🇺🇸
TPI-Abuse
2026-09-06 19:50:07
(27 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.252.53.222 (222.53.252.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.53.222 (222.53.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 15:50:03.707551 2026] [security2:error] [pid 16825:tid 16825] [client 35.252.53.222:48192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thespotfurniture.trademartghana.com"] [uri "/.git/config"] [unique_id "ap3D67hRqrGwUStih04eaAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-09-06 18:50:07
(1 hour ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-06 18:44:41
(1 hour ago)
35.252.53.222 - - [06/Sep/2026:20:44:37 +0200] "GET /.env.example HTTP/1.1" 404 520 "-" "Mozilla/5.0 ...
show more
35.252.53.222 - - [06/Sep/2026:20:44:37 +0200] "GET /.env.example HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.252.53.222 - - [06/Sep/2026:20:44:37 +0200] "GET /.env.dev HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.252.53.222 - - [06/Sep/2026:20:44:37 +0200] "GET /.env.prod HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.252.53.222 - - [06/Sep/2026:20:44:38 +0200] "GET /.env.stage HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.252.53.222 - - [06/Sep/2026:20:44:38 +0200] "GET /.env.ci HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome
show less
Web App Attack
Hacking
🇩🇪
Lino Project
2026-09-06 17:36:07
(2 hours ago)
35.252.53.222 - - [06/Sep/2026:19:36:06 +0200] "GET /.git/config HTTP/1.1" 403 424 "-" "Mozilla/5.0 ...
show more
35.252.53.222 - - [06/Sep/2026:19:36:06 +0200] "GET /.git/config HTTP/1.1" 403 424 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-06 17:20:03
(2 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 15:46:15
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.252.53.222 (222.53.252.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.53.222 (222.53.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 11:46:08.864683 2026] [security2:error] [pid 5887:tid 5887] [client 35.252.53.222:42506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thesiteworks.windisfun.com"] [uri "/.git/config"] [unique_id "ap2KwKdqsoM6YSzuexqK5gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-09-06 15:25:04
(4 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-09-06 15:09:33
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.252.53.222 (222.53.252.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.53.222 (222.53.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 11:09:29.097984 2026] [security2:error] [pid 31702:tid 31702] [client 35.252.53.222:41072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thesilverlegion.org.theknowledgemaster.com"] [uri "/.git/config"] [unique_id "ap2CKQ6JGGTX5eXRYQTkzAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack