🇬🇧
Aetherweb Ark
2026-09-05 23:00:29
(10 minutes ago)
(mod_security) mod_security (id:949110) triggered by 35.201.162.120 (TW/Taiwan/120.162.201.35.bc.goo ...
show more
(mod_security) mod_security (id:949110) triggered by 35.201.162.120 (TW/Taiwan/120.162.201.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 22:58:34
(12 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.201.162.120 (120.162.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.162.120 (120.162.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:58:27.169604 2026] [security2:error] [pid 8952:tid 8952] [client 35.201.162.120:54174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.peazy.net"] [uri "/.env.backup"] [unique_id "apyek2Ic3209IpB8eYKPwQAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-09-05 22:51:45
(19 minutes ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, scanner_ua, source_backup, config_backup, ignition_debug, actuator. Observed by 1 sensor(s); 19 hits.
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 22:36:25
(34 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.201.162.120 (120.162.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.162.120 (120.162.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:36:19.723212 2026] [security2:error] [pid 8369:tid 8369] [client 35.201.162.120:36272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "geno-med.com"] [uri "/.env.local"] [unique_id "apyZY6t8oeyBMexy8HoTfAAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
Coolnagour
2026-09-05 22:22:52
(48 minutes ago)
http-probing: /storage/logs/laravel.log
Web App Attack
2026-09-05 21:41:11
(1 hour ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-05 21:40:10
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.201.162.120 (120.162.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.162.120 (120.162.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 17:40:01.944181 2026] [security2:error] [pid 26975:tid 26975] [client 35.201.162.120:54234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.forsythfixit.com"] [uri "/.env.local"] [unique_id "apyMMWaKueTSZe2jsfazIAAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
penjaga BRIN
2026-09-05 20:52:57
(2 hours ago)
Suspicious malicious activity
Hacking
🇩🇪
pscriptos
2026-09-05 20:43:03
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-09-05 20:37:52
(2 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 20:30:52
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.162.120 (120.162.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.162.120 (120.162.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 16:30:47.549636 2026] [security2:error] [pid 11041:tid 11041] [client 35.201.162.120:57586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.baystreet.news"] [uri "/wp-config.php.swp"] [unique_id "apx79wINtRADPuGK78SgjAAAAD4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
hackthetime
2026-09-04 11:02:20
(1 day ago)
Tried to access /app/actuator/logfile (auto-added by Hype UI)
Web App Attack
🇮🇹
VHosting
2026-09-02 23:05:03
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-01 22:00:10
(4 days ago)
Auto-ban: >3000 req/min op 2026-09-01
Web App Attack
SSH
Hacking
