🇮🇪
AutosOnShow
2026-09-06 06:11:05
(9 hours ago)
blocked for webapp attack | path requested: / | seen at 2026-09-06 06:10:29.536 |
Web App Attack
Anonymous
2026-09-06 04:29:00
(11 hours ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 03:50:25
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:50:18.970511 2026] [security2:error] [pid 24976:tid 24976] [client 35.205.42.77:60122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.scermak.com"] [uri "/wp-config.php.bak"] [unique_id "apzi-rrEw4gIviafujsS_wAAAH4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 03:03:01
(13 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:53:42
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:53:36.696878 2026] [security2:error] [pid 21431:tid 21431] [client 35.205.42.77:54092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ouzcorp.com"] [uri "/.env.prod"] [unique_id "apzVsLp3K0xE--6fe-RFJwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:35:09
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:35:03.489803 2026] [security2:error] [pid 4202:tid 4202] [client 35.205.42.77:58650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fanarch.xyz"] [uri "/.env"] [unique_id "apzRV_RpwJMzArfnFOyjHAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-09-06 02:34:59
(13 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-06 01:45:26
(14 hours ago)
[06/Sep/2026:04:45:25 +0300] -- 35.205.42.77 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env. ...
show more
[06/Sep/2026:04:45:25 +0300] -- 35.205.42.77 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.production HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-09-06 01:36:31
(14 hours ago)
Repeated exploit attempts, for example: /.env.prod /.env (HTTP/1.1 port 443)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:36:29
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:36:23.833227 2026] [security2:error] [pid 30727:tid 30744] [client 35.205.42.77:45380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "missmadlove.com"] [uri "/wp-config.php.swp"] [unique_id "apzDl1yjTaewCShlwzfEzAAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:14:01
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:13:56.305028 2026] [security2:error] [pid 7982:tid 7982] [client 35.205.42.77:59246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infodevman.net"] [uri "/.env.dev"] [unique_id "apywRNh4iJRMUr0H_7ZJ8AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-05 23:59:13
(16 hours ago)
URL Probing: /wp-config.php.bak
Web App Attack
🇫🇷
COMAITE
2026-09-05 23:55:51
(16 hours ago)
Suspicious URL access.
Web App Attack
Anonymous
2026-09-05 23:24:05
(16 hours ago)
T: f2b 404 5x
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 23:05:05
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.42.77 (77.42.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 19:04:59.322094 2026] [security2:error] [pid 11729:tid 11741] [client 35.205.42.77:46568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "royaleconomicsacademy.com.aafm.us"] [uri "/wp-config.php.swp"] [unique_id "apygGydCOveZ2ZzsmBkjlwAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack