🇳🇱
Savvii
2026-11-06 20:24:15
UTC ·
(5 days ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-06 20:10:01
UTC ·
(5 days ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
🇺🇸
oralunal
2026-11-06 20:00:27
UTC ·
(5 days ago)
Banned by Fail2Ban - access.log - mavifinds
Web App Attack
Bad Web Bot
🇨🇦
CentiDevOps
2026-11-06 18:34:55
UTC ·
(5 days ago)
Web app scan: 51 requests in 1 s across 3 domains (301/302). Paths: /.//.env, //.env, /api/.env/public/.env (+8 more). Sample: 2026-11-06T18:34:55Z "GET /.//.env" 301
Hacking
Web App Attack
🇫🇷
dynamix
2026-11-06 18:31:45
UTC ·
(5 days ago)
Multiple WAF Violations
Web App Attack
🇳🇱
0xffffffff
2026-11-06 18:30:16
UTC ·
(5 days ago)
[2026-11-06 20:30:13.696326] [authz_core:error] [pid 65127:tid 132473775011520] [client 35.221.119.2:0] AH01630: client denied by server configuration: /var/www/*/z9x8c7v6b5-debug-trigger-www.*, referer https://www.*/z9x8c7v6b5-debug-trigger-www.* , ...
show more
[2026-11-06 20:30:13.696326] [authz_core:error] [pid 65127:tid 132473775011520] [client 35.221.119.2:0] AH01630: client denied by server configuration: /var/www/*/z9x8c7v6b5-debug-trigger-www.*, referer https://www.*/z9x8c7v6b5-debug-trigger-www.* , error_notes:debug-probing , URI:'/z9x8c7v6b5-debug-trigger-www.*'
[2026-11-06 20:30:14.147344] [authz_core:error] [pid 65128:tid 132473657284288] [client 35.221.119.2:0] AH01630: client denied by server configuration: /var/www/*/.vite, referer https://www.*/.vite/manifest.json , error_notes:config-files , URI:'/.vite/manifest.json'
[2026-11-06 20:30:14.152243] [authz_core:error] [pid 65128:tid 132473707738816] [client 35.221.119.2:0] AH01630: client denied by server configuration: /var/www/*/build, referer https://www.*/build/manifest.json , error_notes:config-files , URI:'/build/manifest.json'
[2026-11-06 20:30:14.156706] [authz_core:error] [pid 65127:tid 132473758193344] [client 35.221.119.2:0] AH01630: client denied by server configuration: /var/www/*/dist, ref
show less
Web App Attack
Bad Web Bot
🇳🇴
jad-abuse
2026-11-06 18:21:40
UTC ·
(5 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, path_traversal. Observed by 1 sensor(s); 25 hits.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 18:12:51
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.221.119.2 (2.119.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:12:46.101541 2026] [security2:error] [pid 19229:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.221.119.2 (2.119.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:12:46.101541 2026] [security2:error] [pid 19229:tid 19229] [client 35.221.119.2:43144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sarahpeebles.net"] [uri "/.env.prod.bak"] [unique_id "au4Ynrk-45gqeiP0DKHRkwAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
hostsec_za
2026-11-06 17:42:08
UTC ·
(5 days ago)
cPanel/Webmail Auth Attack. 87 failed logins in 1 hour.
Brute-Force
🇹🇷
Jova
2026-11-06 16:31:31
UTC ·
(5 days ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
2026-11-06 16:19:31
UTC ·
(5 days ago)
Blocked by ModSec and CSF
Port Scan
🇷🇴
clauss
2026-11-06 15:48:45
UTC ·
(5 days ago)
35.221.119.2 - - [06/Nov/2026:17:48:41 +0200] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.221.119.2 - - [06/Nov/2026:17:48:45 +0200] "GET /firebase-adminsdk.json HTTP/2.0" 301 0 "-" ...
show more
35.221.119.2 - - [06/Nov/2026:17:48:41 +0200] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.221.119.2 - - [06/Nov/2026:17:48:45 +0200] "GET /firebase-adminsdk.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
Web App Attack
🇳🇱
e.fierstra
2026-11-06 15:37:27
UTC ·
(5 days ago)
excessive HTTP 404 errors
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-06 15:11:44
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.221.119.2 (2.119.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:11:39.372686 2026] [security2:error] [pid 18542:tid 18 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.221.119.2 (2.119.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:11:39.372686 2026] [security2:error] [pid 18542:tid 18542] [client 35.221.119.2:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.poweribo.com"] [uri "/.env.swp"] [unique_id "au3uKz0G33NAmPkL_GAEKAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 15:06:19
UTC ·
(5 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
