2026-09-09 13:13:09
(1 week ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-08 22:03:11
(1 week ago)
Auto-ban: >3000 req/min op 2026-09-08
Web App Attack
SSH
Hacking
2026-09-08 13:11:23
(1 week ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇦🇺
A.i.D.A.N.N
2026-09-08 11:18:28
(1 week ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-09-08 10:53:01
(1 week ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇳🇱
BlueWire Hosting
2026-09-08 10:47:39
(1 week ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇸🇬
Cloudkul Cloudkul
2026-09-08 10:36:26
(1 week ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
🇫🇮
Shaik Sai Meera
2026-09-08 10:35:12
(1 week ago)
IM360 WAF: Hidden file access
Brute-Force
🇺🇸
TPI-Abuse
2026-09-08 10:12:39
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.237.189.12 (12.189.237.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.189.12 (12.189.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:12:31.938514 2026] [security2:error] [pid 9636:tid 9636] [client 35.237.189.12:39620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.avmarep.com"] [uri "/@fs/root/.env"] [unique_id "ap_fj75A95bgxLRuarCPgAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 09:27:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.237.189.12 (12.189.237.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.189.12 (12.189.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 05:27:02.448980 2026] [security2:error] [pid 25462:tid 25462] [client 35.237.189.12:43272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.jsw4.net"] [uri "/@fs/root/.env"] [unique_id "ap_U5qHUM31k2OqUCsSZfAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-08 08:32:16
(1 week ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 07:50:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.237.189.12 (12.189.237.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.189.12 (12.189.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 03:50:45.533868 2026] [security2:error] [pid 13286:tid 13286] [client 35.237.189.12:54444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.desertrosedoves.com"] [uri "/@fs/root/.env"] [unique_id "ap--VdkcQY9oWd7-SWTEUQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2026-09-08 07:27:14
(1 week ago)
URL scan
Brute-Force
Web App Attack
🇺🇸
dot.mg
2026-09-08 06:58:01
(1 week ago)
Bad behaviour
Web Spam
🇺🇸
TPI-Abuse
2026-09-08 06:37:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.237.189.12 (12.189.237.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.189.12 (12.189.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 02:37:34.056863 2026] [security2:error] [pid 3603:tid 3603] [client 35.237.189.12:1788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.powerastronomy.com"] [uri "/@fs/root/.env"] [unique_id "ap-tLrrVJ3zD4WKypGw-bQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack