🇵🇱
strefapi_com
2026-09-04 13:46:20
(26 minutes ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 13:22:51
(49 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:22:46.745598 2026] [security2:error] [pid 8299:tid 8399] [client 35.243.127.222:39884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.digital4z.com"] [uri "/@fs/src/.env"] [unique_id "aprGJtAyp08f1StTk2bg0AAAAQ4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-09-04 13:10:11
(1 hour ago)
Web App Attack
🇬🇧
consul.to
2026-09-04 13:09:02
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:04:43
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:04:37.448531 2026] [security2:error] [pid 30214:tid 30214] [client 35.243.127.222:28764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.eta-mct.com"] [uri "/@fs/..%252f..%252f..%252f..%252f..%252froot/.env"] [unique_id "apqlxbDCiHL7h8RECKC2zwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:35:25
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:35:19.563990 2026] [security2:error] [pid 5024:tid 5024] [client 35.243.127.222:7838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.surveyiowa.com"] [uri "/@fs/root/.env"] [unique_id "apqe51kQosjcwwxrXYD1WAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:18:26
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:18:19.235413 2026] [security2:error] [pid 9565:tid 9565] [client 35.243.127.222:7818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.christinepeat.com"] [uri "/@fs/.env"] [unique_id "apqa60WQ_BM2mxuu3ZJNDQAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:02:28
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:02:22.558083 2026] [security2:error] [pid 28709:tid 28709] [client 35.243.127.222:39414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.carterslawncare.net"] [uri "/@fs/root/.env"] [unique_id "apqJHvdi-Cb6Xa6gDJHskQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jeannelboutique
2026-09-04 06:23:06
(7 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.243.127.222 (JP/Japan/222.127.243.35 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.243.127.222 (JP/Japan/222.127.243.35.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-04 06:15:29
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 02:15:24.315881 2026] [security2:error] [pid 15865:tid 15865] [client 35.243.127.222:52502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tankservicesinc.com"] [uri "/@fs/.env"] [unique_id "apph_OHrBq_Gb8yG4d6Z9AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2026-09-04 05:45:05
(8 hours ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇩🇪
grassau.com
2026-09-04 05:38:34
(8 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.243.127.222 (JP/J ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.243.127.222 (JP/Japan/Tokyo/Tokyo/222.127.243.35.bc.googleusercontent.com)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-04 05:25:26
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 01:25:23.202798 2026] [security2:error] [pid 21738:tid 21738] [client 35.243.127.222:56960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.glassicannex.org"] [uri "/@fs/root/.env"] [unique_id "appWQzJ3RCyPxuoxuxB4IQAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 05:05:27
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.127.222 (222.127.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 01:05:22.375195 2026] [security2:error] [pid 7780:tid 7780] [client 35.243.127.222:59984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cgiaquaticcare.com"] [uri "/@fs/.env"] [unique_id "appRkvH_lTU6PYaDqCO39gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-04 04:49:42
(9 hours ago)
35.243.127.222 - - [04/Sep/2026:01:49:41 -0300] "GET /@fs/.env?raw?? HTTP/1.1" 403 118 "-" "Mozilla/ ...
show more
35.243.127.222 - - [04/Sep/2026:01:49:41 -0300] "GET /@fs/.env?raw?? HTTP/1.1" 403 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:143.16) Gecko/20100101 Firefox/143.16; compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.243.127.222 - - [04/Sep/2026:01:49:41 -0300] "GET /@fs/root/.env?raw?? HTTP/1.1" 403 118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
35.243.127.222 - - [04/Sep/2026:01:49:41 -0300] "GET /@fs/app/.env?raw?? HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)"
35.243.127.222 - - [04/Sep/2026:01:49:41 -0300] "GET /@fs/src/.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Chrome/128.0.1767.54 Safari/537.36"
...
show less
Port Scan
