🇳🇱
homeshowdomain.nl
2026-09-04 21:59:55
(1 day ago)
Auto-ban: >3000 req/min op 2026-09-04
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-04 15:21:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.201.190.53 (53.190.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.190.53 (53.190.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:21:33.734058 2026] [security2:error] [pid 429:tid 429] [client 35.201.190.53:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.bbproductionsonline.com"] [uri "/.env.dev"] [unique_id "aprh_ekt5d41liSyfCGtdgAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-09-04 14:35:49
(1 day ago)
Malicious activity from IP detected: crowdsecurity/http-sensitive-files.
Web App Attack
Hacking
🇩🇪
ger-stg-sifi1
2026-09-04 14:14:44
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-09-04 14:08:14
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 35.201.190.53 (TW/Taiwan/53.190.201.35. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.201.190.53 (TW/Taiwan/53.190.201.35.bc.googleusercontent.com)
show less
SQL Injection
🇦🇺
aranguren.org
2026-09-04 14:02:27
(1 day ago)
35.201.190.53 - - [05/Sep/2026:00:02:26 +1000] "GET /storage/logs/laravel.log HTTP/1.1" 404 996 "-" ...
show more
35.201.190.53 - - [05/Sep/2026:00:02:26 +1000] "GET /storage/logs/laravel.log HTTP/1.1" 404 996 "-" "crusader-worker/1.0"
35.201.190.53 - - [05/Sep/2026:00:02:26 +1000] "GET /wp-config.php~ HTTP/1.1" 404 996 "-" "crusader-worker/1.0"
35.201.190.53 - - [05/Sep/2026:00:02:26 +1000] "GET /.env.bak HTTP/1.1" 404 996 "-" "crusader-worker/1.0"
35.201.190.53 - - [05/Sep/2026:00:02:26 +1000] "GET /actuator/configprops HTTP/1.1" 404 996 "-" "crusader-worker/1.0"
35.201.190.53 - - [05/Sep/2026:00:02:26 +1000] "GET /actuator/env HTTP/1.1" 404 996 "-" "crusader-worker/1.0"
35.201.190.53 - - [05/Sep/2026:00:02:26 +1000] "GET /.env.local HTTP/1.1" 404 996 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
🇳🇱
e.fierstra
2026-09-04 13:47:07
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 12:51:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.201.190.53 (53.190.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.190.53 (53.190.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 08:51:29.261908 2026] [security2:error] [pid 5245:tid 5245] [client 35.201.190.53:39708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memotronic.com"] [uri "/.env.local"] [unique_id "apq-0R0hiW-jptW5zfIGOgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-09-04 12:50:06
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.201.190.53 (TW/Taiwan/53.190.201.35.b ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.201.190.53 (TW/Taiwan/53.190.201.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.201.190.53 - - [04/Sep/2026:14:50:02 +0200] "GET /wp-config.php.bak HTTP/1.1" 200 11978 "-" "crusader-worker/1.0" "-" host=matteodinicola.net
show less
Port Scan
🇸🇪
vaia.cloud
2026-09-04 12:50:05
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:45:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.201.190.53 (53.190.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.190.53 (53.190.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:45:50.801939 2026] [security2:error] [pid 5506:tid 5506] [client 35.201.190.53:42242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m2oblivion.com"] [uri "/.env.bak"] [unique_id "apqvbl_wO0yUg0kHIVe5lQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:58:47
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.201.190.53 (53.190.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.190.53 (53.190.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:58:40.367820 2026] [security2:error] [pid 4584:tid 4584] [client 35.201.190.53:52286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beta.instagenii.com"] [uri "/wp-config.php.bak"] [unique_id "apqkYFqa1cXs-xQXd_pg8AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-04 10:56:10
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-09-04 10:42:55
(1 day ago)
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /actuator/env HTTP/1.1" 404 164 "-" "crusader-wo ...
show more
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /actuator/env HTTP/1.1" 404 164 "-" "crusader-worker/1.0"
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /.env.production HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /.env.prod HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /.env HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /.env.bak HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /crusader-404-probe HTTP/1.1" 404 164 "-" "crusader-worker/1.0"
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /.env.dev HTTP/1.1" 403 164 "-" "crusader-worker/1.0"
35.201.190.53 - - [04/Sep/2026:12:42:50 +0200] "GET /env HTTP/1.1" 404 164 "-" "crusader-worker/1.0"
35.201.190.53 - -
...
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-04 10:35:04
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack