๐ณ๐ฑ
e.fierstra
2026-08-31 17:32:20
(2 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-08-31 14:07:34
(6 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+1 more) | 2026-08-31 14:07 UTC
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 13:28:38
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.158.100 (100.158.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.158.100 (100.158.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:28:32.240789 2026] [security2:error] [pid 20080:tid 20080] [client 35.231.158.100:47996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.probeanalysis.com.afjm.net"] [uri "/.git/config"] [unique_id "apWBgOtwvZe6tH17hOAjgwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 10:51:45
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.158.100 (100.158.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.158.100 (100.158.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:51:41.954675 2026] [security2:error] [pid 3720718:tid 3720727] [client 35.231.158.100:59800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.private.emehache.com"] [uri "/.git/config"] [unique_id "apVcvcwcvWxEfdoqgMGsoAAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-08-31 09:40:02
(10 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-31 08:28:22
(11 hours ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-08-31 07:25:09
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.158.100 (100.158.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.158.100 (100.158.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:25:01.171269 2026] [security2:error] [pid 26793:tid 26811] [client 35.231.158.100:59856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.princesscastlebunkbed.davidholls.com"] [uri "/.git/config"] [unique_id "apUsTUxQLsLPCQ8_8XmKEQAAAoc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 06:19:13
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.158.100 (100.158.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.158.100 (100.158.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:19:05.486616 2026] [security2:error] [pid 28957:tid 28957] [client 35.231.158.100:58538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.primestatepainting.com.darkcodedesign.net"] [uri "/.git/config"] [unique_id "apUc2TO67M1o531v4AUEAQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
pipeline.es
2026-08-31 05:32:24
(14 hours ago)
Web scanning / probing for vulnerable paths | URL: /.env.old | Evidence: primeiraclasse.pt 35.231.15 ...
show more
Web scanning / probing for vulnerable paths | URL: /.env.old | Evidence: primeiraclasse.pt 35.231.158.100 - - [31/Aug/2026:07:31:56 +0200] \"GET /.env.old HTTP/1.1\" 404 22412 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
Anonymous
2026-08-31 04:36:39
(15 hours ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.primaverapianistica.com; logs=/var/log/httpd/domains/pri ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.primaverapianistica.com; logs=/var/log/httpd/domains/primaverapianistica.com.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-08-30 21:59:06
(22 hours ago)
Auto-ban: >3000 req/min op 2026-08-30
Web App Attack
SSH
Hacking
๐ฎ๐ช
Jim Keir
2026-08-30 17:24:12
(1 day ago)
2026-08-30 17:24:11 35.231.158.100 File scanning, blocking 35.231.158.100 for 5 minutes
Web App Attack
๐ฎ๐น
CoreTech srl
2026-08-30 13:13:56
(1 day ago)
cloudlinux2 fail2ban: 2026-08-30 15:08:56,019 fail2ban.actions [1459]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-30 15:08:56,019 fail2ban.actions [1459]: NOTICE [plesk-modsecurity] Unban 34.75.122.88cloudlinux2 fail2ban: 2026-08-30 15:09:54,700 fail2ban.actions [1459]: NOTICE [plesk-modsecurity] Ban 35.231.158.100cloudlinux2 fail2ban: 2026-08-30 15:09:54,333 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 35.231.158.100 - 2026-08-30 15:09:54cloudlinux2 fail2ban: 2026-08-30 15:09:54,446 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 35.231.158.100 - 2026-08-30 15:09:54cloudlinux2 fail2ban: 2026-08-30 15:09:54,707 fail2ban.filter [1459]: INFO [recidive] Found 35.231.158.100 - 2026-08-30 15:09:54cloudlinux2 fail2ban: 2026-08-30 15:09:54,604 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 35.231.158.100 - 2026-08-30 15:09:54cloudlinux2 fail2ban: 2026-08-30 15:09:57,318 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 152.58.118.224 - 2026-08-30 15:09:56cloudlinux2 fail2ban: 2026-08-30 15:10:51,900
show less
Brute-Force
๐ฉ๐ช
tentwentyfour
2026-08-30 12:09:55
(1 day ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
๐ซ๐ท
COMAITE
2026-08-30 11:06:44
(1 day ago)
Suspicious URL access.
Web App Attack