🇩🇪
raph
2026-09-05 01:59:30
(2 weeks ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-05 01:49:30
(2 weeks ago)
156 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇳🇱
sernate
2026-09-04 22:46:51
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (TW/Taiwan/163.148.194.35.bc.goo ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (TW/Taiwan/163.148.194.35.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-09-04 21:54:31
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (163.148.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (163.148.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 17:54:26.079454 2026] [security2:error] [pid 1669059:tid 1669059] [client 35.194.148.163:48768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.portfolio-realestate.com"] [uri "/site/.git/config"] [unique_id "aps-EpXKTFANQsuGD6Kl2QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-04 21:04:09
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇿
Antinson
2026-09-04 19:58:16
(2 weeks ago)
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ...
show more
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
show less
Bad Web Bot
🇮🇹
CoreTech srl
2026-09-04 19:53:56
(2 weeks ago)
cloudlinux2 fail2ban: 2026-09-04 21:49:01,461 fail2ban.filter [1594]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-04 21:49:01,461 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 35.194.148.163 - 2026-09-04 21:49:01cloudlinux2 fail2ban: 2026-09-04 21:49:01,488 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 35.194.148.163 - 2026-09-04 21:49:01cloudlinux2 fail2ban: 2026-09-04 21:49:01,474 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 35.194.148.163 - 2026-09-04 21:49:01cloudlinux2 fail2ban: 2026-09-04 21:48:58,705 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 104.28.197.152 - 2026-09-04 21:48:58cloudlinux2 fail2ban: 2026-09-04 21:49:01,444 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 35.194.148.163 - 2026-09-04 21:49:01cloudlinux2 fail2ban: 2026-09-04 21:49:01,521 fail2ban.filter [1594]: INFO [plesk-modsecurity] Found 35.194.148.163 - 2026-09-04 21:49:01cloudlinux2 fail2ban: 2026-09-04 21:49:01,502 fail2ban.filter [1594]: INFO [recidive] Found 35.194.148.163 - 2026-09-04 21:49
show less
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2026-09-04 18:49:25
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇫🇷
Stara
2026-09-04 18:39:17
(2 weeks ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
SSH
Web App Attack
🇦🇺
aranguren.org
2026-09-04 17:03:13
(2 weeks ago)
35.194.148.163 - - [05/Sep/2026:03:03:12 +1000] "GET /src/.git/config HTTP/1.1" 301 285 "-" "crusade ...
show more
35.194.148.163 - - [05/Sep/2026:03:03:12 +1000] "GET /src/.git/config HTTP/1.1" 301 285 "-" "crusader-worker/1.0"
35.194.148.163 - - [05/Sep/2026:03:03:12 +1000] "GET /html/.git/config HTTP/1.1" 301 286 "-" "crusader-worker/1.0"
35.194.148.163 - - [05/Sep/2026:03:03:12 +1000] "GET /wordpress/.git/config HTTP/1.1" 301 291 "-" "crusader-worker/1.0"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 15:52:59
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (163.148.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (163.148.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:52:52.589775 2026] [security2:error] [pid 2122:tid 2122] [client 35.194.148.163:60584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newlifecommunitycare.org"] [uri "/var/www/.git/config"] [unique_id "aprpVKGNoAwX_IGOi7lcnAAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:26:54
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (163.148.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (163.148.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:26:50.464167 2026] [security2:error] [pid 20715:tid 20977] [client 35.194.148.163:38010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "section64.org.wwwhst.com"] [uri "/var/www/.git/config"] [unique_id "apqq-hKoCyJEX5z1mHPs7QAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 05:19:13
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (163.148.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.148.163 (163.148.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 01:19:09.830730 2026] [security2:error] [pid 8627:tid 8627] [client 35.194.148.163:37624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.myemail.navy"] [uri "/htdocs/.git/config"] [unique_id "appUzeCV5shvR5qJWal4TQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
SystemAdmin
2026-09-04 01:41:43
(2 weeks ago)
Doing bad things...
Web App Attack
🇩🇪
raph
2026-09-04 01:41:02
(2 weeks ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack