🇺🇸
TPI-Abuse
2026-06-14 23:35:36
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.223.197.84 (84.197.223.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.223.197.84 (84.197.223.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:35:30.557854 2026] [security2:error] [pid 24619:tid 24619] [client 35.223.197.84:42406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.portfolio.hotelausland.com"] [uri "/.env.default"] [unique_id "ai86wiXFwqrqHEDz82PlCgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 23:24:44
(3 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-14 22:04:16
(4 hours ago)
Auto-ban: >3000 req/min op 2026-06-14
Web App Attack
SSH
Hacking
🇫🇷
dynamix
2026-06-14 16:19:26
(10 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Lacrimosa99
2026-06-14 11:24:54
(15 hours ago)
35.223.197.84 - - [14/Jun/2026:13:24:53 +0200] "GET /admin/.env HTTP/1.1" 404 6275 "-" "Mozilla/5.0 ...
show more
35.223.197.84 - - [14/Jun/2026:13:24:53 +0200] "GET /admin/.env HTTP/1.1" 404 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
35.223.197.84 - - [14/Jun/2026:13:24:53 +0200] "GET /admin/.env.local HTTP/1.1" 404 6275 "-" "Mozilla/5.0 (OS/2; Warp 4.5; rv:38.0) Gecko/20100101 Firefox/38.0 SeaMonkey/2.35"
35.223.197.84 - - [14/Jun/2026:13:24:53 +0200] "GET /admin/.env.production HTTP/1.1" 404 6275 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.2 (KHTML, like Gecko) Ubuntu/11.10 Chromium/15.0.874.120 Chrome/15.0.874.120 Safari/535.2"
...
show less
Web Spam
🇳🇱
Site.eu
2026-06-14 10:17:23
(16 hours ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
Dominik Lysiak
2026-06-14 07:39:45
(19 hours ago)
35.223.197.84 - - [14/Jun/2026:09:39:45 +0200] "GET /.env.backup HTTP/1.1" 502 150 "-" "Mozilla/5.0 ...
show more
35.223.197.84 - - [14/Jun/2026:09:39:45 +0200] "GET /.env.backup HTTP/1.1" 502 150 "-" "Mozilla/5.0 (X11; U; Linux i686; en-us) AppleWebKit/528.5 (KHTML, like Gecko, Safari/528.5 ) lt-GtkLauncher"
35.223.197.84 - - [14/Jun/2026:09:39:45 +0200] "GET /.env.save HTTP/1.1" 502 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
35.223.197.84 - - [14/Jun/2026:09:39:45 +0200] "GET /.env.dist HTTP/1.1" 502 150 "-" "SonyEricssonW660i/R6AD Browser/NetFront/3.3 Profile/MIDP-2.0 Configuration/CLDC-1.1"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 06:05:38
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.223.197.84 (84.197.223.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.223.197.84 (84.197.223.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:05:33.033597 2026] [security2:error] [pid 29288:tid 29288] [client 35.223.197.84:59726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rmhpolarracing.com"] [uri "/api/.env.production"] [unique_id "ai5Erff8pmR3WRX1h5hzQQAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-06-14 04:40:03
(22 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
2026-06-14 03:02:02
(23 hours ago)
[_admin] cross-host-offender: auto: cross-host offender — banned on 3 hosts [httpd-suspicious-path]
Hacking
Web App Attack