|
๐ฉ๐ช
LRob
|
|
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
|
Hacking
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.229.210.67 (67.210.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:48:49.232826 2026] [security2:error] [pid 5606:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.210.67 (67.210.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:48:49.232826 2026] [security2:error] [pid 5606:tid 5606] [client 35.229.210.67:42124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.frankweyer.com"] [uri "/.git/config"] [unique_id "arfpYRn-JismIRsEwcJHRgAAABI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.229.210.67 (67.210.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:30:21.208534 2026] [security2:error] [pid 4581:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.210.67 (67.210.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:30:21.208534 2026] [security2:error] [pid 4581:tid 4581] [client 35.229.210.67:36260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.franknash.com"] [uri "/.git/config"] [unique_id "arflDcY83KkLwpxLsD471wAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.229.210.67 (67.210.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:01:04.513415 2026] [security2:error] [pid 25782:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.210.67 (67.210.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:01:04.513415 2026] [security2:error] [pid 25782:tid 25782] [client 35.229.210.67:48994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.frank-klimas.com"] [uri "/.git/config"] [unique_id "arfeMJVEOaezfE9xv5b7TwAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ฉ๐ช
MBombeck
|
|
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
|
Web App Attack
|
|
๐ซ๐ท
dwmp
|
|
[20/Sep/2026:20:38:47.976498 +0200] arAoNz2dgqw4_XRMQ1-gNgAAAEQ 35.229.210.67 49580 38.242.227.117 7081
[20/Sep/2026:20:38:49.101622 +0200] arAoOdTNO5ESyyyAHkOe5gAAANU 35.229.210.67 49594 38.242.227.117 7081
[20/Sep/2026:20:38:49.332389 +0200] arAoOT ...
show more
[20/Sep/2026:20:38:47.976498 +0200] arAoNz2dgqw4_XRMQ1-gNgAAAEQ 35.229.210.67 49580 38.242.227.117 7081
[20/Sep/2026:20:38:49.101622 +0200] arAoOdTNO5ESyyyAHkOe5gAAANU 35.229.210.67 49594 38.242.227.117 7081
[20/Sep/2026:20:38:49.332389 +0200] arAoOT2dgqw4_XRMQ1-gNwAAAEg 35.229.210.67 49604 38.242.227.117 7081
...
show less
|
Brute-Force
SSH
|
|
๐ธ๐ช
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
๐ฎ๐ณ
Starburst SysOp Team
|
|
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-bom2-2)
|
Hacking
|
|
Anonymous
|
|
| [Dangerous/Taiwan] Aggressive IP 35.229.210.67 (~30 hits). Type: DoS Defender- Web server 400 error code
|
Web App Attack
Hacking
SQL Injection
|