πΊπΈ
TPI-Abuse
2026-10-13 21:14:30
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:14:26.879062 2026] [security2:error] [pid 23176:tid 23176] [client 35.215.42.206:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.thectegroup.net"] [uri "/.git/config"] [unique_id "as6fMg7TH8Mdskvb8nX8egAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-13 20:43:47
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 16:43:39.992770 2026] [security2:error] [pid 15051:tid 15051] [client 35.215.42.206:36934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.thebestac.com"] [uri "/.git/config"] [unique_id "as6X-6CU4MfmVWutNyIslAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Site.eu
2026-10-13 18:26:06
(1 week ago)
Excessive multi-domain requests
Brute-Force
π«π·
Catalin Negru
2026-10-13 16:31:14
(1 week ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
πΊπΈ
cloud-tree.estudiosis.com.br
2026-10-13 14:50:58
(1 week ago)
Web scanner against a Nextcloud/WebDAV vhost: 277 HTTP requests in 13 seconds (2026-10-13 14:50:58-1 ...
show more
Web scanner against a Nextcloud/WebDAV vhost: 277 HTTP requests in 13 seconds (2026-10-13 14:50:58-14:51:11 UTC) probing /.env, *.json and POST / paths, all answered 401/404; also triggered Imunify360 CAPTCHA DoS alert (101 captcha requests) on a second server. Blocked at the firewall.
show less
Web App Attack
Hacking
πΊπΈ
TPI-Abuse
2026-10-13 14:48:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 10:48:21.685067 2026] [security2:error] [pid 26640:tid 26640] [client 35.215.42.206:44912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sympalais.com"] [uri "/.git/config"] [unique_id "as5Etemfhj9Q_tlBbn44ywAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-13 14:01:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 10:01:00.304223 2026] [security2:error] [pid 514:tid 514] [client 35.215.42.206:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.swarnar.com"] [uri "/.git/config"] [unique_id "as45nATa8s-j5avL1CbkUAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-13 12:39:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 08:39:45.969521 2026] [security2:error] [pid 7647:tid 7647] [client 35.215.42.206:52134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sunsettrailsardmore.com"] [uri "/.git/config"] [unique_id "as4mkbIsbn2aBzmMLVEA_gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-13 04:14:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 00:14:40.440219 2026] [security2:error] [pid 11431:tid 11431] [client 35.215.42.206:42302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.softwarezz.net"] [uri "/.git/config"] [unique_id "as2wMBTdqMgyViqXVt1aWAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-13 01:20:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 21:20:00.190447 2026] [security2:error] [pid 23482:tid 23482] [client 35.215.42.206:37782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.skintormint.com"] [uri "/.git/config"] [unique_id "as2HQPWS30hTypYGMfytXAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-12 23:55:22
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 19:55:18.803532 2026] [security2:error] [pid 14657:tid 14657] [client 35.215.42.206:33956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.sinsky.net"] [uri "/.git/config"] [unique_id "as1zZnq3wKdw5UPVi_d1aQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 08:55:03
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
π³π±
Site.eu
2026-10-10 16:34:30
(1 week ago)
Excessive multi-domain requests
Brute-Force
π©πͺ
marten_o
2026-10-09 19:47:46
(1 week ago)
35.215.42.206 - - [09/Oct/2026:21:47:45 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/ ...
show more
35.215.42.206 - - [09/Oct/2026:21:47:45 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 323 458
...
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-09 18:34:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.215.42.206 (206.42.215.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 14:34:47.467839 2026] [security2:error] [pid 596:tid 596] [client 35.215.42.206:35800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepinelandclub.com.velvetculture.com"] [uri "/.git/config"] [unique_id "askzx-rL0BC93eS4FHRitAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack