🇺🇸
TPI-Abuse
2026-10-03 07:05:24
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 35.198.52.128 (128.52.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.198.52.128 (128.52.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 03:05:14.793201 2026] [security2:error] [pid 18172:tid 18172] [client 35.198.52.128:52794] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gospectre.com|F|2"] [data ".gospectre.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gospectre.com"] [uri "/z9x8c7v6b5-debug-trigger-www.gospectre.com"] [unique_id "asCpKr1R_Pgb_mrIGRmKmwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-03 05:38:18
(2 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
🇩🇪
rh24
2026-10-03 01:24:47
(2 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.198.52.128 (BR/Br ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.198.52.128 (BR/Brazil/128.52.198.35.bc.googleusercontent.com)
show less
Bad Web Bot
2026-10-02 23:33:43
(2 days ago)
Banned by Fail2Ban on server
Web App Attack
🇬🇧
poundawebsiteltd
2026-10-02 22:11:47
(2 days ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.198.52. ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.198.52.128 (BR/Brazil/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 35.198.52.128 (BR/Brazil/128.52.198.35.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇺🇸
IndigoRidge
2026-10-02 19:26:11
(2 days ago)
35.198.52.128 - - [02/Oct/2026:15:26:09 -0400] "GET /phpinfo.php HTTP/1.1" 404 47891 "-" "Mozilla/5. ...
show more
35.198.52.128 - - [02/Oct/2026:15:26:09 -0400] "GET /phpinfo.php HTTP/1.1" 404 47891 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.198.52.128 - - [02/Oct/2026:15:26:09 -0400] "GET /info.php HTTP/1.1" 404 47891 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.198.52.128 - - [02/Oct/2026:15:26:11 -0400] "GET /test.php HTTP/1.1" 404 47891 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 17:08:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 13:08:05.991375 2026] [security2:error] [pid 9515:tid 9515] [client 35.198.52.128:37558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.good4sound.com"] [uri "/.env.js"] [unique_id "ar_k9bBp6yb51F6eXxKvSgAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-10-02 16:12:05
(2 days ago)
Bad behaviour
Web Spam
🇺🇸
TPI-Abuse
2026-10-02 15:04:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 11:03:59.801788 2026] [security2:error] [pid 2457:tid 2457] [client 35.198.52.128:53816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.grasslakepizzatime.com"] [uri "/img../.env"] [unique_id "ar_H3yYVCFaCd0q5WvG7nwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 14:18:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 10:18:22.370354 2026] [security2:error] [pid 31773:tid 31773] [client 35.198.52.128:45162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.growtowork.com"] [uri "/.env.js"] [unique_id "ar-9Li0UGcElM_ddNCE1HQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-02 12:25:04
(2 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 09:31:04
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 35.198.52.128 (128.52.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.198.52.128 (128.52.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 05:30:56.382622 2026] [security2:error] [pid 497553:tid 497553] [client 35.198.52.128:38060] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.gonzalez.com|F|2"] [data ".gonzalez.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gonzalez.com"] [uri "/z9x8c7v6b5-debug-trigger-www.gonzalez.com"] [unique_id "ar950FtZKX4eY1N7iN6eSAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 08:14:02
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 04:13:57.181198 2026] [security2:error] [pid 5391:tid 5391] [client 35.198.52.128:43664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grexicon.com"] [uri "/.env.js"] [unique_id "ar9nxTPfd-Ga83F8BYfufAAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇫
www.gregorymariani.com
2026-10-02 07:31:57
(3 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 07:22:09
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.52.128 (128.52.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 03:22:04.741631 2026] [security2:error] [pid 5878:tid 5878] [client 35.198.52.128:50338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.gregdembermusic.com"] [uri "/media../.env"] [unique_id "ar9bnHvCp3LiA0tKeFX55QAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
