🇦🇺
screwlooseit.com.au
2026-09-16 02:44:58
(5 minutes ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
41.190.201.35.bc.googleusercontent.com
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 02:13:20
(36 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.201.190.41 (41.190.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.190.41 (41.190.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:13:16.344931 2026] [security2:error] [pid 10025:tid 10025] [client 35.201.190.41:57194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.globalaccessadvisors.com.salsberggroup.com"] [uri "/.git/config"] [unique_id "aqn7PCiyr8mqEv-NGBXOmQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-16 00:34:21
(2 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-15 22:49:27
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.190.41 (41.190.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.190.41 (41.190.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:49:21.900742 2026] [security2:error] [pid 1692923:tid 1692923] [client 35.201.190.41:49014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.glicksmandro.com.truefauxstudio.com"] [uri "/.git/config"] [unique_id "aqnLcTgvv5qIypPHGGV7jAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 20:56:05
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.190.41 (41.190.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.190.41 (41.190.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:55:58.415809 2026] [security2:error] [pid 20963:tid 21027] [client 35.201.190.41:39588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.glenallen.windowtailors.com"] [uri "/.git/config"] [unique_id "aqmw3oYJeNiXD5h9WRUVJgAAAgc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-15 20:53:20
(5 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
maxxsense
2026-09-15 20:46:29
(6 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.201.190.41 (TW/Taiwan/41.190.201.35. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.201.190.41 (TW/Taiwan/41.190.201.35.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-15 20:03:23
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.190.41 (41.190.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.190.41 (41.190.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:03:17.615357 2026] [security2:error] [pid 18931:tid 18931] [client 35.201.190.41:53284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gld.cmabiblequizzing.org"] [uri "/.git/config"] [unique_id "aqmkhatfQQ5-lyBGwncLiQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-15 19:33:06
(7 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
4server
2026-09-15 17:20:58
(9 hours ago)
[TueSep1519:20:56.4442702026][security2:error][pid3576024:tid3576127][client35.201.190.41:0]ModSecur ...
show more
[TueSep1519:20:56.4442702026][security2:error][pid3576024:tid3576127][client35.201.190.41:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.glass-container.com.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"aql-eM5mwJDiCaC_FnXmjQAAAgw\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-15 16:38:13
(10 hours ago)
Excessive 404/403 errors
Brute-Force
🇨🇭
backslash
2026-09-15 16:27:02
(10 hours ago)
block ruleset likely probe for CVE-2025-55182 619E65C9C14E5E741C55CC8FD5E5630F031EBB6A
Web App Attack
2026-09-15 15:47:21
(11 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-15 15:05:04
(11 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇷🇴
abuse_IP_reporter
2024-06-08 12:45:23
(2 years ago)
Jun 8 15:30:47 server UFW BLOCK SRC=35.201.190.41 DF PROTO=TCP SPT=80
Port Scan