🇬🇧
masterguru
2026-06-11 03:20:25
(10 hours ago)
Too much 404 requests in 1 minute. Operator GE matched 20 at IP:block_script. (46020-185)
Hacking
🇳🇱
homeshowdomain.nl
2026-06-09 22:01:20
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
🇺🇸
Lee Daniel
2026-06-09 21:34:57
(1 day ago)
35.228.119.94 - - [09/Jun/2026:17:34:55 -0400] "GET /sites/all/modules/responsive_menus/styles/meanM ...
show more
35.228.119.94 - - [09/Jun/2026:17:34:55 -0400] "GET /sites/all/modules/responsive_menus/styles/meanMenu/jquery.meanmenu.min.js.map HTTP/1.1" 404 16675 "https://safetysupplyco.com/sites/all/modules/responsive_menus/styles/meanMenu/jquery.meanmenu.min.js.map" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
35.228.119.94 - - [09/Jun/2026:17:34:55 -0400] "GET /misc/jquery-extend-3.4.0.js.map HTTP/1.1" 404 16514 "https://safetysupplyco.com/misc/jquery-extend-3.4.0.js.map" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
35.228.119.94 - - [09/Jun/2026:17:34:55 -0400] "GET /sites/all/modules/popup/popup.js.map HTTP/1.1" 404 16539 "https://safetysupplyco.com/sites/all/modules/popup/popup.js.map" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
35.228.119.94 - - [09/Jun/2026:17:34:55 -0400] "GET /sites/all/modules/lightbox2/js/auto_image_handl
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-06-09 20:36:49
(1 day ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
masterguru
2026-06-09 14:41:30
(1 day ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 35.228.119.94 (FI/Finland/94.119.228.35.bc.goo ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 35.228.119.94 (FI/Finland/94.119.228.35.bc.googleusercontent.com): 1 in the last 3600 secs (0-196)
show less
Hacking
🇳🇱
homeshowdomain.nl
2026-06-08 22:05:43
(2 days ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-08 20:58:52
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:58:48.765478 2026] [security2:error] [pid 20560:tid 20560] [client 35.228.119.94:40882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stpetersplayers.co.uk.abbeygardensllandudno.com"] [uri "/.git/config"] [unique_id "aictCG0HSqjBbDZc5-wDBwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 19:33:18
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 15:33:11.124589 2026] [security2:error] [pid 16424:tid 16424] [client 35.228.119.94:35114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travel-pix.com"] [uri "/.git/config"] [unique_id "aicY97XjYUCzxu321GpZ_AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 18:10:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 14:10:02.849552 2026] [security2:error] [pid 9877:tid 9877] [client 35.228.119.94:59220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rgvatvrepair.com.worldchat.global"] [uri "/.git/config"] [unique_id "aicFeuAD0bMzrAM8Z1bXYgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 17:51:22
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 13:51:18.264308 2026] [security2:error] [pid 984:tid 1007] [client 35.228.119.94:60524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cityfilms-lb.com.oplconnect.com"] [uri "/.git/config"] [unique_id "aicBFkij8Q7OjCm4athEUQAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 15:34:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:33:58.350876 2026] [security2:error] [pid 24192:tid 24192] [client 35.228.119.94:54502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tradelosangeles.directoryofbikes.com"] [uri "/.git/config"] [unique_id "aibg5g12-b7THNJ6xVBKZgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 14:24:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 10:24:09.650373 2026] [security2:error] [pid 13283:tid 13283] [client 35.228.119.94:38774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jimsvet.com.galaxyretro.com"] [uri "/.git/config"] [unique_id "aibQiWkA5BcIqP2MNTBbUQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 13:49:27
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 09:49:21.678276 2026] [security2:error] [pid 12274:tid 12274] [client 35.228.119.94:57710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jbccomputers.com.jbcllcnet.com"] [uri "/.git/config"] [unique_id "aibIYQJs9g8uW2YB1sJElQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-08 11:15:07
(3 days ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 10:24:41
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.119.94 (94.119.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 06:24:36.418809 2026] [security2:error] [pid 28369:tid 28369] [client 35.228.119.94:60212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dosfordogs.ca"] [uri "/.git/config"] [unique_id "aiaYZN4D3kfu7ecHLtFYWgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack