🇳🇱
e.fierstra
2026-08-28 13:08:32
(30 minutes ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-08-28 13:06:05
(32 minutes ago)
Trying to access config files
Web App Attack
🇩🇪
auridh
2026-08-28 13:03:08
(35 minutes ago)
Ip 35.253.180.94 performed 'crowdsecurity/http-sensitive-files' (5 events over 49.576172ms) at 2026- ...
show more
Ip 35.253.180.94 performed 'crowdsecurity/http-sensitive-files' (5 events over 49.576172ms) at 2026-08-28 12:30:52.257232836 +0000 UTC
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 13:02:05
(36 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.253.180.94 (94.180.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.180.94 (94.180.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:02:00.571452 2026] [security2:error] [pid 15103:tid 15146] [client 35.253.180.94:50110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.promo.heworeblack.com"] [uri "/.env.local"] [unique_id "apGGyOZx3HOfks8otjPPvgAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Eric
2026-08-28 12:23:55
(1 hour ago)
[Fri Aug 28 12:23:54.721630 2026] [security2:error] [pid 188436:tid 188436] [client 35.253.180.94:49 ...
show more
[Fri Aug 28 12:23:54.721630 2026] [security2:error] [pid 188436:tid 188436] [client 35.253.180.94:49202] [client 35.253.180.94] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "94-209-38-171.cable.dynamic.v4.ziggo.nl"] [uri "/storage/logs/laravel.log"] [unique_id "apF92rHs6YjwQlFUHKAWUwAAACo"]
[Fri Aug 28 12:23:54.729902 2026] [security2:error] [pid 188443:tid 188443] [client 35.253.180.94:49228] [client 35.253.180.94] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anom
...
show less
Hacking
Web App Attack
🇬🇧
consul.to
2026-08-28 12:20:53
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
🇨🇭
DasBiberlein
2026-08-28 11:34:49
(2 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
TPI-Abuse
2026-08-28 11:12:44
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.180.94 (94.180.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.180.94 (94.180.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 07:12:37.345717 2026] [security2:error] [pid 24169:tid 24169] [client 35.253.180.94:38068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "modestosoftwater.com"] [uri "/.env.production"] [unique_id "apFtJRqxhFiYzXNQMquqLgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-28 11:06:06
(2 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 10:46:17
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.180.94 (94.180.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.180.94 (94.180.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:46:13.012117 2026] [security2:error] [pid 15440:tid 15570] [client 35.253.180.94:38098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saryagroup.pershia.net"] [uri "/wp-config.php~"] [unique_id "apFm9Tlh4F3a0yTSGbZdFgAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-28 10:20:04
(3 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 10:05:16
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.180.94 (94.180.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.180.94 (94.180.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 06:05:12.149101 2026] [security2:error] [pid 3118:tid 3118] [client 35.253.180.94:38618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "staging.evai.is"] [uri "/.env.prod"] [unique_id "apFdWHfixwG1411pjKXOXAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack