🇺🇸
IndigoRidge
2026-11-04 00:28:43
UTC ·
(1 week ago)
35.200.140.52 - - [03/Nov/2026:19:28:29 -0500] "GET /.git/config HTTP/1.1" 404 6529 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.200.140.52 - - [03/Nov/2026:19:28:30 -0 ...
show more
35.200.140.52 - - [03/Nov/2026:19:28:29 -0500] "GET /.git/config HTTP/1.1" 404 6529 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.200.140.52 - - [03/Nov/2026:19:28:30 -0500] "GET /.env HTTP/1.1" 500 6114 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.200.140.52 - - [03/Nov/2026:19:28:42 -0500] "GET /app/.env HTTP/1.1" 404 6529 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 23:23:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.200.140.52 (52.140.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:23:50.489539 2026] [security2:error] [pid 32142:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.140.52 (52.140.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:23:50.489539 2026] [security2:error] [pid 32142:tid 32142] [client 35.200.140.52:57702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "katemcleod.net"] [uri "/.git/config"] [unique_id "auptBoMeFuzkyPoJMILhMQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-03 22:59:31
UTC ·
(1 week ago)
Auto-ban: >3000 req/min op 2026-11-03
Web App Attack
SSH
Hacking
🇳🇱
ams_sec_user
2026-11-03 19:05:34
UTC ·
(1 week ago)
Automated requests against a hosted website: 139 requests between 18:00 and 18:59 UTC; 136 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.git/config). Reported automatically.
Hacking
Bad Web Bot
Web App Attack
2026-11-03 12:09:27
UTC ·
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-11-03 06:27:48
UTC ·
(1 week ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 04:10:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.200.140.52 (52.140.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:10:51.595180 2026] [security2:error] [pid 15241:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.140.52 (52.140.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:10:51.595180 2026] [security2:error] [pid 15241:tid 15241] [client 35.200.140.52:38212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konstantiasofokleous.com"] [uri "/.git/config"] [unique_id "auleyydiMr1MyjjnXDC2cgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 23:24:21
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-11-02 22:34:30
UTC ·
(1 week ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
2026-11-02 20:42:05
UTC ·
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
j-tap
2026-11-02 19:41:03
UTC ·
(1 week ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 10:34:43
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.200.140.52 (52.140.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:34:38.213906 2026] [security2:error] [pid 12301:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.140.52 (52.140.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:34:38.213906 2026] [security2:error] [pid 12301:tid 12301] [client 35.200.140.52:44958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kochcreative.com"] [uri "/.git/config"] [unique_id "auhnPgrDrF7YzLZlsMje3QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
helios.live
2026-11-02 09:46:40
UTC ·
(1 week ago)
2026/11/02 09:46:37 [error] 1997612#1997612: *1207446 access forbidden by rule, client: 35.200.140.52, server: kocervpn.com, request: "GET /.git/config HTTP/1.1", host: "kocervpn.com"
2026/11/02 09:46:39 [error] 1997612#1997612: *1207446 access forbi ...
show more
2026/11/02 09:46:37 [error] 1997612#1997612: *1207446 access forbidden by rule, client: 35.200.140.52, server: kocervpn.com, request: "GET /.git/config HTTP/1.1", host: "kocervpn.com"
2026/11/02 09:46:39 [error] 1997612#1997612: *1207446 access forbidden by rule, client: 35.200.140.52, server: kocervpn.com, request: "GET /.env HTTP/1.1", host: "kocervpn.com"
2026/11/02 09:46:39 [error] 1997612#1997612: *1208028 access forbidden by rule, client: 35.200.140.52, server: kocervpn.com, request: "GET /.env.local HTTP/1.1", host: "kocervpn.com"
2026/11/02 09:46:39 [error] 1997612#1997612: *1207446 access forbidden by rule, client: 35.200.140.52, server: kocervpn.com, request: "GET /.env.production HTTP/1.1", host: "kocervpn.com"
2026/11/02 09:46:40 [error] 1997612#1997612: *1207446 access forbidden by rule, client: 35.200.140.52, server: kocervpn.com, request: "GET /.env.staging HTTP/1.1", host: "kocervpn.com"
...
show less
Web App Attack
2026-11-02 09:40:13
UTC ·
(1 week ago)
| [Dangerous/India] Aggressive IP 35.200.140.52 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
