🇫🇷
SpaceHost-Server
2026-09-04 22:21:21
(2 days ago)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-04 22:01:06
(2 days ago)
Auto-ban: >3000 req/min op 2026-09-04
Web App Attack
SSH
Hacking
🇩🇪
Hugopvigo
2026-09-04 21:40:35
(2 days ago)
"2026-09-04 21:40:35+00:00 35.200.193.179 IP con score alto (89) detectada en el log."
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-09-04 15:16:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.200.193.179 (179.193.200.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.193.179 (179.193.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:16:36.654964 2026] [security2:error] [pid 15077:tid 15077] [client 35.200.193.179:44776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.allisonstiles.org"] [uri "/.env.save"] [unique_id "aprg1Nn0Tmqi3JVmQVXQawAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-04 13:30:36
(3 days ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-04 11:53:40
(3 days ago)
35.200.193.179 - - [04/Sep/2026:06:53:39 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "crusader-worke ...
show more
35.200.193.179 - - [04/Sep/2026:06:53:39 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 35.200.193.179
35.200.193.179 - - [04/Sep/2026:06:53:39 -0500] "GET /.env.prod HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 35.200.193.179
35.200.193.179 - - [04/Sep/2026:06:53:39 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 35.200.193.179
35.200.193.179 - - [04/Sep/2026:06:53:39 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 35.200.193.179
35.200.193.179 - - [04/Sep/2026:06:53:39 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 35.200.193.179
35.200.193.179 - - [04/Sep/2026:06:53:39 -0500] "GET /.env.save HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 35.200.193.179
35.200.193.179 - - [04/Sep/2026:06:53:39 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 35.200.193.179
35.200.193.179 - - [04/Sep/2026:06:53:39 -0500] "GET /.env HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 35.200.193.179
35.200.193.1
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-04 11:51:09
(3 days ago)
URL Probing: /.env
Web App Attack
🇬🇧
WebNiraj
2026-09-04 10:54:39
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 35.200.193.179 (IN/India/179.193.200.35.bc.goog ...
show more
(mod_security) mod_security (id:949110) triggered by 35.200.193.179 (IN/India/179.193.200.35.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
🇬🇧
consul.to
2026-09-04 10:53:04
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
masterguru
2026-09-04 10:37:54
(3 days ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-04 09:15:55
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.200.193.179 (179.193.200.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.193.179 (179.193.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:15:51.054983 2026] [security2:error] [pid 11349:tid 11349] [client 35.200.193.179:56348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ww-bbs.com"] [uri "/wp-config.php.bak"] [unique_id "apqMRy6Ekg0UyTXN3YptzgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-04 08:29:59
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
Hugopvigo
2026-09-04 07:39:06
(3 days ago)
[Fri Sep 04 09:39:05.707693 2026] [authz_core:error] [pid 2856926:tid 127226150364864] [client 35.20 ...
show more
[Fri Sep 04 09:39:05.707693 2026] [authz_core:error] [pid 2856926:tid 127226150364864] [client 35.200.193.179:0] AH01630: client denied by server configuration: /var/www/html/wordpress/.env.backup
[Fri Sep 04 09:39:05.733042 2026] [access_compat:error] [pid 2803691:tid 127225873536704] [client 35.200.193.179:0] AH01797: client denied by server configuration: /var/www/html/wordpress/.env
[Fri Sep 04 09:39:05.733951 2026] [authz_core:error] [pid 2803641:tid 127226410415808] [client 35.200.193.179:0] AH01630: client denied by server configuration: /var/www/html/wordpress/actuator
...
show less
Hacking
Brute-Force
Web App Attack
SSH
🇨🇦
Anytech
2026-09-04 07:03:21
(3 days ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
Anonymous
2026-09-04 05:50:25
(3 days ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 35.200.193.179 (IN/India/179.193.200.35.bc.g ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 35.200.193.179 (IN/India/179.193.200.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.200.193.179 - - [04/Sep/2026:07:50:24 +0200] "GET /.env.prod HTTP/1.1" 406 4830 "-" "crusader-worker/1.0"
35.200.193.179 - - [04/Sep/2026:07:50:24 +0200] "GET /.env.production HTTP/1.1" 406 4831 "-" "crusader-worker/1.0"
35.200.193.179 - - [04/Sep/2026:07:50:24 +0200] "GET /.env.save HTTP/1.1" 406 4830 "-" "crusader-worker/1.0"
show less
Port Scan