๐ฎ๐ฉ
Incidents Response Neptus Team
2026-09-24 09:32:00
(1 month ago)
Report Abuse IP
Exploited Host
Web App Attack
Hacking
๐ฉ๐ช
klaus_ph
2026-09-23 20:27:23
(1 month ago)
2026-09-23 03:51:39,030 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 35.229.215.72
.. ...
show more
2026-09-23 03:51:39,030 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 35.229.215.72
...
show less
Bad Web Bot
Anonymous
2026-09-20 20:50:52
(1 month ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
๐ฟ๐ฆ
conure.sh
2026-09-19 15:39:38
(1 month ago)
csagent: score 20.2: secrets grab x2, 404 noise floor x1; 1 domain(s) in 1s
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-19 15:25:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 11:25:28.108029 2026] [security2:error] [pid 15653:tid 15653] [client 35.229.215.72:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ralphrichardson.com"] [uri "/auth/.env"] [unique_id "aq6paEf66Now50yVqwMuNQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-19 15:07:08
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 11:07:02.225787 2026] [security2:error] [pid 16812:tid 16812] [client 35.229.215.72:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.psychoclast.com"] [uri "/@fs/app/.env"] [unique_id "aq6lFuzdQ2-XpD2sMSnOpQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2026-09-19 15:01:34
(1 month ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-19 14:47:08
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:47:01.521349 2026] [security2:error] [pid 4834:tid 4834] [client 35.229.215.72:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.poweribo.com"] [uri "/.git/config"] [unique_id "aq6gZQsu1HaHDcOg5UHLfgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-19 14:30:12
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:30:08.156434 2026] [security2:error] [pid 23795:tid 23795] [client 35.229.215.72:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pixacast.com"] [uri "/app/.env"] [unique_id "aq6ccItvMlynifrF0ZKCzAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-19 13:40:04
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
rh24
2026-09-19 12:27:07
(1 month ago)
(badbots) Bad bot user-agent [redacted] from 35.229.215.72 (TW/Taiwan/72.215.229.35.bc.googleusercon ...
show more
(badbots) Bad bot user-agent [redacted] from 35.229.215.72 (TW/Taiwan/72.215.229.35.bc.googleusercontent.com)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-19 07:06:43
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 03:06:39.561467 2026] [security2:error] [pid 2768:tid 2768] [client 35.229.215.72:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cms.swarnar.com"] [uri "/.env.example"] [unique_id "aq40f18OoqRGItt2646oBQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Sรฉfora Srl
2026-09-19 06:24:39
(1 month ago)
crowdsecurity/http-bad-user-agent detected by CrowdSec
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-19 03:29:25
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.215.72 (72.215.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 23:29:17.613856 2026] [security2:error] [pid 13425:tid 13425] [client 35.229.215.72:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdn.socialstudiesforkids.com"] [uri "/.env_sample"] [unique_id "aq4BjehhKLuDdPEuAHSx6wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
oja
2026-09-18 23:34:42
(1 month ago)
Aggressive web scanner
Web App Attack