🇺🇸
TPI-Abuse
2026-11-04 00:45:56
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.185.1.203 (203.1.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:45:51.701814 2026] [security2:error] [pid 22266:tid 22 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.1.203 (203.1.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:45:51.701814 2026] [security2:error] [pid 22266:tid 22266] [client 35.185.1.203:45934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swwpccpa.com"] [uri "/.git/config"] [unique_id "auqAPwjq6AiffGn6cVa2ogAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 00:04:20
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.185.1.203 (203.1.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:04:13.654466 2026] [security2:error] [pid 11515:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.1.203 (203.1.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:04:13.654466 2026] [security2:error] [pid 11515:tid 11515] [client 35.185.1.203:59560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swurgentvet.com"] [uri "/.git/config"] [unique_id "aup2fWkZBlXM0LX-fqaEpAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇰
swrlly
2026-11-03 21:39:58
UTC ·
(3 days ago)
1 unauthorized webserver connection
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 21:00:22
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.185.1.203 (203.1.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:59:59.905186 2026] [security2:error] [pid 30469:tid 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.1.203 (203.1.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:59:59.905186 2026] [security2:error] [pid 30469:tid 30469] [client 35.185.1.203:43292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swpppcal.com"] [uri "/.git/config"] [unique_id "aupLT-QnoJIkKX6u38k0CwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 20:09:05
UTC ·
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Brict IT
2026-11-02 14:50:50
UTC ·
(4 days ago)
Bad Web Bot
Web App Attack
🇺🇸
helios.live
2026-11-02 14:11:23
UTC ·
(4 days ago)
2026/11/02 14:11:22 [error] 2029714#2029714: *1234198 access forbidden by rule, client: 35.185.1.203, server: kocervpn.com, request: "GET /.git/config HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:11:23 [error] 2029714#2029714: *1234198 access forbid ...
show more
2026/11/02 14:11:22 [error] 2029714#2029714: *1234198 access forbidden by rule, client: 35.185.1.203, server: kocervpn.com, request: "GET /.git/config HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:11:23 [error] 2029714#2029714: *1234198 access forbidden by rule, client: 35.185.1.203, server: kocervpn.com, request: "GET /.env HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:11:23 [error] 2029714#2029714: *1234198 access forbidden by rule, client: 35.185.1.203, server: kocervpn.com, request: "GET /.env.local HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:11:23 [error] 2029714#2029714: *1234198 access forbidden by rule, client: 35.185.1.203, server: kocervpn.com, request: "GET /.env.production HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:11:23 [error] 2029714#2029714: *1234198 access forbidden by rule, client: 35.185.1.203, server: kocervpn.com, request: "GET /.env.staging HTTP/1.1", host: "kocervpn.com"
...
show less
Web App Attack
🇮🇹
VHosting
2026-11-02 11:05:05
UTC ·
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
