๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 21:59:42
(6 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 16:30:40
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:30:34.877524 2026] [security2:error] [pid 15625:tid 15625] [client 35.202.86.121:44278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "foundintranslation.net"] [uri "/.git/config"] [unique_id "aig_qoJBca6mn7X12dhjJwAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 15:52:25
(12 hours ago)
Reported from Nginx log analysis 16. Log: 35.202.86.121 - - [09/Jun/2026:xx:xx:xx 0200] "GET /.git/ ...
show more
Reported from Nginx log analysis 16. Log: 35.202.86.121 - - [09/Jun/2026:xx:xx:xx 0200] "GET /.git/config HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Android; Linux armv7l; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 Fennec/10.0.1" "-" "US United States Council Bluffs" "AS396982" "Google LLC"
show less
Port Scan
Brute-Force
SSH
๐บ๐ธ
routerjockey
2026-06-09 12:58:03
(15 hours ago)
[sensor1] Observed 12 TCP SYN probes in the past 6 hours [Top ports 443/tcp(6x) 80/tcp(6x)]
Port Scan
๐ง๐ช
cmbplf
2026-06-09 10:04:33
(18 hours ago)
12.125 requests in 1 hour (2mos3w6d)
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-09 09:50:06
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:49:57.027144 2026] [security2:error] [pid 25743:tid 25743] [client 35.202.86.121:48230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.nowdigitaltalent.com"] [uri "/.git/config"] [unique_id "aifhxaLvj7VPCquRTUp3AQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-09 07:45:41
(20 hours ago)
[TueJun0909:45:38.7886112026][security2:error][pid2575691:tid2575808][client35.202.86.121:0]ModSecur ...
show more
[TueJun0909:45:38.7886112026][security2:error][pid2575691:tid2575808][client35.202.86.121:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.buletti-panettoni.ch\"][uri\"/.git/config\"][unique_id\"aifEoua0HLIJCppIdckecwAAAIM\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ณ๐ฟ
Antinson
2026-06-09 06:46:08
(21 hours ago)
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ...
show more
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-09 06:36:06
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:36:01.453939 2026] [security2:error] [pid 21334:tid 21334] [client 35.202.86.121:47040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emails.pawzy.app"] [uri "/.git/config"] [unique_id "aie0UaZnv2VBDDU6vP8zSgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:56:05
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:55:59.754053 2026] [security2:error] [pid 26633:tid 26633] [client 35.202.86.121:37012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centuryabsinthe.justjunglejuice.org"] [uri "/.git/config"] [unique_id "aieq78dgRgZ3SOn915pcYAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 04:36:44
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:36:38.941849 2026] [security2:error] [pid 16159:tid 16159] [client 35.202.86.121:34244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.nexti.com.hk"] [uri "/.git/config"] [unique_id "aieYVuxRNSaj0qgUIA27GwAAAHM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-06-09 02:08:12
(1 day ago)
35.202.86.121 - - [09/Jun/2026:04:08:11 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ...
show more
35.202.86.121 - - [09/Jun/2026:04:08:11 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 01:26:26
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:26:18.255408 2026] [security2:error] [pid 19955:tid 19955] [client 35.202.86.121:38600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "privateshoretour.com"] [uri "/.git/config"] [unique_id "aidrutATg2Sf46gCIy8jzgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-08 21:59:46
(1 day ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-08 18:33:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.202.86.121 (121.86.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 14:33:40.791362 2026] [security2:error] [pid 17236:tid 17236] [client 35.202.86.121:51722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glolady.com"] [uri "/.git/config"] [unique_id "aicLBGGkM0svsf4SU3Bo9AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack