|
🇺🇸
dot.mg
|
|
Bad behaviour
|
Web Spam
|
|
🇺🇸
entangled_mongoose
|
|
Probed /wp-json.
|
Web App Attack
|
|
🇦🇺
2000cn.com.au
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
|
Web App Attack
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:56:53.192928 2026] [security2:error] [pid 8908:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:56:53.192928 2026] [security2:error] [pid 8908:tid 8994] [client 35.241.245.151:42416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skillscredentials.com"] [uri "/.env.save"] [unique_id "aq_0NXbA43PZuJ2JW2JJ2AAAAM0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:40:54.130779 2026] [security2:error] [pid 13286:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:40:54.130779 2026] [security2:error] [pid 13286:tid 13286] [client 35.241.245.151:33088] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||skanksex.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "skanksex.com"] [uri "/server.key"] [unique_id "aq_wdgRp-PlSKvijIniK4QAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force
Web App Attack
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:24:17.318847 2026] [security2:error] [pid 15101:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:24:17.318847 2026] [security2:error] [pid 15101:tid 15101] [client 35.241.245.151:52496] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sizefinder.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sizefinder.com"] [uri "/ssl/localhost.key"] [unique_id "aq_skfriRrkNQTpaV6D4IQAAAAQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
netclix.gr
|
|
(mod_security) mod_security triggered on hostname [redacted] 35.241.245.151 (BE/Belgium/151.245.241.35.bc.googleusercontent.com): (CF_ENABLE)
|
SQL Injection
|
|
🇳🇱
Alt255
|
|
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.241.245.151 - - [20/Sep/2026:16:15:45 +0200] "GET /@fs/../.env?raw?? HTTP/2.0" 403 81 "-" "Mozilla/5.0 (compatible; Bytespider; spider-feedbac ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.241.245.151 - - [20/Sep/2026:16:15:45 +0200] "GET /@fs/../.env?raw?? HTTP/2.0" 403 81 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:57:39.137132 2026] [security2:error] [pid 31074:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:57:39.137132 2026] [security2:error] [pid 31074:tid 31074] [client 35.241.245.151:38356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robtown.com"] [uri "/@fs/app/.env"] [unique_id "aq_mU7I9kRndN_1s4kOa2wAAABU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:16:45.450147 2026] [security2:error] [pid 5794:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.241.245.151 (151.245.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:16:45.450147 2026] [security2:error] [pid 5794:tid 5794] [client 35.241.245.151:53958] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||inetbrain.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "inetbrain.com"] [uri "/z9x8c7v6b5-debug-trigger-inetbrain.com"] [unique_id "aq_cvQiyT4nM-C_QWOJPCgAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|