🇺🇸
TPI-Abuse
2026-09-01 10:03:03
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.233.154.165 (165.154.233.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.154.165 (165.154.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:02:57.526627 2026] [security2:error] [pid 11361:tid 11361] [client 35.233.154.165:57146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.evolute.io"] [uri "/site/.git/config"] [unique_id "apai0Y4iotDBlB21oAw7FgAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-01 08:52:26
(7 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.233.154.165 (US/United States/165.154.233.35 ...
show more
(mod_security) mod_security (id:949110) triggered by 35.233.154.165 (US/United States/165.154.233.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇩🇪
FD-IX
2026-09-01 07:19:42
(8 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
2026-09-01 05:00:02
(11 hours ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 01:55:00
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.233.154.165 (165.154.233.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.154.165 (165.154.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 21:54:57.073843 2026] [security2:error] [pid 25675:tid 25675] [client 35.233.154.165:58568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mothersdaybouquet.net"] [uri "/backend/.git/config"] [unique_id "apYwcWq-ntxEd2IzpsedPQAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-31 16:32:42
(23 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-08-30 16:11:12
(2 days ago)
[Sun Aug 30 16:11:11.167226 2026] [proxy_fcgi:error] [pid 405692:tid 123853669906112] [client 35.233 ...
show more
[Sun Aug 30 16:11:11.167226 2026] [proxy_fcgi:error] [pid 405692:tid 123853669906112] [client 35.233.154.165:56214] AH01071: Got error 'Primary script unknown'
[Sun Aug 30 16:11:11.221711 2026] [proxy_fcgi:error] [pid 405692:tid 123853669906112] [client 35.233.154.165:56140] AH01071: Got error 'Primary script unknown'
[Sun Aug 30 16:11:11.260355 2026] [proxy_fcgi:error] [pid 386435:tid 123854777218752] [client 35.233.154.165:55994] AH01071: Got error 'Primary script unknown'
...
show less
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-30 01:05:52
(2 days ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇩🇪
Philister11
2026-08-30 00:08:06
(2 days ago)
CrowdSec: crowdsecurity/http-probing (US/AS396982)
Web App Attack
Hacking
🇺🇸
mnsf
2026-08-30 00:05:37
(2 days ago)
Abuse Detected (4)
Brute-Force
Web App Attack
🇸🇪
konseptit
2026-08-29 23:56:38
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.233.154.165 (US/United States/165.15 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.233.154.165 (US/United States/165.154.233.35.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
FeG Deutschland
2026-08-29 23:46:43
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 23:12:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.233.154.165 (165.154.233.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.154.165 (165.154.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 19:12:11.495882 2026] [security2:error] [pid 21396:tid 21396] [client 35.233.154.165:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.forsaleincr.com"] [uri "/public/.git/config"] [unique_id "apNnS78J1JuW6OXAMn5TyQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 22:17:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.233.154.165 (165.154.233.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.233.154.165 (165.154.233.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 18:17:32.770025 2026] [security2:error] [pid 27808:tid 27808] [client 35.233.154.165:50152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "conversationtalentnetwork.com"] [uri "/site/.git/config"] [unique_id "apNafEfKiUiZ-cPcarX04AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-28 22:01:32
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
show less
Web App Attack
SSH
Hacking