๐จ๐ญ
๐จ๐ญ Hosting
2026-08-29 05:10:19
(3 days ago)
Automated WAF report: 150-175 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
๐บ๐ธ
SYSMarshal
2026-08-29 03:22:13
(3 days ago)
SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port: ...
show more
SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152]
show less
Port Scan
Web App Attack
Bad Web Bot
๐ณ๐ฑ
homeshowdomain.nl
2026-08-28 22:00:49
(3 days ago)
Auto-ban: >3000 req/min op 2026-08-28
Web App Attack
SSH
Hacking
๐ซ๐ฎ
stinpriza
2026-08-28 14:35:53
(3 days ago)
Web App Attack
Web App Attack
๐ณ๐ฑ
Savvii
2026-08-28 14:35:48
(3 days ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-28 12:11:11
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฌ๐ง
Andrew
2026-08-28 11:38:19
(3 days ago)
35.236.136.214 - - [28/Aug/2026:12:38:17 +0100] "GET /@fs/../.env?raw?? HTTP/1.1" 404 20277 "-" "Moz ...
show more
35.236.136.214 - - [28/Aug/2026:12:38:17 +0100] "GET /@fs/../.env?raw?? HTTP/1.1" 404 20277 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
35.236.136.214 - - [28/Aug/2026:12:38:17 +0100] "GET /@fs/.env?raw?? HTTP/1.1" 404 20274 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.3202.106 Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot"
35.236.136.214 - - [28/Aug/2026:12:38:17 +0100] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 20278 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) Chrome/91.0.7458.231 Safari/537.36"
35.236.136.214 - - [28/Aug/2026:12:38:17 +0100] "GET /@fs/root/.env?raw?? HTTP/1.1" 404 20279 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.8551.153 Safari/537.36; compatible; ChatGPT-User/1.0; +ht
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-08-28 09:08:08
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ณ๐ฑ
maxxsense
2026-08-28 08:46:32
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.236.136.214 (TW/Taiwan/214.136.236.3 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.236.136.214 (TW/Taiwan/214.136.236.35.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
ArturShelby
2026-08-28 08:36:31
(3 days ago)
Critical file access: /.env.production
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 06:41:54
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.136.214 (214.136.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.136.214 (214.136.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:41:48.544497 2026] [security2:error] [pid 9354:tid 9354] [client 35.236.136.214:48660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gregdember.com"] [uri "/@fs/.env"] [unique_id "apEtrFnYVeMLjJ-G5-I6-wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 06:07:33
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.136.214 (214.136.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.136.214 (214.136.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 02:07:28.068269 2026] [security2:error] [pid 31576:tid 31576] [client 35.236.136.214:14136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.koeckeritz.com"] [uri "/@fs/app/.env"] [unique_id "apEloB-p12iuGCOWE7gMWAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
pinguin
2026-08-28 05:49:46
(4 days ago)
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /amplifyconfiguration.json
UA: Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-08-28 04:48:10
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.136.214 (214.136.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.136.214 (214.136.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 00:48:06.178037 2026] [security2:error] [pid 32292:tid 32292] [client 35.236.136.214:39366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.hvacmechanalysis.com"] [uri "/@fs/.env"] [unique_id "apETBmbmar9eqBMcC9BqZAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-28 03:53:32
(4 days ago)
[28/Aug/2026:03:53:31 +0000] host=voyager.lovelyrender.app server=voyager.lovelyrender.app ip=35.236 ...
show more
[28/Aug/2026:03:53:31 +0000] host=voyager.lovelyrender.app server=voyager.lovelyrender.app ip=35.236.136.214 method=GET req=/@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? uri=/index.php status=200 bytes=2278 rt=0.018 urt=0.018 ref="-" ua="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)"
...
show less
Web App Attack
Bad Web Bot