🇺🇸
TPI-Abuse
2026-10-09 05:35:42
(21 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 01:35:36.007582 2026] [security2:error] [pid 26784:tid 26784] [client 35.207.137.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.empoweruamerica.org"] [uri "/.git/config"] [unique_id "ash9KGtQ-d_SuspYOSzgbAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-08 22:51:37
(7 hours ago)
[FriOct0900:51:32.6499982026][security2:error][pid3005410:tid3005492][client35.207.137.65:0]ModSecur ...
show more
[FriOct0900:51:32.6499982026][security2:error][pid3005410:tid3005492][client35.207.137.65:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.ecosuber.com\"][uri\"/.env.bak\"][unique_id\"asgedMAmvROqgb8xTVB1hgAAAM4\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 21:05:37
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:05:33.343900 2026] [security2:error] [pid 7724:tid 7724] [client 35.207.137.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.earscript.net"] [uri "/.git/config"] [unique_id "asgFnaAHGt8T03iY1nCmnAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 10:50:10
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 06:50:06.093893 2026] [security2:error] [pid 14916:tid 14916] [client 35.207.137.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.distro.media"] [uri "/.git/config"] [unique_id "asd1XnT1H6MUts0R5QeGEgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 08:32:34
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 04:32:26.152389 2026] [security2:error] [pid 31425:tid 31425] [client 35.207.137.65:46490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.diarrheawolves.com"] [uri "/.git/config"] [unique_id "asdVGgRwG4v4Z_zDld15LgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-08 07:50:07
(22 hours ago)
[ThuOct0809:50:05.1498852026][security2:error][pid2070864:tid2070919][client35.207.137.65:0]ModSecur ...
show more
[ThuOct0809:50:05.1498852026][security2:error][pid2070864:tid2070919][client35.207.137.65:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.dgtime.ch\"][uri\"/.env.bak\"][unique_id\"asdLLTffaj9LhjGeIANtgQAAAYA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 06:25:47
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 02:25:42.296058 2026] [security2:error] [pid 2046:tid 2172] [client 35.207.137.65:38234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.destination-kitchen.com"] [uri "/.git/config"] [unique_id "asc3ZkMrXa9GWWo1yvmNqgAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 05:15:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 01:15:05.582252 2026] [security2:error] [pid 26534:tid 26534] [client 35.207.137.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.dentguyvt.com"] [uri "/.git/config"] [unique_id "ascm2TcwAhyQKb0p71ykswAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 04:51:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 00:51:38.041840 2026] [security2:error] [pid 18893:tid 18893] [client 35.207.137.65:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.demondomain.com"] [uri "/.git/config"] [unique_id "aschWksToGSzj11Mr1EpigAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-10-08 01:50:18
(1 day ago)
csagent: score 19.9: secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 01:40:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 21:40:34.908365 2026] [security2:error] [pid 17668:tid 17668] [client 35.207.137.65:60066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.davidsonmanagement.net"] [uri "/.git/config"] [unique_id "asb0klPmbYD_ilzAkvGL1gAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 23:37:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 19:37:11.058948 2026] [security2:error] [pid 28816:tid 28816] [client 35.207.137.65:38254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.damonmarks.com"] [uri "/.git/config"] [unique_id "asbXp4Hds4EuSzcsMwqNhAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 18:09:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 14:09:52.840758 2026] [security2:error] [pid 11130:tid 11130] [client 35.207.137.65:52314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.crochetfreepatterns.com"] [uri "/.git/config"] [unique_id "asaK8E-o2Lqc_GzCq_ehnQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-07 17:22:20
(1 day ago)
[WedOct0719:22:17.5351522026][security2:error][pid1200296:tid1200388][client35.207.137.65:0]ModSecur ...
show more
[WedOct0719:22:17.5351522026][security2:error][pid1200296:tid1200388][client35.207.137.65:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.creazione-siti-web-ticino.ch\"][uri\"/.env.bak\"][unique_id\"asZ_yR3XH1hWuZmOOfC8YgAAARY\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 13:37:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.137.65 (65.137.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 09:37:51.415615 2026] [security2:error] [pid 4447:tid 4455] [client 35.207.137.65:50542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cookmanufacturinggroup.com"] [uri "/.git/config"] [unique_id "asZLL0f0o9jxeWRZ7sIHSgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
