🇺🇸
TPI-Abuse
2026-09-01 11:27:46
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:27:42.024793 2026] [security2:error] [pid 2425:tid 2425] [client 35.205.231.239:34162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.littlesicily.jbaydeliveries.com"] [uri "/.git/config"] [unique_id "apa2rs3h1M6k5myQJ99QJgAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:42:27
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:42:19.162280 2026] [security2:error] [pid 840:tid 840] [client 35.205.231.239:59210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.littlepeopledelivery.com"] [uri "/.git/config"] [unique_id "apasCwy09STm_gitGrLl7wAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-09-01 03:57:35
(9 hours ago)
35.205.231.239 - - [31/Aug/2026:21:57:35 -0600] "GET /.git/config HTTP/1.1" 301 519 "-" "Mozilla/5.0 ...
show more
35.205.231.239 - - [31/Aug/2026:21:57:35 -0600] "GET /.git/config HTTP/1.1" 301 519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇬🇧
OptimusGO
2026-09-01 03:46:22
(9 hours ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-09-01 04:46:22 UTC
Log evidence:
35.205.231.239 - - [01/Sep/2026:04:46:08 +0100] "GET /old/phpinfo.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.205.231.239 - - [01/Sep/2026:04:46:09 +0100] "GET /tmp/phpinfo.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.205.231.239 - - [01/Sep/2026:04:46:09 +0100] "GET /public/phpinfo.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Port Scan
Brute-Force
🇩🇪
BlueWire Hosting
2026-09-01 01:03:51
(12 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇬🇧
andypiper
2026-09-01 01:02:14
(12 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
2026-09-01 00:12:12
(13 hours ago)
Bot / seems abusive / Apache connections: 38
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-08-31 23:56:36
(13 hours ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 2s
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-31 22:01:36
(15 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-30.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-31 16:44:04
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 12:43:56.930195 2026] [security2:error] [pid 30800:tid 30800] [client 35.205.231.239:57528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.macisdead.edgeimprov.com"] [uri "/.git/config"] [unique_id "apWvTDOvngLnhRUkwH2AmQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
maciejka
2026-08-31 16:39:12
(21 hours ago)
35.205.231.239 - - [31/Aug/2026:18:39:11 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 ...
show more
35.205.231.239 - - [31/Aug/2026:18:39:11 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
35.205.231.239 - - [31/Aug/2026:18:39:11 +0200] "GET /mail/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
Bad Web Bot
🇦🇺
screwlooseit.com.au
2026-08-31 15:29:28
(22 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
239.231.205.35.bc.googleusercontent.com
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 14:51:52
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:51:44.867572 2026] [security2:error] [pid 13818:tid 13818] [client 35.205.231.239:52106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.macallanmitchell.macryder.com"] [uri "/.git/config"] [unique_id "apWVAC-nAUp3k3JUSvib3wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-31 14:02:35
(23 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-31 12:50:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.205.231.239 (239.231.205.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:50:46.092999 2026] [security2:error] [pid 9557:tid 9557] [client 35.205.231.239:39660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.m5mindsetcom.indie100.com"] [uri "/.git/config"] [unique_id "apV4ppVJjuoBzRaH4RvEtgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack