🇳🇱
homeshowdomain.nl
2026-09-01 21:59:19
(8 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-31.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-01 18:39:47
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 14:39:43.164053 2026] [security2:error] [pid 5444:tid 5444] [client 35.231.167.196:16580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pnp42.com"] [uri "/.git/config"] [unique_id "apcb7-GFXPcVNl6o_IpIFwAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:19:19
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:19:13.129055 2026] [security2:error] [pid 8244:tid 8244] [client 35.231.167.196:6452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "consultnv.com"] [uri "/.git/config"] [unique_id "apamoRiGW0xWLpyeisOc0AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
ketovoila.pl
2026-09-01 07:59:08
(22 hours ago)
ketovoila.pl web app secret/repository scan: hits=1; unique_paths=1; sample_paths=/.git/config; UA=" ...
show more
ketovoila.pl web app secret/repository scan: hits=1; unique_paths=1; sample_paths=/.git/config; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"; window=2026-09-01T07:59:08Z..2026-09-01T07:59:08Z HTTP methods: GET (1).
show less
Bad Web Bot
Web App Attack
2026-08-31 20:41:20
(1 day ago)
35.231.167.196 - - [01/Sep/2026:04:41:20 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ...
show more
35.231.167.196 - - [01/Sep/2026:04:41:20 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 19:18:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 15:18:21.227418 2026] [security2:error] [pid 26089:tid 26089] [client 35.231.167.196:36526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "worshipconcert.com"] [uri "/.git/config"] [unique_id "apXTfZb9noptwJCUPT3oYwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-31 17:05:21
(1 day ago)
Abuse Detected (20)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 16:35:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 12:35:02.725473 2026] [security2:error] [pid 19218:tid 19218] [client 35.231.167.196:57326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spiritcountry.cc"] [uri "/.git/config"] [unique_id "apWtNr5aMXBa1KCQfv5zNgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 16:08:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 12:08:36.849995 2026] [security2:error] [pid 15498:tid 15498] [client 35.231.167.196:16782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shaunthomas.com"] [uri "/.git/config"] [unique_id "apWnBCPun3zh-XMqxkF49QAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 15:14:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 11:14:11.556220 2026] [security2:error] [pid 4189135:tid 4189139] [client 35.231.167.196:43344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "promoralchoice.org"] [uri "/.git/config"] [unique_id "apWaQ4qG1gcln32l1KoolwAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 13:48:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:48:51.906718 2026] [security2:error] [pid 8982:tid 8982] [client 35.231.167.196:55456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nidusmbt.com"] [uri "/.git/config"] [unique_id "apWGQ5Q3sDnWgk2rrIf23wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 08:59:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 04:59:09.755314 2026] [security2:error] [pid 4752:tid 4752] [client 35.231.167.196:55204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sekizinci.com"] [uri "/.git/config"] [unique_id "apVCXc44LsMzCUnUNZPfeAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 06:14:06
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:14:00.957088 2026] [security2:error] [pid 22455:tid 22455] [client 35.231.167.196:20654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oxford-gliding-club.co.uk"] [uri "/.git/config"] [unique_id "apUbqCFuFAOVBhBeehQQSAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-08-31 02:30:02
(2 days ago)
Automated security scanning detected: Git Repository Config Exposure. Systematic reconnaissance usin ...
show more
Automated security scanning detected: Git Repository Config Exposure. Systematic reconnaissance using automated tools.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 01:46:55
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.167.196 (196.167.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 21:46:49.614885 2026] [security2:error] [pid 4697:tid 4697] [client 35.231.167.196:31022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dawnmazur.com"] [uri "/.git/config"] [unique_id "apTdCSYu6WuSqvfavwJJfQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack