Anonymous
2026-10-23 01:56:41
(2 days ago)
Phishing email
Phishing
Email Spam
๐น๐ท
agah.balta
2026-10-23 01:33:31
(2 days ago)
PMG Spam Score: 17.0. Hits: AMAZON_IMG_NOT_RCVD_AMZN(1.5), RAZOR2_CF_RANGE_51_100(2.43), RAZOR2_CHEC ...
show more
PMG Spam Score: 17.0. Hits: AMAZON_IMG_NOT_RCVD_AMZN(1.5), RAZOR2_CF_RANGE_51_100(2.43), RAZOR2_CHECK(1.729), RCVD_IN_SBL_CSS(3.558), URIBL_ABUSE_SURBL(1.948), URIBL_DBL_SPAM(5)
show less
Email Spam
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-10-18 21:59:53
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-17.
show less
Web App Attack
SSH
Hacking
๐ต๐ฑ
gandaflux
2026-10-18 06:18:55
(1 week ago)
35.235.121.35 [redacted-domain] - [18/Oct/2026:08:18:53 +0200] "GET /.git/config HTTP/1.1" 403 158 " ...
show more
35.235.121.35 [redacted-domain] - [18/Oct/2026:08:18:53 +0200] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.121.35 [redacted-domain] - [18/Oct/2026:08:18:53 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.121.35 [redacted-domain] - [18/Oct/2026:08:18:53 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-18 06:15:02
(1 week ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-10-18 05:10:39
(1 week ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
๐บ๐ธ
mnsf
2026-10-18 03:05:20
(1 week ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
๐จ๐ญ
backslash
2026-10-18 02:27:02
(1 week ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
Anonymous
2026-10-18 02:10:56
(1 week ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 01:54:08
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.235.121.35 (35.121.235.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.235.121.35 (35.121.235.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:54:00.588234 2026] [security2:error] [pid 19370:tid 19370] [client 35.235.121.35:42032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.okeetokee.okeetokee.org"] [uri "/.git/config"] [unique_id "atQmuJQUnVE2hKqaPf09VwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-18 00:46:48
(1 week ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
dot.mg
2026-10-18 00:33:02
(1 week ago)
Scan of vulnerable files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 00:32:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.235.121.35 (35.121.235.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.235.121.35 (35.121.235.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:32:38.698047 2026] [security2:error] [pid 23544:tid 23544] [client 35.235.121.35:56182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.okapi.ic1.biz"] [uri "/.git/config"] [unique_id "atQTpnaQBmlzprxyVtVN6gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-18 00:04:32
(1 week ago)
OKADE WEBEXPLOIT 35.235.121.35 (35.121.235.35.bc.googleusercontent.com)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-17 23:51:00
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.235.121.35 (35.121.235.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.235.121.35 (35.121.235.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:50:56.699693 2026] [security2:error] [pid 24759:tid 24759] [client 35.235.121.35:58820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.okaadmin.byles.net"] [uri "/.git/config"] [unique_id "atQJ4P4CWbB8E5RCElJ6PwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack