2026-09-08 12:54:29
(5 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.247.150.23 (SG/Singapore/23.150.247. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.247.150.23 (SG/Singapore/23.150.247.35.bc.googleusercontent.com)
show less
SQL Injection
2026-09-08 12:30:12
(6 hours ago)
Bot / seems abusive / Apache connections: 52
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 12:07:03
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:06:59.181447 2026] [security2:error] [pid 4946:tid 4946] [client 35.247.150.23:62832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.fales.org"] [uri "/@fs/.env"] [unique_id "ap_6Yx1H9vswDeNR_cuQeQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-08 11:46:41
(7 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-08 11:08:05
(7 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-08 10:38:09
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:38:03.271953 2026] [security2:error] [pid 4189:tid 4236] [client 35.247.150.23:37368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.catch-22productions.com"] [uri "/@fs/.env"] [unique_id "ap_li7xcM_9q4_K-2VV5MgAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-09-08 10:23:20
(8 hours ago)
Blocked by ConnMonitor: Bad Bot
Bad Web Bot
Spoofing
🇦🇺
AWW-Admin
2026-09-08 10:16:26
(8 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.247.150.23 (SG/Singapore/23.150.247. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.247.150.23 (SG/Singapore/23.150.247.35.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-08 09:54:25
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 05:54:21.127029 2026] [security2:error] [pid 3344801:tid 3344801] [client 35.247.150.23:62900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.wardellbrown.com"] [uri "/@fs/root/.env"] [unique_id "ap_bTeEYdXA2R0dpnMPJ2AAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-08 09:25:44
(9 hours ago)
URL Probing: /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env
Web App Attack
🇳🇿
Antinson
2026-09-08 08:46:16
(10 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇫🇷
masterguru
2026-09-08 08:45:35
(10 hours ago)
Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 08:08:15
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 04:08:07.629216 2026] [security2:error] [pid 3712:tid 3712] [client 35.247.150.23:39608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.operatif.com"] [uri "/@fs/root/.env"] [unique_id "ap_CZwhBr2xhuijU63rwLwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-08 08:05:36
(10 hours ago)
Scanning/Probing (25)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 06:00:24
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.247.150.23 (23.150.247.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 02:00:16.111799 2026] [security2:error] [pid 15267:tid 15267] [client 35.247.150.23:8652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.no1sicko.com"] [uri "/@fs/src/.env"] [unique_id "ap-kcI3OIvXcF-ziLZ4N2QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
