๐ฌ๐ง
Marten Mark
2026-10-19 03:16:55
(6 minutes ago)
35.197.155.179 - - [19/Oct/2026:03:16:50 +0000] "POST /lib/terminal-xhr.php HTTP/2.0" 404 110 "-" "M ...
show more
35.197.155.179 - - [19/Oct/2026:03:16:50 +0000] "POST /lib/terminal-xhr.php HTTP/2.0" 404 110 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.197.155.179 - - [19/Oct/2026:03:16:51 +0000] "POST /icecoder/lib/terminal-xhr.php HTTP/2.0" 404 110 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.197.155.179 - - [19/Oct/2026:03:16:51 +0000] "GET /build/manifest.json HTTP/2.0" 404 23110 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
35.197.155.179 - - [19/Oct/2026:03:16:51 +0000] "GET /z9x8c7v6b5-debug-trigger-cfi.co HTTP/2.0" 404 23110 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.197.155.179 - - [19/Oct/2026:03:16:51 +0000] "GET /joey4sasm96alq4wq0sd HTTP/2.0" 404 23110 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.197.155.179 - - [19/Oct/2026:03:16:52 +
...
show less
Port Scan
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 03:13:04
(10 minutes ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.197.155.179 - - [19/Oct/2026:05:13:00 +0200] "GET /.htpasswd HTTP/2.0" 403 1868 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2026-10-18 04:38:27
(22 hours ago)
AutoBlock: ๐ก Port Scan (Non Decay-Based) - โ Excessive 40X Errors (Decay-Based)
Port Scan
Bad Web Bot
๐น๐ท
ScchutzZ
2026-10-18 03:05:06
(1 day ago)
Fail2Ban banฤฑ. Jail: plesk-modsecurity.
Brute-Force
๐ช๐ธ
masterguru
2026-10-18 02:03:43
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "applebot" at REQUEST_HEADERS:User-Agent. (1100000-1 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "applebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
๐ฉ๐ช
svr
2026-10-18 01:25:21
(1 day ago)
Abusive Automated Web Scanner
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 00:02:06
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 35.197.155.179 (179.155.197.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 35.197.155.179 (179.155.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:02:00.153448 2026] [security2:error] [pid 18243:tid 18243] [client 35.197.155.179:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.triplejrealty.com|F|2"] [data ".triplejrealty.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.triplejrealty.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.triplejrealty.com"] [unique_id "atQMeKfKTDohvwwPD07kSQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
iwle
2026-10-17 21:41:28
(1 day ago)
[Sat Oct 17 17:41:26.991097 2026] [:error] [pid 1380175:tid 1380277] [client 35.197.155.179:0] [clie ...
show more
[Sat Oct 17 17:41:26.991097 2026] [:error] [pid 1380175:tid 1380277] [client 35.197.155.179:0] [client 35.197.155.179] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env.supabase"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "ufscards.com"] [uri "/.env.supabase"] [unique_id "atPrhnQeZY3208weAcu8BQAAAEI"]
[Sat Oct 17 17:41:27.014017 2026] [:error] [pid 1380174:tid 1380252] [client 35.197.155.179:0] [client 35.197.155.179] ModSecurity: Warning. Matched phrase "Dockerfile" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-AT
...
show less
Web App Attack
Brute-Force
๐ฎ๐ฉ
Burayot
2026-10-17 19:11:09
(1 day ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.197.155.179 (SG/Singapore/179.155 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.197.155.179 (SG/Singapore/179.155.197.35.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-17 18:28:48
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-10-17 18:25:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-17 18:04:19
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ซ๐ท
masterguru
2026-10-17 17:37:51
(1 day ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
๐ฉ๐ช
bazter.pro
2026-10-17 17:09:15
(1 day ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-10-17 10:56:25
(1 day ago)
Modsecurity: probe or injection attempt
SQL Injection
Web App Attack