🇳🇱
Roderic
2026-09-29 06:52:31
(1 day ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted])
Port Scan
🇺🇸
TPI-Abuse
2026-09-28 20:04:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:04:51.234021 2026] [security2:error] [pid 12587:tid 12985] [client 35.230.137.139:56826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffgolden.com"] [uri "/.git/config"] [unique_id "arrIY3WKsYU1woXA2dyhXgAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 16:27:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 12:27:08.196923 2026] [security2:error] [pid 10192:tid 10192] [client 35.230.137.139:58810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "growingupcarny.com"] [uri "/.git/config"] [unique_id "arqVXCDWaBnWohXfm9XKNgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-27 15:47:24
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-26 22:02:55
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-25.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-26 19:44:32
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 15:44:28.638896 2026] [security2:error] [pid 8008:tid 8008] [client 35.230.137.139:46096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cerrovictoria.com"] [uri "/.git/config"] [unique_id "arggnGuqpu5U_e55zBUEqAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-09-26 08:08:47
(4 days ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/139.137.230.35.bc.googleuserconte ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/139.137.230.35.bc.googleusercontent.com
show less
Web App Attack
2026-09-23 09:22:34
(1 week ago)
Web application attack detected.
Web App Attack
🇳🇱
Site.eu
2026-09-23 08:03:57
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇬🇧
consul.to
2026-09-22 12:07:07
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 10:42:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:42:45.528714 2026] [security2:error] [pid 10266:tid 10266] [client 35.230.137.139:58014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drunkenmonkeystyle.com"] [uri "/.git/config"] [unique_id "arJbpd-WKGvyiyz9K_HZQQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-22 08:22:15
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-21 22:01:58
(1 week ago)
Auto-ban: >3000 req/min op 2026-09-21
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-21 15:38:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.230.137.139 (139.137.230.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 11:38:43.482839 2026] [security2:error] [pid 13642:tid 13642] [client 35.230.137.139:42690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "divingmachines.com"] [uri "/.git/config"] [unique_id "arFPg-juH-msZ0S25Sae6gAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Petros Stefanakis
2026-09-21 15:33:55
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 35.230.137.139 (GB/United Kingdom/139.1 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.230.137.139 (GB/United Kingdom/139.137.230.35.bc.googleusercontent.com)
show less
SQL Injection