🇳🇱
Site.eu
2026-10-13 11:41:44
(30 minutes ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Savvii
2026-10-13 11:19:19
(52 minutes ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-13 11:08:34
(1 hour ago)
Try to access /.env.supabase
Web App Attack
2026-10-13 10:50:20
(1 hour ago)
| [Dangerous/Brazil] Aggressive IP 35.198.15.25 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/Brazil] Aggressive IP 35.198.15.25 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇪🇸
bohl-aiG5aef
2026-10-13 10:49:07
(1 hour ago)
Suricata Alert [SID:2011465] ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt
Web App Attack
🇬🇧
consul.to
2026-10-13 10:29:05
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
e.fierstra
2026-10-13 10:21:06
(1 hour ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 10:09:28
(2 hours ago)
(mod_security) mod_security (id:210580) triggered by 35.198.15.25 (25.15.198.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210580) triggered by 35.198.15.25 (25.15.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 06:09:19.963213 2026] [security2:error] [pid 25754:tid 25754] [client 35.198.15.25:40038] ModSecurity: Access denied with code 403 (phase 2). Matched phrase ".ssh/id_rsa" at ARGS:filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||polycarbonatex.com|F|2"] [data "Matched Data: .ssh/id_rsa found within ARGS:filename: file:/root/.ssh/id_rsa"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "polycarbonatex.com"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "as4DTxkd9fEXEtnguQpFRwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-10-13 10:00:26
(2 hours ago)
(mod_security) mod_security (id:930100) triggered by 35.198.15.25 (BR/Brazil/25.15.198.35.bc.googleu ...
show more
(mod_security) mod_security (id:930100) triggered by 35.198.15.25 (BR/Brazil/25.15.198.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
SSH
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 09:53:17
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.198.15.25 (25.15.198.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.15.25 (25.15.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:53:11.653321 2026] [security2:error] [pid 6564:tid 6564] [client 35.198.15.25:44402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.polishedspaservices.com"] [uri "/.htpasswd"] [unique_id "as3_h8wE9HdxJYSRl6E9aAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
nyt
2026-10-13 09:51:21
(2 hours ago)
POST to Unknown PHP, Path Traversal, Sensitive File Probe
Web App Attack
2026-10-13 09:51:05
(2 hours ago)
Aggressive web scan
Web App Attack
🇮🇹
VHosting
2026-10-13 09:50:09
(2 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 08:34:14
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.198.15.25 (25.15.198.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.15.25 (25.15.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 04:34:11.011510 2026] [security2:error] [pid 8529:tid 8529] [client 35.198.15.25:59760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "banis-associates.com"] [uri "/.env"] [unique_id "as3tA7MLRX2YNGYiXXOyeQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-10-13 08:34:10
(3 hours ago)
{"level":"info","ts":1791880447.9013383,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791880447.9013383,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.198.15.25","remote_port":"53782","client_ip":"35.198.15.25","proto":"HTTP/2.0","method":"GET","host":"status.korni22.org","uri":"/webpack-stats.json","headers":{"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Mode":["navigate"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Priority":["u=0, i"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Microsoft Edge\";v=\"152\""],"X-Nextjs-Data":["1"],"Sec-Fetch-User":["?1"],"Upgrade-Insecure-Request
...
show less
DDoS Attack
Web App Attack
