|
🇩🇪
palla89
|
|
(mod_security) mod_security triggered on hostname [redacted] 35.195.35.39 (BE/Belgium/39.35.195.35.bc.googleusercontent.com)
|
SQL Injection
|
|
Anonymous
|
|
IP matched detection query 50 and more bad rqs apache.
|
Hacking
Bad Web Bot
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.195.35.39 (39.35.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:59:04.714246 2026] [security2:error] [pid 17777:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.35.39 (39.35.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:59:04.714246 2026] [security2:error] [pid 17777:tid 17777] [client 35.195.35.39:47350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "groomattheinn.com"] [uri "/.git/config"] [unique_id "aulN-BDs1J4M04P6n24nCQAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Scanning for secret files (.env, .git, credentials, config backups)
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.195.35.39 - - \[03/Nov/2026:02:12:14 +0100\] "GET /.git/config HTTP/1.1" 404 47479 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.195.35.39 - - \[03/Nov/2026:02:12:14 +0100\] "GET /.git/config HTTP/1.1" 404 47479 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: >3000 req/min op 2026-11-02
|
Web App Attack
SSH
Hacking
|
|
Anonymous
|
|
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force
Web App Attack
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.195.35.39 (39.35.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:59:49.966843 2026] [security2:error] [pid 17588:tid 17 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.35.39 (39.35.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:59:49.966843 2026] [security2:error] [pid 17588:tid 17588] [client 35.195.35.39:39140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "grollman.com"] [uri "/.git/config"] [unique_id "auj5xUiD4ew3JtoPF1cpagAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.195.35.39 (39.35.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:03:46.933399 2026] [security2:error] [pid 27615:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.35.39 (39.35.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:03:46.933399 2026] [security2:error] [pid 27615:tid 27615] [client 35.195.35.39:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gregquinn.com"] [uri "/.git/config"] [unique_id "aujCcljPpTGwBsXxOpVBQgAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.195.35.39 - - [02/Nov/2026:16:46:19 +0100] "GET /.git/config HTTP/1.1" 403 2128 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ...
show more
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.195.35.39 - - [02/Nov/2026:16:46:19 +0100] "GET /.git/config HTTP/1.1" 403 2128 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
big-cloud.nl
|
|
Try to access /groepsuitjedrachten/.git/config
|
Web App Attack
|
|
🇵🇫
www.gregorymariani.com
|
|
|
Web App Attack
|
|
🇳🇱
Savvii
|
|
20 attempts against mh-misbehave-ban on redirect
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.195.35.39 (39.35.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:40:11.276352 2026] [security2:error] [pid 9500:tid 950 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.35.39 (39.35.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:40:11.276352 2026] [security2:error] [pid 9500:tid 9500] [client 35.195.35.39:38520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gregorii.com"] [uri "/.git/config"] [unique_id "auh2m2EJIjlEZxLfyX3yVAAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
