🇸🇮
administrator
2026-06-10 22:17:45
(2 days ago)
2026-06-08 21:19:51,746 fail2ban.actions [1104]: NOTICE [apache-badbots] Ban 35.189.216.192
...
show more
2026-06-08 21:19:51,746 fail2ban.actions [1104]: NOTICE [apache-badbots] Ban 35.189.216.192
2026-06-10 00:08:59,923 fail2ban.actions [1080]: NOTICE [apache-badbots] Ban 35.189.216.192
2026-06-08 21:19:51,746 fail2ban.actions [1104]: NOTICE [apache-badbots] Ban 35.189.216.192
2026-06-10 00:08:59,923 fail2ban.actions [1080]: NOTICE [apache-badbots] Ban 35.189.216.192
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-09 22:01:57
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
🇫🇷
masterguru
2026-06-09 14:07:42
(3 days ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.189.216.192 (BE/Belgium/192.216.18 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.189.216.192 (BE/Belgium/192.216.189.35.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
2026-06-09 14:06:08
(3 days ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 13:53:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:53:52.528330 2026] [security2:error] [pid 23572:tid 23572] [client 35.189.216.192:50520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yaufung.naturev.net"] [uri "/.git/config"] [unique_id "aiga8LiBgZtj9iaVlTix_QAAAFk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-09 13:51:34
(3 days ago)
[TueJun0915:51:29.0011482026][security2:error][pid1344526:tid1344786][client35.189.216.192:0]ModSecu ...
show more
[TueJun0915:51:29.0011482026][security2:error][pid1344526:tid1344786][client35.189.216.192:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"serverprivato.ch\"][uri\"/.git/config\"][unique_id\"aigaYXqTbnB4Bo0hfDe0SgAAARY\"]
show less
Hacking
Web App Attack
🇩🇪
louis77
2026-06-09 13:06:53
(3 days ago)
Sensitive file access attempt - Path: /.git/config, Method: GET, UA: Opera/9.80 (X11; FreeBSD 8.1-RE ...
show more
Sensitive file access attempt - Path: /.git/config, Method: GET, UA: Opera/9.80 (X11; FreeBSD 8.1-RELEASE i386; Edition Next) Presto/2.12.388 Version/12.10
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-09 12:23:39
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:23:32.453411 2026] [security2:error] [pid 6963:tid 6963] [client 35.189.216.192:49620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cbcconsult.com"] [uri "/.git/config"] [unique_id "aigFxAPKTgZDl06NWoUDjAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 11:36:39
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:36:31.692530 2026] [security2:error] [pid 8178:tid 8178] [client 35.189.216.192:36658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ecoventionsusa.com.salsberggroup.com"] [uri "/.git/config"] [unique_id "aif6v8FeTqhc15gTmRAS2gAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 11:04:48
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:04:44.541007 2026] [security2:error] [pid 12909:tid 12930] [client 35.189.216.192:57100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thestoryofmyvoice.com"] [uri "/.git/config"] [unique_id "aifzTG-oDxsrqFWOVwELZAAAAFM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-06-09 06:08:17
(3 days ago)
Accessed trap at '/.git/config'
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 05:45:04
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:44:55.767308 2026] [security2:error] [pid 29861:tid 29872] [client 35.189.216.192:38972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "progenicyte.net"] [uri "/.git/config"] [unique_id "aieoV7CXHnSxvu1csWlryQAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
thedreamer.nl
2026-06-09 05:19:34
(3 days ago)
35.189.216.192 - - [09/Jun/2026:07:14:04 +0200] "GET /.git/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Wind ...
show more
35.189.216.192 - - [09/Jun/2026:07:14:04 +0200] "GET /.git/ HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" "BE" "Brussels" "50.85340" "4.34700"
35.189.216.192 - - [09/Jun/2026:07:14:04 +0200] "GET /.git/hooks/post-commit.sample HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" "BE" "Brussels" "50.85340" "4.34700"
35.189.216.192 - - [09/Jun/2026:07:14:04 +0200] "GET /.git/COMMIT_EDITMSG HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" "BE" "Brussels" "50.85340" "4.34700"
35.189.216.192 - - [09/Jun/2026:07:14:04 +0200] "GET /.git/hooks/post-receive.sample HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0" "BE" "Brussels" "50.85340" "4.34700"
...
show less
Brute-Force
Bad Web Bot
🇱🇻
garmtech.com
2026-06-09 03:58:36
(3 days ago)
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ...
show more
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:28:19
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:949110) triggered by 35.189.216.192 (192.216.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:28:15.270738 2026] [security2:error] [pid 28856:tid 28856] [client 35.189.216.192:35262] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "armstrongenv.com"] [uri "/.git/config"] [unique_id "aieIT8fDo4OcWuD88Lk-8AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack