🇳🇱
homeshowdomain.nl
2026-08-05 21:59:20
UTC ·
(3 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-04.
Web App Attack
SSH
Hacking
🇫🇷
mail.avx.gr
2026-08-05 20:53:24
UTC ·
(3 months ago)
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 35.245.68.233 - - [04/Aug/2026:19:17:21 +0300] "GET /@fs/.env?raw?? HTTP/1.1" 403 2419 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/ama ...
show more
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 35.245.68.233 - - [04/Aug/2026:19:17:21 +0300] "GET /@fs/.env?raw?? HTTP/1.1" 403 2419 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)"
show less
Web App Attack
🇫🇷
IRISIO
2026-08-05 07:46:38
UTC ·
(3 months ago)
scans/SQL injection/spam posts : 42 queries
Web App Attack
SQL Injection
🇳🇱
homeshowdomain.nl
2026-08-04 21:59:47
UTC ·
(3 months ago)
Auto-ban: >3000 req/min op 2026-08-04
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-04 19:03:50
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 35.245.68.233 (233.68.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 15:03:43.552906 2026] [security2:error] [pid 1183228:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.245.68.233 (233.68.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 15:03:43.552906 2026] [security2:error] [pid 1183228:tid 1183228] [client 35.245.68.233:4750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sporttaekwondo.net"] [uri "/@fs/.env"] [unique_id "anI3j8OBo2Puhet2hSpaxgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-04 18:46:11
UTC ·
(3 months ago)
Bot / seems abusive / Apache connections: 66
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-04 18:31:25
UTC ·
(3 months ago)
Multiple WAF Violations
Web App Attack
🇳🇱
debestelapp
2026-08-04 18:25:07
UTC ·
(3 months ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 18:22:09
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 35.245.68.233 (233.68.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 14:22:01.575908 2026] [security2:error] [pid 275963:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.245.68.233 (233.68.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 14:22:01.575908 2026] [security2:error] [pid 275963:tid 275963] [client 35.245.68.233:43802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cobbwebb.net"] [uri "/@fs/.env"] [unique_id "anItyUZMmvmYv0qqkD43iQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-08-04 17:15:09
UTC ·
(3 months ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
mail.avx.gr
2026-08-04 16:17:22
UTC ·
(3 months ago)
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 35.245.68.233 - - [04/Aug/2026:19:17:21 +0300] "GET /@fs/.env?raw?? HTTP/1.1" 403 2419 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/ama ...
show more
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: default-10-0-0-4:443 35.245.68.233 - - [04/Aug/2026:19:17:21 +0300] "GET /@fs/.env?raw?? HTTP/1.1" 403 2419 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)"
show less
Web App Attack
🇫🇷
masterguru
2026-08-04 15:51:05
UTC ·
(3 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.245.68.233 (US/United States/233.68.245.35.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
Hacking
🇺🇸
TPI-Abuse
2026-08-04 15:41:10
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 35.245.68.233 (233.68.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 11:41:03.059844 2026] [security2:error] [pid 480337:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.245.68.233 (233.68.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 11:41:03.059844 2026] [security2:error] [pid 480337:tid 480356] [client 35.245.68.233:14268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gfx-technology.com"] [uri "/@fs/.env"] [unique_id "anIIDx7umtiKx8jbAWrLxQAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-04 14:32:53
UTC ·
(3 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-08-04 14:18:20
UTC ·
(3 months ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
Hacking