🇬🇧
consul.to
2026-09-20 15:04:44
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 15:00:35
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.234.25.142 (142.25.234.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.25.142 (142.25.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:00:30.645225 2026] [security2:error] [pid 23598:tid 23598] [client 35.234.25.142:32800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hennessymillworks.com"] [uri "/internal/.env"] [unique_id "aq_1Dk_OhWkFWO7qRVi7kwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-09-20 14:50:02
(9 hours ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-122)
show less
Bad Web Bot
🇮🇹
VHosting
2026-09-20 14:35:03
(9 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 14:22:04
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.234.25.142 (142.25.234.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.25.142 (142.25.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:21:57.582335 2026] [security2:error] [pid 22565:tid 22565] [client 35.234.25.142:33884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fourminutedecision.com"] [uri "/.env.js"] [unique_id "aq_sBV23HRTEk-TQeQeGxQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-09-20 14:12:49
(9 hours ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 13:43:31
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.234.25.142 (142.25.234.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.25.142 (142.25.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:43:27.998949 2026] [security2:error] [pid 25408:tid 25408] [client 35.234.25.142:53072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buynorthwest.com"] [uri "/.env.example"] [unique_id "aq_i_1c7NPrLxRfg_pep1AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
robotstxt
2026-09-20 13:39:39
(10 hours ago)
35.234.25.142 - - [20/Sep/2026:13:38:54 +0000] "GET /.aws/config HTTP/2.0" 403 36265 "-" "Mozilla/5. ...
show more
35.234.25.142 - - [20/Sep/2026:13:38:54 +0000] "GET /.aws/config HTTP/2.0" 403 36265 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" "35.234.25.142" edge="172.68.225.90"
35.234.25.142 - - [20/Sep/2026:13:38:54 +0000] "GET /.git-credentials HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "35.234.25.142" edge="172.68.225.90"
35.234.25.142 - - [20/Sep/2026:13:38:56 +0000] "GET /.env.production HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" "35.234.25.142" edge="172.68.225.90"
35.234.25.142 - - [20/Sep/2026:13:38:57 +0000] "GET /.gitconfig HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "35.234.25.142" edge="172.68.225.90"
35.234.25.142 - - [20/Sep/2026:13:38:57 +0000] "GET /.gitlab-ci.yml HTTP/2.0" 403 2 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "35.234.25.142" edge="172.68.225.90"
...
show less
Web App Attack
🇬🇧
Apache
2026-09-20 13:35:39
(10 hours ago)
(mod_security) mod_security (id:930130) triggered by 35.234.25.142 (TW/Taiwan/142.25.234.35.bc.googl ...
show more
(mod_security) mod_security (id:930130) triggered by 35.234.25.142 (TW/Taiwan/142.25.234.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 13:22:53
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.234.25.142 (142.25.234.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.25.142 (142.25.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:22:49.972868 2026] [security2:error] [pid 17172:tid 17172] [client 35.234.25.142:36708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "home.agingworkforcenews.com"] [uri "/.git/config"] [unique_id "aq_eKeDTpnT6XADJlifhtgAAAAg"], referer: https://www.agingworkforcenews.com/.git/config
show less
Brute-Force
Bad Web Bot
Web App Attack