🇺🇸
mnsf
2026-09-20 15:05:15
(1 hour ago)
Too many Status 40X (12)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-20 14:56:54
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇳🇱
svr
2026-09-20 14:49:39
(1 hour ago)
Abusive Automated Web Scanner
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 14:18:37
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.252.101.216 (216.101.252.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.101.216 (216.101.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:18:28.945013 2026] [security2:error] [pid 8179:tid 8179] [client 35.252.101.216:46298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tech-servusa.com"] [uri "/@fs/app/.env"] [unique_id "aq_rNCOvat9xynct0w_VvgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Feelautom
2026-09-20 14:16:54
(2 hours ago)
[FeelAutom Auto-Ban] BotIdentityRotation: /en/Dockerfile (Score: 266)
Hacking
🇳🇱
debestelapp
2026-09-20 14:15:12
(2 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 14:02:37
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 35.252.101.216 (216.101.252.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 35.252.101.216 (216.101.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 10:02:30.144135 2026] [security2:error] [pid 12356:tid 12369] [client 35.252.101.216:33820] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nothingwithoutwater.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nothingwithoutwater.com"] [uri "/z9x8c7v6b5-debug-trigger-nothingwithoutwater.com"] [unique_id "aq_ndnxC0kT9B5KaHY8EbwAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-20 13:50:04
(2 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 13:45:33
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 35.252.101.216 (216.101.252.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 35.252.101.216 (216.101.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:45:25.714381 2026] [security2:error] [pid 2604:tid 2604] [client 35.252.101.216:59054] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||inetbrain.com|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "inetbrain.com"] [uri "/ssl/localhost.key"] [unique_id "aq_jdfKSsuoo_5EtxST_6AAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
tarlabs
2026-09-20 13:36:51
(2 hours ago)
IP banned by Fail2Ban (traefik-404 jail)
Web App Attack
🇫🇷
demomodule
2026-09-20 13:34:37
(2 hours ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 13:30:08
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.252.101.216 (216.101.252.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.101.216 (216.101.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 09:30:02.303508 2026] [security2:error] [pid 1362:tid 1362] [client 35.252.101.216:52836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canarysuites.com"] [uri "/deploy/.env"] [unique_id "aq_f2npxw5DFWq5KHqWyIAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack