🇬🇧
poundawebsiteltd
2026-11-15 14:08:51
UTC ·
(12 minutes ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.201.138.243 (TW/Taiwan/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 35.201.138.243 (TW/Taiwan/243.138.201.35.bc. ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.201.138.243 (TW/Taiwan/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 35.201.138.243 (TW/Taiwan/243.138.201.35.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇵🇱
Woytass
2026-11-15 14:07:24
UTC ·
(14 minutes ago)
CSF permanent block; ports=*; (mod_security) mod_security (id:210492) triggered by 35.201.138.243 (TW/Taiwan/243.138.201.35.bc.googleusercontent.com): 5 in the last 3600 secs
Web App Attack
🇵🇱
MatStef132
2026-11-15 14:04:56
UTC ·
(16 minutes ago)
MatShield L7: blocked on a protected site (secret-path-probe)
DDoS Attack
🇧🇪
cmbplf
2026-11-15 13:35:00
UTC ·
(46 minutes ago)
146 requests with url.path *.php.bak
Brute-Force
Bad Web Bot
🇬🇧
Mendip_Defender
2026-11-15 13:21:41
UTC ·
(59 minutes ago)
35.201.138.243 - - [15/Nov/2026:13:21:36 +0000] "GET /robots.txt HTTP/1.1" 404 7563 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.201.138.243 - - [15/Nov/2026:13:21:37 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 7563 "-" " ...
show more
35.201.138.243 - - [15/Nov/2026:13:21:36 +0000] "GET /robots.txt HTTP/1.1" 404 7563 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.201.138.243 - - [15/Nov/2026:13:21:37 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 7563 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.201.138.243 - - [15/Nov/2026:13:21:38 +0000] "GET /settings/developer HTTP/1.1" 404 7563 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
🇬🇧
gigatech
2026-11-15 13:15:05
UTC ·
(1 hour ago)
Webserver Probing
Web App Attack
🇳🇱
ams_sec_user
2026-11-15 12:05:28
UTC ·
(2 hours ago)
Automated requests against 2 hosted websites: 328 requests between 11:00 and 11:59 UTC; 106 probes for exposed secrets/config files (/userfiles, /userfiles/x, /wp/.env, /.env.credentials); 28 returned 404. Reported automatically.
Hacking
Bad Web Bot
Web App Attack
🇩🇪
SwinT
2026-11-15 12:00:04
UTC ·
(2 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇵🇱
Budyn
2026-11-15 11:28:19
UTC ·
(2 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: dev.budyn.ovh | Path: /.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: dev.budyn.ovh | Path: /.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇿🇦
hostsec_za
2026-11-15 11:23:02
UTC ·
(2 hours ago)
cPanel/Webmail Auth Attack. 219 failed logins in 1 hour.
Brute-Force
🇬🇧
Steve
2026-11-15 11:13:15
UTC ·
(3 hours ago)
SQL Injection Attempts
Brute-Force
SQL Injection
2026-11-15 10:45:47
UTC ·
(3 hours ago)
2026-11-15T12:45:46.160563+02:00 vps kernel: [11110291.050002] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=35.201.138.243 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x60 TTL=44 ID=8628 DF PROTO=TCP SPT=41320 DPT=8080 ...
show more
2026-11-15T12:45:46.160563+02:00 vps kernel: [11110291.050002] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=35.201.138.243 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x60 TTL=44 ID=8628 DF PROTO=TCP SPT=41320 DPT=8080 WINDOW=65320 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
🇳🇱
homeshowdomain.nl
2026-11-03 23:01:25
UTC ·
(1 week ago)
Auto-ban: >3000 req/min op 2026-11-03
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-11-03 22:06:05
UTC ·
(1 week ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 21:02:55
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.201.138.243 (243.138.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:02:50.114908 2026] [security2:error] [pid 25753:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.138.243 (243.138.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:02:50.114908 2026] [security2:error] [pid 25753:tid 25753] [client 35.201.138.243:36194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aridscapes.com"] [uri "/.git/config"] [unique_id "aupL-qFFjKwhP3nMpQI6ygAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
