🇺🇸
TPI-Abuse
2026-09-03 12:36:43
(16 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.203.4.246 (246.4.203.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.4.246 (246.4.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 08:36:40.590597 2026] [security2:error] [pid 6956:tid 6956] [client 35.203.4.246:41092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.golfclearance.com.au.bigholegolf.com"] [uri "/.git/config"] [unique_id "aplp2JrV106mvv8wckaRBQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 12:20:21
(32 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.203.4.246 (246.4.203.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.4.246 (246.4.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 08:20:14.553698 2026] [security2:error] [pid 29949:tid 29949] [client 35.203.4.246:50116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fourmarket.com.joqlawncare.com"] [uri "/.git/config"] [unique_id "apll_s_FaYhzQmDbYAg0NAAAAG4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 11:48:38
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.203.4.246 (246.4.203.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.4.246 (246.4.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 07:48:30.275924 2026] [security2:error] [pid 7751:tid 7751] [client 35.203.4.246:59530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fourdogsandadrone.celtickyss.com"] [uri "/.git/config"] [unique_id "aplejvosliQb9qoPNHRffAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Shaik Sai Meera
2026-09-03 08:40:10
(4 hours ago)
IM360 WAF: Hidden file access
Brute-Force
2026-09-03 08:23:08
(4 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇳🇱
Site.eu
2026-09-03 07:19:10
(5 hours ago)
Excessive multi-domain requests
Brute-Force
🇮🇹
VHosting
2026-09-03 07:05:03
(5 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-09-03 06:38:43
(6 hours ago)
35.203.4.246 - - [03/Sep/2026:08:38:39 +0200] "GET /phpinfo.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 ( ...
show more
35.203.4.246 - - [03/Sep/2026:08:38:39 +0200] "GET /phpinfo.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.4.246 - - [03/Sep/2026:08:38:39 +0200] "GET /info.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.4.246 - - [03/Sep/2026:08:38:39 +0200] "GET /php.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.4.246 - - [03/Sep/2026:08:38:40 +0200] "GET /i.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.4.246 - - [03/Sep/2026:08:38:40 +0200] "GET /pi.php HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.203.4.246 - - [
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 06:13:53
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.203.4.246 (246.4.203.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.4.246 (246.4.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 02:13:45.911504 2026] [security2:error] [pid 21631:tid 21631] [client 35.203.4.246:51868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.goldenstatealliance.com.theknowledgemaster.com"] [uri "/.git/config"] [unique_id "apkQGUSiwhDBEUYSp2Gy0wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-03 04:36:19
(8 hours ago)
20 attempts against mh-misbehave-ban on kiwi
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-09-03 03:36:33
(9 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇩🇪
SiyCah
2026-09-03 03:00:03
(9 hours ago)
IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-03 02:54:42
(9 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-03 02:44:44
(10 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.203.4.246 (CA/Canada/246.4.203.35.bc.googleu ...
show more
(mod_security) mod_security (id:949110) triggered by 35.203.4.246 (CA/Canada/246.4.203.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇳🇱
Savvii
2026-09-03 01:49:32
(11 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack