๐ฉ๐ช
yvoictra
2026-09-29 12:36:02
(2 weeks ago)
Bloqueado automรกticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 14:07:39
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 10:07:33.517712 2026] [security2:error] [pid 20617:tid 20617] [client 35.204.118.162:59872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eworld-media.com"] [uri "/.git/config"] [unique_id "arp0pVJbOSgCAkdgV0ooXwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-09-28 08:08:00
(2 weeks ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,ice02,wa01]
Hacking
SQL Injection
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-09-28 07:07:02
(2 weeks ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [wa02]
Hacking
SQL Injection
Web App Attack
Anonymous
2026-09-26 22:19:28
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ณ๐ด
jad-abuse
2026-09-25 02:02:03
(2 weeks ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup, server_status, wp_admin. Observed by 1 sensor(s); 469 hits.
show less
Brute-Force
Web App Attack
๐ฆ๐บ
rubixstudios
2026-09-25 00:30:03
(2 weeks ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-09-24 22:25:02
(2 weeks ago)
Brute-Force
Web App Attack
๐ฉ๐ช
macrob
2026-09-24 18:47:45
(2 weeks ago)
2026/09/24 18:47:44 [error] 2590221#2590221: *32685633 access forbidden by rule, client: 35.204.118. ...
show more
2026/09/24 18:47:44 [error] 2590221#2590221: *32685633 access forbidden by rule, client: 35.204.118.162, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "mail.pitup.org"
2026/09/24 18:47:44 [error] 2590221#2590221: *32685636 access forbidden by rule, client: 35.204.118.162, server: fn.binixo.es, request: "GET /.env HTTP/2.0", host: "mail.pitup.org"
2026/09/24 18:47:44 [error] 2590221#2590221: *32685637 access forbidden by rule, client: 35.204.118.162, server: fn.binixo.es, request: "GET /.env.local HTTP/2.0", host: "mail.pitup.org"
...
show less
Web App Attack
๐ฉ๐ช
Marc
2026-09-24 13:03:33
(2 weeks ago)
35.204.118.162 - - [24/Sep/2026:15:03:32 +0200] "GET /.git/config HTTP/1.1" 404 705 "-" "Mozilla/5.0 ...
show more
35.204.118.162 - - [24/Sep/2026:15:03:32 +0200] "GET /.git/config HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.204.118.162 - - [24/Sep/2026:15:03:33 +0200] "GET /.env HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.204.118.162 - - [24/Sep/2026:15:03:33 +0200] "GET /.env.local HTTP/1.1" 404 705 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-24 03:40:16
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 23:40:12.461460 2026] [security2:error] [pid 6333:tid 6333] [client 35.204.118.162:52268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ileronde.com"] [uri "/.git/config"] [unique_id "arSbnPTc7EzChTVPz-VdswAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
pscriptos
2026-09-21 14:16:09
(3 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-21 08:26:35
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 04:26:26.421348 2026] [security2:error] [pid 25710:tid 25710] [client 35.204.118.162:40526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "members.15tobefit.com"] [uri "/.git/config"] [unique_id "arDqMubvYNylII-dzyc4FgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 02:45:12
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 22:45:05.191905 2026] [security2:error] [pid 21199:tid 21199] [client 35.204.118.162:50582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.regal.tr"] [uri "/.git/config"] [unique_id "arCaMaMit2AH1pigPgZH4QAAAD4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 00:01:44
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.118.162 (162.118.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 20:01:35.928593 2026] [security2:error] [pid 30460:tid 30460] [client 35.204.118.162:33330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.redtailpaddle.com"] [uri "/.git/config"] [unique_id "arBz3w4gFtwxjYDsfBzzpAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack