2026-09-20 21:22:24
(1 month ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 09:58:23
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.247.164.233 (233.164.247.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.247.164.233 (233.164.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 05:58:15.810469 2026] [security2:error] [pid 7529:tid 7529] [client 35.247.164.233:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.southernbroadcast.com"] [uri "/data/.env"] [unique_id "aq5ctylhYQDFIRPrQEjU9AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-19 09:30:03
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 09:05:11
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.247.164.233 (233.164.247.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.247.164.233 (233.164.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 05:05:03.238597 2026] [security2:error] [pid 14405:tid 14405] [client 35.247.164.233:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bbproductionsonline.com"] [uri "/.env"] [unique_id "aq5QP3lUSYmSvWWXdvLg8QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-09-18 22:40:35
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.247.164.233 (SG/Singapore/233.16 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.247.164.233 (SG/Singapore/233.164.247.35.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
🇳🇱
e.fierstra
2026-09-18 22:11:34
(1 month ago)
excessive HTTP 404 errors
Bad Web Bot
2026-09-18 16:03:35
(1 month ago)
Web App Attack
🇩🇪
Skyrider
2026-09-18 15:16:26
(1 month ago)
crowdsecurity/http-probing
Web App Attack
🇧🇷
Caue Henrique
2026-09-18 13:00:37
(1 month ago)
Multiple common web attacks from same source ip.
Web Spam
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-09-18 10:09:42
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
etu brutus
2026-09-18 06:00:55
(1 month ago)
35.247.164.233 Blocked by [Attack Vector List]
...
Hacking
Brute-Force
Exploited Host
🇺🇦
URAN Publishing Service
2026-09-18 03:55:21
(1 month ago)
[18/Sep/2026:06:55:21 +0300] -- 35.247.164.233 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp- ...
show more
[18/Sep/2026:06:55:21 +0300] -- 35.247.164.233 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-json HTTP/1.1
show less
Bad Web Bot
Web App Attack
2026-09-18 03:47:49
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇪🇸
robotstxt
2026-09-18 03:39:04
(1 month ago)
35.247.164.233 - - [18/Sep/2026:03:38:27 +0000] "GET /credentials.json HTTP/2.0" 403 27649 "-" "Mozi ...
show more
35.247.164.233 - - [18/Sep/2026:03:38:27 +0000] "GET /credentials.json HTTP/2.0" 403 27649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "35.247.164.233" edge="172.69.176.115"
35.247.164.233 - - [18/Sep/2026:03:38:27 +0000] "GET /secrets.yml HTTP/2.0" 403 27649 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" "35.247.164.233" edge="172.69.176.115"
35.247.164.233 - - [18/Sep/2026:03:38:27 +0000] "GET /z9x8c7v6b5-debug-trigger-intranet.ccoo.app HTTP/2.0" 403 27649 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "35.247.164.233" edge="172.69.176.115"
35.247.164.233 - - [18/Sep/2026:03:38:27 +0000] "GET /secrets.json HTTP/2.0" 403 27649 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "35.247.164.233" edge="172.69.176.115"
35.247.164.233 - - [18/Sep/2026:03:38:27 +0000] "GET /service-account.json HTTP/2.0" 403 27649 "-" "M
...
show less
Web App Attack
🇺🇸
jormaster3k
2026-09-18 03:27:34
(1 month ago)
Attack against Apache (too many 404s)
Web App Attack