🇦🇹
penguin-solutions.at
2026-09-01 13:36:14
(29 minutes ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
2026-09-01 12:00:34
(2 hours ago)
35.200.114.175 - - [01/Sep/2026:07:00:31 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macin ...
show more
35.200.114.175 - - [01/Sep/2026:07:00:31 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.71.24.227
35.200.114.175 - - [01/Sep/2026:07:00:32 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.71.24.227
35.200.114.175 - - [01/Sep/2026:07:00:32 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.71.24.227
35.200.114.175 - - [01/Sep/2026:07:00:32 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.71.24.227
35.200.114.175 - - [01/Sep/2026:07:00:32 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintos
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-01 10:18:46
(3 hours ago)
Excessive multi-domain requests
Brute-Force
🇿🇦
conure.sh
2026-09-01 10:08:00
(3 hours ago)
csagent: score 19.9: secrets grab x2; 1 domain(s) in 2s
Web App Attack
🇸🇪
vaia.cloud
2026-09-01 08:30:05
(5 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-01 06:05:25
(8 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-09-01 04:16:52
(9 hours ago)
35.200.114.175 - - [31/Aug/2026:22:16:51 -0600] "GET /.git/config HTTP/1.1" 301 523 "-" "Mozilla/5.0 ...
show more
35.200.114.175 - - [31/Aug/2026:22:16:51 -0600] "GET /.git/config HTTP/1.1" 301 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 03:42:16
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.200.114.175 (175.114.200.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.114.175 (175.114.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:42:13.325058 2026] [security2:error] [pid 14145:tid 14145] [client 35.200.114.175:53794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.historiapatria.aguasolar.com"] [uri "/.git/config"] [unique_id "apZJlR4FE0SkPGu1dXa8ewAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-09-01 03:21:10
(10 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇫🇮
JimArchon72
2026-09-01 01:00:02
(13 hours ago)
2026/09/01 00:58:47 "GET /wp-admin/phpinfo.php HTTP/1.1"
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-31 22:00:25
(16 hours ago)
Auto-ban: >3000 req/min op 2026-08-31
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-31 17:47:32
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.200.114.175 (175.114.200.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.114.175 (175.114.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 13:47:26.893119 2026] [security2:error] [pid 6245:tid 6245] [client 35.200.114.175:41722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ilovesausage.com.cajunfriedturkey.com"] [uri "/.git/config"] [unique_id "apW-LnZwKMQ--MyX4srEUwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Lino Project
2026-08-31 17:15:23
(20 hours ago)
35.200.114.175 - - [31/Aug/2026:19:15:21 +0200] "GET /.git/config HTTP/1.1" 404 458 "-" "Mozilla/5.0 ...
show more
35.200.114.175 - - [31/Aug/2026:19:15:21 +0200] "GET /.git/config HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.200.114.175 - - [31/Aug/2026:19:15:21 +0200] "GET /.env HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-31 15:32:18
(22 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
4server
2026-08-31 15:21:11
(22 hours ago)
[MonAug3117:21:07.7532692026][security2:error][pid2877079:tid2877139][client35.200.114.175:0]ModSecu ...
show more
[MonAug3117:21:07.7532692026][security2:error][pid2877079:tid2877139][client35.200.114.175:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.ilcartiglio.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"apWb452IJ0e3lP4Yc9VMaQAAAFI\"]
show less
Port Scan
Brute-Force
Web App Attack