🇳🇱
Site.eu
2026-09-08 00:03:26
(2 hours ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
homeshowdomain.nl
2026-09-07 21:59:19
(4 hours ago)
Auto-ban: >3000 req/min op 2026-09-07
Web App Attack
SSH
Hacking
🇩🇪
big-cloud.nl
2026-09-07 20:35:09
(5 hours ago)
Try to access /@fs/../.env?raw??
Web App Attack
🇧🇾
lns.bz
2026-09-07 20:31:05
(5 hours ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
mnsf
2026-09-07 20:05:22
(6 hours ago)
Too many Status 40X (13)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 20:03:40
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.222.247.62 (62.247.222.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.222.247.62 (62.247.222.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:03:32.651842 2026] [security2:error] [pid 28582:tid 28582] [client 35.222.247.62:49364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.testrong.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "ap8YlILS6zg0yr2Fl0jFhgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-07 19:08:47
(7 hours ago)
35.222.247.62 detected on srv01
Brute-Force
🇮🇹
ivanbiagi7
2026-09-07 19:08:29
(7 hours ago)
Wazuh detected repeated HTTP client errors consistent with automated web probing. Wazuh rule=31151.
Web App Attack
🇫🇷
Baking333
2026-09-07 18:40:33
(7 hours ago)
[redacted] 35.222.247.62 - - [07/Sep/2026:19:40:32 +0100] "GET /@fs/../.env?raw?? HTTP/1.1" 302 1564 ...
show more
[redacted] 35.222.247.62 - - [07/Sep/2026:19:40:32 +0100] "GET /@fs/../.env?raw?? HTTP/1.1" 302 1564 0/39406 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +Claude-User@[redacted])" [redacted] 35.222.247.62 - - [07/Sep/2026:19:40:32 +0100] "GET /@fs/src/.env?raw?? HTTP/1.1" 302 1564 0/38383 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.5953.161 Mobile Safari/537.36; compatible; GPTBot/1.4; +https://[redacted]/gptbot"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 18:31:33
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.222.247.62 (62.247.222.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.222.247.62 (62.247.222.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:31:26.994599 2026] [security2:error] [pid 17675:tid 17675] [client 35.222.247.62:58842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ctjcisenate.org"] [uri "/@fs/.env.development"] [unique_id "ap8C_iXblVfno_8X3WGkQAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-07 18:03:50
(8 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
wlt-blocker
2026-09-07 17:20:20
(9 hours ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 17:17:01
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.222.247.62 (62.247.222.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.222.247.62 (62.247.222.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:16:57.247906 2026] [security2:error] [pid 17049:tid 17049] [client 35.222.247.62:2638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.printedthanksgivingcards.com"] [uri "/@fs/src/.env"] [unique_id "ap7xifXeaodAiVqbNfs09gAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-07 17:15:36
(9 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 16:52:07
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.222.247.62 (62.247.222.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.222.247.62 (62.247.222.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 12:52:00.316428 2026] [security2:error] [pid 14410:tid 14410] [client 35.222.247.62:30436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.simcorr.com"] [uri "/@fs/.env.development"] [unique_id "ap7rsHjbMkEW096RQHFrfwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack