๐ณ๐ฑ
homeshowdomain.nl
2026-10-16 22:00:26
(7 hours ago)
Auto-ban: >3000 req/min op 2026-10-16
Web App Attack
SSH
Hacking
๐ฉ๐ช
lolyay
2026-10-16 16:34:10
(12 hours ago)
35.189.72.44 - - [16/Oct/2026:16:34:08 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Wi ...
show more
35.189.72.44 - - [16/Oct/2026:16:34:08 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.189.72.44 - - [16/Oct/2026:16:34:09 +0000] "GET /.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
๐ฆ๐บ
screwlooseit.com.au
2026-10-16 15:24:03
(14 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/44.72.189.35.bc.googleusercontent ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/44.72.189.35.bc.googleusercontent.com
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 15:07:57
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:07:51.827173 2026] [security2:error] [pid 13884:tid 13884] [client 35.189.72.44:55530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.customhumanrobots.internetnameregistration.com"] [uri "/.git/config"] [unique_id "atI9x3NNcjuCMwEDcVNLCQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 14:11:07
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:11:01.392663 2026] [security2:error] [pid 9454:tid 9454] [client 35.189.72.44:57618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.customdatasolutions.net.pjvcds.com"] [uri "/.git/config"] [unique_id "atIwdVQS9y_4JS_IIKCJ2QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 12:19:44
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:19:38.575614 2026] [security2:error] [pid 15615:tid 15615] [client 35.189.72.44:39492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.curts.net.greighhouse.com"] [uri "/.git/config"] [unique_id "atIWWvEupnMj-40G95BcgAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 11:25:20
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:25:13.025130 2026] [security2:error] [pid 2049:tid 2049] [client 35.189.72.44:56880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cursos.logosformacion.net"] [uri "/.git/config"] [unique_id "atIJmemGE9ghTWAPJsCZYwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 10:54:35
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:54:29.020146 2026] [security2:error] [pid 23600:tid 23600] [client 35.189.72.44:45814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cursoastrologia.verdadesreales.com"] [uri "/.git/config"] [unique_id "atICZUGHc7vib_8fPMeh-gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-16 10:19:43
(19 hours ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-16 10:19:29
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:19:25.880962 2026] [security2:error] [pid 10344:tid 10344] [client 35.189.72.44:55266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.curriculum-web.com.creartest.com"] [uri "/.git/config"] [unique_id "atH6LZv3roB5OjKoYKtxiwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 09:53:40
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:53:34.204752 2026] [security2:error] [pid 22755:tid 22755] [client 35.189.72.44:44234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.currency.ic1.biz"] [uri "/.git/config"] [unique_id "atH0Hm-GMVmR7uyT3sQcXgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-16 09:32:50
(19 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 09:12:10
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.72.44 (44.72.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:12:04.342190 2026] [security2:error] [pid 24005:tid 24005] [client 35.189.72.44:53308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.curiousnarwhal.gregorii.com"] [uri "/.git/config"] [unique_id "atHqZAcYlK-3THM40GjUUQAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-16 08:35:01
(20 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-16 08:05:25
(21 hours ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.189.72.44 - - [16/Oct/2026:10:05:13 +0200] "GET /.git/config HTTP/1.1" 301 520 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack