๐ณ๐ฑ
homeshowdomain.nl
2026-10-27 22:59:43
(9 hours ago)
Auto-ban: >3000 req/min op 2026-10-27
Web App Attack
SSH
Hacking
๐บ๐ธ
WizardsToolkit
2026-10-27 20:16:13
(12 hours ago)
tried to access forbidden files; attempted to access /app/.env
Web App Attack
๐บ๐ธ
masterguru
2026-10-27 18:18:47
(14 hours ago)
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\ ...
show more
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})| (932130-147)
show less
Hacking
๐จ๐ญ
zynex
2026-10-27 17:19:03
(15 hours ago)
URL Probing: /.env
Web App Attack
๐ฉ๐ช
Lino Project
2026-10-27 16:53:34
(15 hours ago)
35.246.203.137 - - [27/Oct/2026:17:53:30 +0100] "GET /.git/config HTTP/1.1" 403 424 "-" "Mozilla/5.0 ...
show more
35.246.203.137 - - [27/Oct/2026:17:53:30 +0100] "GET /.git/config HTTP/1.1" 403 424 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-10-27 15:45:46
(16 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-10-27 15:39:27
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.203.137 (137.203.246.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.203.137 (137.203.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 11:39:20.892948 2026] [security2:error] [pid 11138:tid 11138] [client 35.246.203.137:46188] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thesilverlegion.org.theknowledgemaster.com"] [uri "/.git/config"] [unique_id "auDFqLCIQETIautnQlr0eAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-27 13:46:16
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.203.137 (137.203.246.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.203.137 (137.203.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 09:46:11.948414 2026] [security2:error] [pid 10771:tid 10771] [client 35.246.203.137:59858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thesandboxsa.com.redondotile.com"] [uri "/.git/config"] [unique_id "auCrI874Ersw9LSkajHQqAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-10-27 13:46:13
(18 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.246.203.137 (DE/Germany/137.203.246.35.bc.go ...
show more
(mod_security) mod_security (id:949110) triggered by 35.246.203.137 (DE/Germany/137.203.246.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐บ๐ธ
dot.mg
2026-10-27 13:46:11
(18 hours ago)
Scan of vulnerable files
Web App Attack
๐จ๐ฆ
Dunham Support
2026-10-27 13:31:58
(18 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.246.203.137 (DE/Germany/137.203.246. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.246.203.137 (DE/Germany/137.203.246.35.bc.googleusercontent.com)
show less
SQL Injection
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-27 12:02:30
(20 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ณ๐ฑ
ConsulHosting
2026-10-27 10:59:56
(21 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-27 10:12:25
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.203.137 (137.203.246.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.203.137 (137.203.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 06:12:21.340328 2026] [security2:error] [pid 20351:tid 20351] [client 35.246.203.137:51282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.therealseska.sfsdesignsproductions.com"] [uri "/.git/config"] [unique_id "auB5BVtctIaidL3r3FsVHAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-27 10:03:10
(22 hours ago)
35.246.203.137 - - [27/Oct/2026:06:03:05 -0400] "GET /.git/config HTTP/1.1" 404 5685 "-" "Mozilla/5. ...
show more
35.246.203.137 - - [27/Oct/2026:06:03:05 -0400] "GET /.git/config HTTP/1.1" 404 5685 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.246.203.137 - - [27/Oct/2026:06:03:05 -0400] "GET /.env HTTP/1.1" 404 5685 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.246.203.137 - - [27/Oct/2026:06:03:09 -0400] "GET /app/.env HTTP/1.1" 404 5685 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack