🇺🇸
TPI-Abuse
2026-09-02 06:23:38
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.197.72.3 (3.72.197.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.72.3 (3.72.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:23:32.483895 2026] [security2:error] [pid 25521:tid 25521] [client 35.197.72.3:50136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.corona-schutzkonzept.vjrott.com"] [uri "/.git/config"] [unique_id "apfA5JUCkIWi3VujG_3J_gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-09-02 04:13:49
(3 hours ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 03:14:56
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.197.72.3 (3.72.197.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.72.3 (3.72.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:14:52.727697 2026] [security2:error] [pid 13747:tid 13758] [client 35.197.72.3:52212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.corianworks.conceptsinammunition.com"] [uri "/.git/config"] [unique_id "apeUrFEgWpK6_Vt2uK5oLwAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-02 01:30:35
(6 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
homeshowdomain.nl
2026-09-01 22:00:18
(9 hours ago)
Auto-ban: >3000 req/min op 2026-09-01
Web App Attack
SSH
Hacking
🇳🇱
WeCloudit-Anti-Abuse
2026-09-01 21:05:15
(10 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-09-01 21:00:59
(10 hours ago)
[ns27.kdns.gr] httpd-config-scan: sites=www.copynet.gr; logs=/var/log/httpd/domains/copynet.gr.log; ...
show more
[ns27.kdns.gr] httpd-config-scan: sites=www.copynet.gr; logs=/var/log/httpd/domains/copynet.gr.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-01 19:23:47
(12 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.197.72.3 (US/United States/3.72.197.35.bc.go ...
show more
(mod_security) mod_security (id:949110) triggered by 35.197.72.3 (US/United States/3.72.197.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 19:02:47
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.197.72.3 (3.72.197.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.72.3 (3.72.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 15:02:39.479153 2026] [security2:error] [pid 19768:tid 19768] [client 35.197.72.3:33640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.copiersasheville.computersraleigh.com"] [uri "/.git/config"] [unique_id "apchT7_E7_syxHpz6pwZnwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 18:01:36
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.197.72.3 (3.72.197.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.72.3 (3.72.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 14:01:30.304879 2026] [security2:error] [pid 25085:tid 25085] [client 35.197.72.3:43088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.copa.gabosoftware.com"] [uri "/.git/config"] [unique_id "apcS-vSNYaYcW7o6gu407AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-09-01 17:42:17
(14 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇮🇹
VHosting
2026-09-01 17:30:05
(14 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack