🇩🇪
raph
2026-10-22 08:28:53
(3 minutes ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇬🇧
gws-hostmaster
2026-10-22 07:25:03
(1 hour ago)
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subreq ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Path Traversal Attack (/../) or (/.../);Remote Command Execution: Unix Shell Code Found;Restricted File Access Attempt;URL file extension is restricted by policy;
show less
Web App Attack
🇳🇱
e.fierstra
2026-10-22 07:07:39
(1 hour ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇬🇧
gws-hostmaster
2026-10-22 05:51:38
(2 hours ago)
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subreq ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shell Code Found;Restricted File Access Attempt;URL file extension is restricted by policy;
show less
Web App Attack
🇨🇦
webemsegundos
2026-10-22 05:34:32
(2 hours ago)
Web vulnerability scanner: 186 probe paths (e.g. /.aws/credentials, /backend/.env, /web/.env, /.next ...
show more
Web vulnerability scanner: 186 probe paths (e.g. /.aws/credentials, /backend/.env, /web/.env, /.next/.env, /src/.env, /public/.env). Blocked by WeS Firewall.
show less
Bad Web Bot
Web App Attack
🇩🇪
palzer.IT
2026-10-22 04:39:04
(3 hours ago)
Report for plesk-apache-badbot: 35.204.225.107 - - [20/Oct/2026:13:15:22 +0200] GET /[DOMAIN_REMOVED ...
show more
Report for plesk-apache-badbot: 35.204.225.107 - - [20/Oct/2026:13:15:22 +0200] GET /[DOMAIN_REMOVED] [DOMAIN_REMOVED] 404 69000 [DOMAIN_REMOVED] Mozilla/5.0 (compatible; Bytespider; spider-feedback@[DOMAIN_REMOVED]) AppleWebKit/537.36
show less
Bad Web Bot
2026-10-22 04:31:43
(4 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇩🇪
SCHAPPY
2026-10-22 02:11:07
(6 hours ago)
Malicious activity from IP detected: crowdsecurity/http-probing.
Web App Attack
Hacking
🇳🇱
ConsulHosting
2026-10-22 02:07:57
(6 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
ecs.ge
2026-10-21 23:31:53
(9 hours ago)
Automatic Fail2Ban report from jail plesk-nginx-probes: multiple matching events detected.
Port Scan
Web App Attack
🇬🇧
Aetherweb Ark
2026-10-21 23:31:12
(9 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.204.225.107 (107.225.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:949110) triggered by 35.204.225.107 (107.225.204.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
Operator873
2026-10-21 23:28:14
(9 hours ago)
2026/10/21 18:28:10 [error] 2317876#0: *2116987 access forbidden by rule, client: 35.204.225.107, se ...
show more
2026/10/21 18:28:10 [error] 2317876#0: *2116987 access forbidden by rule, client: 35.204.225.107, server: [OBFUSCATED], request: "GET / HTTP/1.1", host: "irc.n5txl.com"
2026/10/21 18:28:10 [error] 2317876#0: *2116987 access forbidden by rule, client: 35.204.225.107, server: [OBFUSCATED], request: "GET / HTTP/1.1", host: "irc.n5txl.com"
2026/10/21 18:28:11 [error] 2317876#0: *2116987 access forbidden by rule, client: 35.204.225.107, server: [OBFUSCATED], request: "GET /robots.txt HTTP/1.1", host: "irc.n5txl.com"
2026/10/21 18:28:11 [error] 2317876#0: *2116987 access forbidden by rule, client: 35.204.225.107, server: [OBFUSCATED], request: "GET /robots.txt HTTP/1.1", host: "irc.n5txl.com"
2026/10/21 18:28:11 [error] 2317876#0: *2116987 access forbidden by rule, client: 35.204.225.107, server: [OBFUSCATED], request: "GET /auth HTTP/1.1", host: "irc.n5txl.com"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 22:56:49
(9 hours ago)
(mod_security) mod_security (id:210730) triggered by 35.204.225.107 (107.225.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 35.204.225.107 (107.225.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 18:56:44.285713 2026] [security2:error] [pid 2280:tid 2280] [client 35.204.225.107:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ipv6.kcdusa.com|F|2"] [data ".kcdusa.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ipv6.kcdusa.com"] [uri "/z9x8c7v6b5-debug-trigger-ipv6.kcdusa.com"] [unique_id "atlDLELfeLpSGzXD0RA4bgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-10-21 22:52:40
(9 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.204.225.107 (107.225.204.35.bc.google ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 35.204.225.107 (107.225.204.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.204.225.107 - - [22/Oct/2026:00:52:34 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 404 201 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "35.204.225.107" host=ipv6.conapipescara.it
show less
Port Scan
🇺🇸
dot.mg
2026-10-21 22:50:01
(9 hours ago)
Bad behaviour
Web Spam