🇺🇸
ANTI SCANNER
2026-09-02 14:53:56
(6 hours ago)
Scanner : /src/.git/config
Web Spam
🇺🇸
TPI-Abuse
2026-09-02 13:08:10
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 09:08:06.198714 2026] [security2:error] [pid 15118:tid 15118] [client 35.196.58.98:60114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lasvegaskiss.com"] [uri "/src/.git/config"] [unique_id "apgftoM2JnwMIIkdl--gDwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 10:13:32
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 06:13:25.143699 2026] [security2:error] [pid 19798:tid 19798] [client 35.196.58.98:51914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reelfruits.com"] [uri "/html/.git/config"] [unique_id "apf2xZHwkPsjlF6qlFB8rgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 08:12:13
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 04:12:08.941118 2026] [security2:error] [pid 6967:tid 6967] [client 35.196.58.98:51168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocketbattle.org"] [uri "/.git/config"] [unique_id "apfaWHFGu_zqUwpcdjOgEQAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 06:42:00
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:41:51.569892 2026] [security2:error] [pid 2990:tid 2990] [client 35.196.58.98:37410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roy-s.net"] [uri "/htdocs/.git/config"] [unique_id "apfFLwHaCaqhfQS2z9fK6gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-09-02 06:16:58
(15 hours ago)
GET /.git/config (Tarpitted for 2m12s, wasted 7.85kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 06:10:46
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:10:39.783316 2026] [security2:error] [pid 31156:tid 31156] [client 35.196.58.98:58132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.m2oblivion.com"] [uri "/www/.git/config"] [unique_id "ape9374dTsc52Itueqt1ogAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:41:33
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:41:29.922806 2026] [security2:error] [pid 5207:tid 5207] [client 35.196.58.98:50846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.yellowbrickfoundation.com"] [uri "/.git/config"] [unique_id "ape3CUdvuKTHUA7jZqmXmwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-02 04:46:17
(17 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 04:38:23
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.58.98 (98.58.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:38:18.114289 2026] [security2:error] [pid 6499:tid 6499] [client 35.196.58.98:42630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.salazartransfers.com"] [uri "/public/.git/config"] [unique_id "apeoOlvueK7l1MUjt8nBHwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-02 03:52:18
(17 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
lavnet.net
2026-09-02 01:12:45
(20 hours ago)
35.196.58.98 - - [02/Sep/2026:01:12:45 +0000] "GET /public/.git/config HTTP/1.1" 404 6088 "-" "crusa ...
show more
35.196.58.98 - - [02/Sep/2026:01:12:45 +0000] "GET /public/.git/config HTTP/1.1" 404 6088 "-" "crusader-worker/1.0"
35.196.58.98 - - [02/Sep/2026:01:12:45 +0000] "GET /api/.git/config HTTP/1.1" 404 6089 "-" "crusader-worker/1.0"
35.196.58.98 - - [02/Sep/2026:01:12:45 +0000] "GET /htdocs/.git/config HTTP/1.1" 404 6088 "-" "crusader-worker/1.0"
35.196.58.98 - - [02/Sep/2026:01:12:45 +0000] "GET /src/.git/config HTTP/1.1" 404 6089 "-" "crusader-worker/1.0"
35.196.58.98 - - [02/Sep/2026:01:12:45 +0000] "GET /site/.git/config HTTP/1.1" 404 6088 "-" "crusader-worker/1.0"
35.196.58.98 - - [02/Sep/2026:01:12:45 +0000] "GET /www/.git/config HTTP/1.1" 404 6089 "-" "crusader-worker/1.0"
...
show less
Brute-Force
🇫🇷
masterguru
2026-09-02 01:03:58
(20 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.196.58.98 (US/United States/98.58. ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.196.58.98 (US/United States/98.58.196.35.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
Hacking
🇷🇴
iulianh
2026-09-01 20:57:11
(1 day ago)
80,443
Brute-Force
SSH
2026-09-01 20:11:35
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking