🇺🇸
TPI-Abuse
2026-09-03 23:55:37
(1 minute ago)
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:55:30.840046 2026] [security2:error] [pid 7201:tid 7201] [client 35.185.152.52:22296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cloggersunlimited.com"] [uri "/@fs/app/.env"] [unique_id "apoI8owbgGedH0J-BTvdeQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 23:28:25
(28 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:28:18.211265 2026] [security2:error] [pid 30854:tid 30854] [client 35.185.152.52:64908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kwijlen.com"] [uri "/@fs/app/.env"] [unique_id "apoCkmZhpYszSIeOvngksgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 22:49:55
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:49:51.333635 2026] [security2:error] [pid 23826:tid 23826] [client 35.185.152.52:33820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.bilimkurgumanyagi.com"] [uri "/@fs/app/.env"] [unique_id "apn5jx6ieuycq-9SuVv7UwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-03 22:39:11
(1 hour ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
FeG Deutschland
2026-09-03 22:38:03
(1 hour ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 22:14:22
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:14:18.121545 2026] [security2:error] [pid 8919:tid 8919] [client 35.185.152.52:36672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.kalosgroups.com"] [uri "/@fs/.env"] [unique_id "apnxOiUuX3lpYuh7t69zsAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
paissangroup
2026-09-03 22:01:05
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-03 21:59:08
(1 hour ago)
Auto-ban: >3000 req/min op 2026-09-03
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-03 21:22:49
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:22:43.941561 2026] [security2:error] [pid 2945:tid 2945] [client 35.185.152.52:48300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.zabyte.net"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252fapp/.env"] [unique_id "apnlI0btaT2vHp8M90wqmQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 20:11:38
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 16:11:30.724651 2026] [security2:error] [pid 10586:tid 10586] [client 35.185.152.52:24072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.jhbookdesign.com"] [uri "/@fs/.env"] [unique_id "apnUckrAOKVhPtbkrhKptQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-03 20:05:17
(3 hours ago)
Too many Status 40X (31)
Scanning/Probing (26)
Brute-Force
Web App Attack
🇬🇧
relianoid.com
2026-09-03 19:35:48
(4 hours ago)
404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web App Attack
🇳🇱
Savvii
2026-09-03 19:14:08
(4 hours ago)
20 attempts against mh-misbehave-ban on flow
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 19:13:53
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.152.52 (52.152.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:13:46.294442 2026] [security2:error] [pid 2625:tid 2625] [client 35.185.152.52:7074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nationalenq.internetnameregistration.com"] [uri "/@fs/.env"] [unique_id "apnG6s9iyDBSztLqWXe2iAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-03 19:04:16
(4 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking