2026-09-16 01:46:10
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-16 01:34:12
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:34:06.063373 2026] [security2:error] [pid 29896:tid 29896] [client 35.187.220.48:37866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "louiebluemartini.com"] [uri "/.env"] [unique_id "aqnyDtqWty2UVn0wTNjJDQAAAB4"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:38:57
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:38:52.505745 2026] [security2:error] [pid 1699:tid 1846] [client 35.187.220.48:43148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howilearnedtodanceintherain.com"] [uri "/.env"] [unique_id "aqm67MpNFcrifMtvcno0GAAAARg"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:21:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:20:59.115401 2026] [security2:error] [pid 20894:tid 20931] [client 35.187.220.48:37924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "howiek.com"] [uri "/.env"] [unique_id "aqm2u3ZDOkmEixIwHOJ1rgAAAEU"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 17:07:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:07:47.871719 2026] [security2:error] [pid 9705:tid 9705] [client 35.187.220.48:51468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enrimejia.com"] [uri "/.env"] [unique_id "aql7Y17gmAhPe6hgv10r-gAAAAI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 15:03:32
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 11:03:26.394218 2026] [security2:error] [pid 31919:tid 31919] [client 35.187.220.48:46064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danielbrower.com"] [uri "/.env"] [unique_id "aqlePmaL0DrDpbVb3VQ5cAAAAAk"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-15 07:31:45
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
maxxsense
2026-09-15 07:09:06
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.187.220.48 (JP/Japan/48.220.187.35.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.187.220.48 (JP/Japan/48.220.187.35.bc.googleusercontent.com)
show less
SQL Injection
🇳🇱
Savvii
2026-09-15 05:19:31
(3 days ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 04:41:09
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.220.48 (48.220.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 00:41:00.927463 2026] [security2:error] [pid 23075:tid 23075] [client 35.187.220.48:46156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "londongroup.info"] [uri "/.env"] [unique_id "aqjMXIdEoh8SizLZOrK1iwAAABs"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack