🇺🇸
TPI-Abuse
2026-09-16 07:24:22
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:24:15.727606 2026] [security2:error] [pid 2225809:tid 2225809] [client 35.201.219.70:39760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.colegio.cyber507.net"] [uri "/.git/config"] [unique_id "aqpEH3iNaIvC9WmUTjrr3QAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 03:46:03
(7 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-16 02:59:41
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:59:34.135457 2026] [security2:error] [pid 27821:tid 27824] [client 35.201.219.70:35308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "velatorioslucenses.com"] [uri "/.git/config"] [unique_id "aqoGFiPteSgX_yjGiB1YhAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 02:21:50
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:21:46.354159 2026] [security2:error] [pid 25737:tid 25737] [client 35.201.219.70:44772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.coiledtubingdrilling.com.antech.net"] [uri "/.git/config"] [unique_id "aqn9OrbHKg1xa1KSw0AckAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 01:31:31
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:31:23.717364 2026] [security2:error] [pid 31955:tid 31972] [client 35.201.219.70:39718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.coheteverde.com.emehache.net"] [uri "/.git/config"] [unique_id "aqnxa8fpgGNQUPJnxGaoPwAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-15 22:02:00
(13 hours ago)
Auto-ban: >3000 req/min op 2026-09-15
Web App Attack
SSH
Hacking
🇫🇷
dynamix
2026-09-15 22:00:47
(13 hours ago)
Multiple WAF Violations
Web App Attack
🇲🇾
Rizzy
2026-09-15 20:35:38
(14 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇫🇷
phoenix1jl96
2026-09-15 20:29:44
(14 hours ago)
2026/09/15 22:29:43 [error] 1507858#1507858: *16993 open() "/home/user-data/www/default/mailer/.env" ...
show more
2026/09/15 22:29:43 [error] 1507858#1507858: *16993 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 35.201.219.70, server: goelug.org, request: "GET /mailer/.env HTTP/1.1", host: "goelug.org"
2026/09/15 22:29:43 [error] 1507858#1507858: *16993 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 35.201.219.70, server: goelug.org, request: "GET /mail/.env HTTP/1.1", host: "goelug.org"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
🇨🇭
zynex
2026-09-15 18:39:16
(16 hours ago)
URL Probing: /server/.env
Web App Attack
2026-09-15 15:01:10
(20 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-15 02:55:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
debestelapp
2026-09-15 00:20:19
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 23:53:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.219.70 (70.219.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 19:53:28.072424 2026] [security2:error] [pid 17582:tid 17582] [client 35.201.219.70:38190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wordandspiritministrycenter.com"] [uri "/.git/config"] [unique_id "aqiI-J2GLdk4-fq2vptIcgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack