🇺🇸
TPI-Abuse
2026-09-29 01:13:28
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 21:13:24.480405 2026] [security2:error] [pid 32766:tid 32766] [client 35.220.200.65:36044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.virtuallyinfinitesystems.com"] [uri "/.git/config"] [unique_id "arsQtDtHSvG_Lp6IXqfFPwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-28 15:18:39
(12 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.220.200.65 (HK/Hong Kong/65.200.22 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.220.200.65 (HK/Hong Kong/65.200.220.35.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-28 14:47:03
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 10:46:59.838068 2026] [security2:error] [pid 7448:tid 7448] [client 35.220.200.65:59758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.jeffstamper.com"] [uri "/.git/config"] [unique_id "arp94wP2_Wr1G9KV6M3tCgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 08:24:23
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:24:18.621433 2026] [security2:error] [pid 11859:tid 11859] [client 35.220.200.65:43356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "donutlocations.com"] [uri "/.git/config"] [unique_id "arokMpuq-VyIi1z8Sluw_gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 05:22:13
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 01:22:05.623585 2026] [security2:error] [pid 30580:tid 30580] [client 35.220.200.65:45900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weyoungrenovations.com"] [uri "/.git/config"] [unique_id "arn5fQ_ZXippWGMJAhiNOgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 04:13:57
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 00:13:52.609122 2026] [security2:error] [pid 2930:tid 2930] [client 35.220.200.65:60446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wexfordcap.com"] [uri "/.git/config"] [unique_id "arnpgIx1jjUbAt6rt_b5-gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-27 19:18:00
(1 day ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-27 06:43:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 02:43:39.627319 2026] [security2:error] [pid 15186:tid 15186] [client 35.220.200.65:47074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wgs.cc"] [uri "/.git/config"] [unique_id "ari7G7Yv68kvvwVvC9_qnwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-25 21:29:30
(3 days ago)
35.220.200.65 - - [26/Sep/2026:05:29:29 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ...
show more
35.220.200.65 - - [26/Sep/2026:05:29:29 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇮🇪
Coolnagour
2026-09-25 14:48:52
(3 days ago)
httpprobe: banned during check /
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 03:58:53
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.200.65 (65.200.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 23:58:48.753440 2026] [security2:error] [pid 6442:tid 6468] [client 35.220.200.65:39010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "windstream-sales.com"] [uri "/.git/config"] [unique_id "arSf-PkY0pdCXI2T1K7lZgAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-23 23:22:43
(5 days ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
homeshowdomain.nl
2026-09-22 22:05:03
(6 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-21.
show less
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-09-22 11:00:15
(6 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
dot.mg
2026-09-21 23:16:02
(1 week ago)
Bad behaviour
Web Spam
