes ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01.
show less
Web App Attack
SSH
Hacking
๐ฌ๐ง
consul.to
2026-09-02 07:16:34
(15 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 06:14:10
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.195.175.48 (48.175.195.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.175.48 (48.175.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:14:03.503092 2026] [security2:error] [pid 9407:tid 9407] [client 35.195.175.48:44416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.montebiancoltd.com"] [uri "/www/.git/config"] [unique_id "ape-q1uhlzGMFBh4PjLsnAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฟ๐ฆ
conure.sh
2026-09-02 05:49:43
(16 hours ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-09-02 05:13:52
(17 hours ago)
12 attacks on VC URLs:
GET /api/.git/config HTTP/1.1
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-02 05:11:59
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.195.175.48 (48.175.195.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.175.48 (48.175.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:11:52.517460 2026] [security2:error] [pid 28806:tid 28806] [client 35.195.175.48:41802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lucasadams.com"] [uri "/site/.git/config"] [unique_id "apewGBLj8omrlZfqWgoHDQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-02 01:03:57
(21 hours ago)
cloudlinux2 fail2ban: 2026-09-02 02:59:53,088 fail2ban.actions [1605]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-02 02:59:53,088 fail2ban.actions [1605]: NOTICE [plesk-modsecurity] Unban 34.100.218.89cloudlinux2 fail2ban: 2026-09-02 03:00:41,430 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 35.195.175.48 - 2026-09-02 03:00:41cloudlinux2 fail2ban: 2026-09-02 03:00:41,455 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 35.195.175.48 - 2026-09-02 03:00:41cloudlinux2 fail2ban: 2026-09-02 03:00:41,386 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 35.195.175.48 - 2026-09-02 03:00:41cloudlinux2 fail2ban: 2026-09-02 03:00:41,635 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 35.195.175.48 - 2026-09-02 03:00:41cloudlinux2 fail2ban: 2026-09-02 03:00:41,465 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 35.195.175.48 - 2026-09-02 03:00:41cloudlinux2 fail2ban: 2026-09-02 03:00:41,755 fail2ban.actions [1605]: NOTICE [plesk-modsecurity] Ban 35.195.175.48cloudlinux2 fail2ban: 2026-09-02 03:00:41
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-02 00:46:02
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.195.175.48 (48.175.195.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.175.48 (48.175.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:45:55.885311 2026] [security2:error] [pid 24412:tid 24412] [client 35.195.175.48:36572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.gransla.com"] [uri "/.git/config"] [unique_id "apdxw4y9KrUs8Nlumne4-gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
MyGlobalFlowers
2026-09-02 00:45:48
(21 hours ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-02 00:15:34
(22 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-09-01 21:59:07
(1 day ago)
Auto-ban: >3000 req/min op 2026-09-01
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-01 21:03:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.195.175.48 (48.175.195.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.175.48 (48.175.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 17:03:45.295412 2026] [security2:error] [pid 28423:tid 28423] [client 35.195.175.48:59632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "noviasaltovacio.com.mx.spyasociados.com"] [uri "/src/.git/config"] [unique_id "apc9sdpeHFwgQTAQMUWPvAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-01 16:19:03
(1 day ago)
[ns65.kdns.gr] httpd-config-scan: sites=www.elvon.gr; logs=/var/log/httpd/domains/elvon.gr.log; samp ...
show more
[ns65.kdns.gr] httpd-config-scan: sites=www.elvon.gr; logs=/var/log/httpd/domains/elvon.gr.log; samples=/html/.git/config | /site/.git/config | /app/.git/config
show less
Hacking
Web App Attack
๐ฉ๐ช
Petros Stefanakis
2026-09-01 16:14:25
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 35.195.175.48 (BE/Belgium/48.175.195.35 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.195.175.48 (BE/Belgium/48.175.195.35.bc.googleusercontent.com)
show less
SQL Injection
๐ธ๐ช
vaia.cloud
2026-09-01 13:40:02
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack