🇺🇸
TPI-Abuse
2026-09-09 07:13:33
(3 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.196.223.151 (151.223.196.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.223.151 (151.223.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 03:13:30.421925 2026] [security2:error] [pid 536299:tid 536418] [client 35.196.223.151:11880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.danfriel.com"] [uri "/@fs/src/.env"] [unique_id "aqEHGrdqgKcUbA4wGrJiAwAAAVU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 06:44:31
(32 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.196.223.151 (151.223.196.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.223.151 (151.223.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 02:44:23.394479 2026] [security2:error] [pid 20795:tid 20807] [client 35.196.223.151:1146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nourishmentofthesoul.org"] [uri "/@fs/../.env"] [unique_id "aqEAR-ColVaRINUggTr6IQAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-09 06:31:56
(44 minutes ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-135)
show less
Bad Web Bot
🇩🇪
LRob
2026-09-09 05:45:20
(1 hour ago)
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 (Macintosh; Inte ...
show more
Declared crawler ignoring robots.txt and the refusals it is given | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.2236.39 Safari/537.36; compa (+2 more) | path: /@fs/../../.env (+10 more) | 2026-09-09 05:45 UTC
show less
Bad Web Bot
🇩🇪
ger-stg-sifi1
2026-09-09 05:41:41
(1 hour ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
ghostwarriors
2026-09-09 05:20:09
(1 hour ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-09 05:18:19
(1 hour ago)
35.196.223.151 - - [09/Sep/2026:07:18:13 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 404 99864 "-" "Moz ...
show more
35.196.223.151 - - [09/Sep/2026:07:18:13 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 404 99864 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; [email])"
35.196.223.151 - - [09/Sep/2026:07:18:13 +0200] "GET /@fs/.env.local?raw?? HTTP/1.1" 404 99864 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot"
35.196.223.151 - - [09/Sep/2026:07:18:13 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 404 99879 "-" "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)"
35.196.223.151 - - [09/Sep/2026:07:18:13 +0200] "GET / HTTP/1.1" 200 19105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
35.196.223.151 - - [09/Sep/2026:07:18:13 +0200] "GET / HTTP/1.1" 200 19104 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
35.196.223.151 - - [09/Sep/2026:07:18:13 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 404 99864 "-" "Mozi
show less
Web App Attack
Hacking
🇺🇸
mnsf
2026-09-09 05:05:33
(2 hours ago)
Too many Status 40X (14)
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-09-09 04:48:49
(2 hours ago)
133 requests with url.path *.php.bak
Brute-Force
Bad Web Bot
🇨🇭
backslash
2026-09-09 04:48:01
(2 hours ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-09 04:19:17
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.223.151 (151.223.196.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.223.151 (151.223.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 00:19:10.690292 2026] [security2:error] [pid 3915:tid 3915] [client 35.196.223.151:39132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title48.com.itaxcenter.com"] [uri "/@fs/app/.env"] [unique_id "aqDePhvsv9X-45c79W-bcAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-09 03:53:20
(3 hours ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Savvii
2026-09-09 03:46:50
(3 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 03:36:28
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.223.151 (151.223.196.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.223.151 (151.223.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 23:36:22.853602 2026] [security2:error] [pid 12770:tid 12770] [client 35.196.223.151:8404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.loveoflearning.com"] [uri "/@fs/../.env"] [unique_id "aqDUNip2ZYkTDZ5erKyNFwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-09 03:30:12
(3 hours ago)
Bot / seems abusive / Apache connections: 61
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack