🇳🇱
homeshowdomain.nl
2026-09-01 21:59:42
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-31.
show less
Web App Attack
SSH
Hacking
🇪🇨
icp77
2026-09-01 15:24:00
(1 week ago)
Abuse DDoS
DDoS Attack
Port Scan
Brute-Force
Exploited Host
Web App Attack
SSH
FTP Brute-Force
Hacking
SQL Injection
Anonymous
2026-09-01 09:11:20
(1 week ago)
ICONZDE WEBEXPLOIT 35.200.241.83 (83.241.200.35.bc.googleusercontent.com)
Web App Attack
🇮🇹
CoreTech srl
2026-09-01 09:08:56
(1 week ago)
cloudlinux2 fail2ban: 2026-09-01 11:03:56,240 fail2ban.filter [1605]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-01 11:03:56,240 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 35.200.241.83 - 2026-09-01 11:03:56cloudlinux2 fail2ban: 2026-09-01 11:03:53,855 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 35.200.241.83 - 2026-09-01 11:03:53cloudlinux2 fail2ban: 2026-09-01 11:03:55,856 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 35.200.241.83 - 2026-09-01 11:03:55cloudlinux2 fail2ban: 2026-09-01 11:03:56,391 fail2ban.actions [1605]: NOTICE [plesk-modsecurity] Ban 35.200.241.83cloudlinux2 fail2ban: 2026-09-01 11:03:56,393 fail2ban.filter [1605]: INFO [recidive] Found 35.200.241.83 - 2026-09-01 11:03:56cloudlinux2 fail2ban: 2026-09-01 11:03:53,141 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 103.163.248.238 - 2026-09-01 11:03:52cloudlinux2 fail2ban: 2026-09-01 11:03:56,048 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 35.200.241.83 - 2026-09-01 11:03:56cloudlinux2 fail2ban: 2026
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-09-01 07:05:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.200.241.83 (83.241.200.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.241.83 (83.241.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:05:16.810907 2026] [security2:error] [pid 20967:tid 20967] [client 35.200.241.83:42058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.imjustsayin.yeswedeliver.org"] [uri "/.git/config"] [unique_id "apZ5LBV4GyYh24HpFCw65AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MatCat
2026-09-01 07:05:07
(1 week ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
🇨🇦
Not Fake
2026-09-01 05:59:54
(1 week ago)
$f2bV_matches
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 04:22:24
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.200.241.83 (83.241.200.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.241.83 (83.241.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:22:17.886304 2026] [security2:error] [pid 8590:tid 8590] [client 35.200.241.83:52694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.imbrasacademic.com"] [uri "/.git/config"] [unique_id "apZS-V0CDpE2Rg75JOFqWQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 01:00:20
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 35.200.241.83 (83.241.200.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.200.241.83 (83.241.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 21:00:12.095402 2026] [security2:error] [pid 21443:tid 21443] [client 35.200.241.83:37054] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.images.rustyog.net|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.images.rustyog.net"] [uri "/.env.bak"] [unique_id "apYjmz3IeKIfk_LL8tsEPQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-01 00:44:15
(1 week ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Site.eu
2026-09-01 00:12:55
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
homeshowdomain.nl
2026-08-31 22:00:37
(1 week ago)
Auto-ban: >3000 req/min op 2026-08-31
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-31 16:15:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.200.241.83 (83.241.200.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.241.83 (83.241.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 12:15:47.767903 2026] [security2:error] [pid 13155:tid 13166] [client 35.200.241.83:39666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jaimeroberts.newleafpro.com"] [uri "/.git/config"] [unique_id "apWos7kla295uIexWjq7jgAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 15:25:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.200.241.83 (83.241.200.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.241.83 (83.241.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 11:25:49.056710 2026] [security2:error] [pid 2355:tid 2355] [client 35.200.241.83:52278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jaglady.com.joshuashands.org"] [uri "/.git/config"] [unique_id "apWc_S5Gr0f4VtPYHOAxvQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-31 15:05:03
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack