🇷🇴
clauss
2026-10-12 19:38:28
(1 hour ago)
35.196.54.208 - - [12/Oct/2026:22:38:28 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///ro ...
show more
35.196.54.208 - - [12/Oct/2026:22:38:28 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 404 201 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.196.54.208 - - [12/Oct/2026:22:38:28 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/2.0" 403 207 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Web App Attack
🇺🇸
antlac1
2026-10-12 15:22:52
(5 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-10-12 15:12:44
(5 hours ago)
24.071 requests in 1 hour (1w6d22h)
Brute-Force
Bad Web Bot
🇩🇪
rh24
2026-10-12 14:55:35
(5 hours ago)
(badbots) Bad bot user-agent [redacted] from 35.196.54.208 (US/United States/208.54.196.35.bc.google ...
show more
(badbots) Bad bot user-agent [redacted] from 35.196.54.208 (US/United States/208.54.196.35.bc.googleusercontent.com)
show less
Hacking
🇳🇱
e.fierstra
2026-10-12 14:53:33
(5 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 14:01:25
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.54.208 (208.54.196.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.54.208 (208.54.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 10:01:23.065371 2026] [security2:error] [pid 20017:tid 20017] [client 35.196.54.208:47650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scarletveil.org"] [uri "/static//.env"] [unique_id "aszoM97sqA7SzAP-zCAUTQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇰
ScamAware
2026-10-12 13:44:16
(7 hours ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 9. Unique request paths counted internally: 9. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 13:23:46
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.54.208 (208.54.196.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.54.208 (208.54.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:23:38.202365 2026] [security2:error] [pid 14385:tid 14385] [client 35.196.54.208:42716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sbxyz.net"] [uri "/%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env"] [unique_id "aszfWqm3Oh1p5OYHkaG12wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 13:05:28
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.54.208 (208.54.196.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.54.208 (208.54.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:05:23.204958 2026] [security2:error] [pid 29161:tid 29161] [client 35.196.54.208:58424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sbiusa.org"] [uri "/images../.env"] [unique_id "aszbE9l9VxMrvqLy5bD_1wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-10-12 13:04:22
(7 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
grassau.com
2026-10-12 13:01:42
(7 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.196.54.208 (US/Un ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.196.54.208 (US/United States/South Carolina/North Charleston/208.54.196.35.bc.googleusercontent.com)
show less
Bad Web Bot
🇦🇺
Terrier
2026-10-12 13:00:02
(7 hours ago)
Blocked for HTTP vulnerability scanning (excessive 40x)
Web App Attack
2026-10-12 12:35:24
(8 hours ago)
35.196.54.208 - - [12/Oct/2026:14:35:03 +0200] "GET /.env HTTP/2.0" 403 272 "https://sayalonga.de/./ ...
show more
35.196.54.208 - - [12/Oct/2026:14:35:03 +0200] "GET /.env HTTP/2.0" 403 272 "https://sayalonga.de/.//.env" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 12:28:53
(8 hours ago)
(mod_security) mod_security (id:210730) triggered by 35.196.54.208 (208.54.196.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.196.54.208 (208.54.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 08:28:47.725327 2026] [security2:error] [pid 7012:tid 7012] [client 35.196.54.208:44312] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sawted.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sawted.com"] [uri "/z9x8c7v6b5-debug-trigger-sawted.com"] [unique_id "aszSf1KVnT9NaKRfUePOGwAAAAU"], referer: http://sawted.com/z9x8c7v6b5-debug-trigger-sawted.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-12 12:17:53
(8 hours ago)
20 attempts against mh-misbehave-ban on burne
Brute-Force
Bad Web Bot
Web App Attack
