Anonymous
2026-10-08 21:03:02
(3 days ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=24,3, Diversity=10, CanaryOverride=90.
show less
Web App Attack
Bad Web Bot
๐ณ๐ฑ
middelkoopcc
2026-10-08 20:48:01
(3 days ago)
2026-10-08 22:46:35 GET /config.json [301] && 2026-10-08 22:46:35 GET /__/firebase/init.json [301] & ...
show more
2026-10-08 22:46:35 GET /config.json [301] && 2026-10-08 22:46:35 GET /__/firebase/init.json [301] && 2026-10-08 22:46:36 GET /settings.json [301] && 105 more within 20 minutes
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 20:37:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 16:37:51.363700 2026] [security2:error] [pid 31246:tid 31246] [client 35.233.232.39:60498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winformation.us"] [uri "/.htpasswd"] [unique_id "asf_H5r7feWI9batOje_cgAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 20:14:14
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 16:14:07.138692 2026] [security2:error] [pid 8623:tid 8623] [client 35.233.232.39:59396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomhatcher.us"] [uri "/.htpasswd"] [unique_id "asf5j954S1oeLGtCMf8tvQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-08 19:57:07
(3 days ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-08 19:54:28
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 15:54:25.031191 2026] [security2:error] [pid 26337:tid 26337] [client 35.233.232.39:46592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starvationacres.us"] [uri "/.htpasswd"] [unique_id "asf08doFOWYYLtrFBx6BZAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
conrad10781
2026-10-08 19:37:18
(3 days ago)
nginx-dot-env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 19:30:36
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 15:30:31.240259 2026] [security2:error] [pid 18257:tid 18257] [client 35.233.232.39:60614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinhole.us"] [uri "/media../.env"] [unique_id "asfvV2pUzhP39UmrFIsmMAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-10-08 19:28:56
(3 days ago)
Repeated exploit attempts, for example: /frontend/.env /.env (HTTP/2.0 port 443, user agent: "Mozill ...
show more
Repeated exploit attempts, for example: /frontend/.env /.env (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)")
show less
Web App Attack
๐บ๐ธ
SketchyDude
2026-10-08 19:24:51
(3 days ago)
Banned by Fail2Ban jail: apache-fakegooglebot
Bad Web Bot
๐ฉ๐ช
ghostwarriors
2026-10-08 19:20:15
(3 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
netman
2026-10-08 19:16:56
(3 days ago)
HTTP: 35.233.232.39 blocked because of 100 failures
...
DDoS Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 19:08:27
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 15:08:20.941632 2026] [security2:error] [pid 8007:tid 8007] [client 35.233.232.39:36224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelandkatie.us"] [uri "/.htpasswd"] [unique_id "asfqJF-Ls_2BR-hccqxLTgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 18:36:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 14:36:55.046244 2026] [security2:error] [pid 21229:tid 21229] [client 35.233.232.39:56262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "integritysecurity.us"] [uri "/.htpasswd"] [unique_id "asfix5fY8DKwu_woTXY3kwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 18:20:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.232.39 (39.232.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 14:19:57.585211 2026] [security2:error] [pid 27149:tid 27149] [client 35.233.232.39:54746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graner.us"] [uri "/static/../../../a/../../../../.env"] [unique_id "asfezauihlira5H-5sH8kAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack