Anonymous
2026-09-27 07:48:32
(22 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐ณ๐ฑ
Alt255
2026-09-26 21:07:54
(1 day ago)
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.197.152.83 - - [26/Sep/2026:23:07:43 +0200] "GET /.git/config HTTP/1.1" 301 530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 16:09:26
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 12:09:21.130929 2026] [security2:error] [pid 30458:tid 30458] [client 35.197.152.83:56152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.roguetechink.com"] [uri "/.git/config"] [unique_id "arfuMdRiNl40CfH-l0HLmAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 15:29:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:29:24.788931 2026] [security2:error] [pid 11585:tid 11585] [client 35.197.152.83:54662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.rogerheath.com"] [uri "/.git/config"] [unique_id "arfk1N8RgJcn8E6pKY1__AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 10:55:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 06:55:04.752407 2026] [security2:error] [pid 18662:tid 18662] [client 35.197.152.83:47600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thomaschemical.com"] [uri "/.git/config"] [unique_id "arekiKjESJL7xjSuxHSygAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-09-26 06:41:46
(1 day ago)
35.197.152.83 - - [26/Sep/2026:08:41:45 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ...
show more
35.197.152.83 - - [26/Sep/2026:08:41:45 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐จ๐ฆ
Anytech
2026-09-25 18:24:10
(2 days ago)
Blocked by ConnMonitor
Web App Attack
Anonymous
2026-09-25 18:23:53
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-25 02:55:18
(3 days ago)
Try to access /.git/config
Web App Attack
๐ณ๐ด
jad-abuse
2026-09-23 20:38:28
(4 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup. Observed by 1 sensor(s); 154 hits.
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-23 07:54:30
(4 days ago)
Excessive 404/403 errors
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-22 03:51:58
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 23:51:50.657058 2026] [security2:error] [pid 29564:tid 29564] [client 35.197.152.83:53378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.russiacoin.info"] [uri "/.git/config"] [unique_id "arH7Vpw1Wh6wZ5khVY1XRwAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 23:22:15
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.152.83 (83.152.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:22:07.679893 2026] [security2:error] [pid 1002:tid 1002] [client 35.197.152.83:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.rodrigoaldecoa.com"] [uri "/.git/config"] [unique_id "arG8Hz94TQykbO7aUSvl2gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Kitki30.com
2026-09-21 01:28:11
(1 week ago)
HTTP Probing (server 3). Log: 35.197.152.83 - - [21/Sep/2026:01:28:10 +0000] "GET /.git/config HTTP/ ...
show more
HTTP Probing (server 3). Log: 35.197.152.83 - - [21/Sep/2026:01:28:10 +0000] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.197.152.83 - - [21/Sep/2026:01:28:11 +0000] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-20 22:02:15
(1 week ago)
Auto-ban: >3000 req/min op 2026-09-20
Web App Attack
SSH
Hacking