|
🇵🇰
sbk97 (https://sayor.net)
|
|
SAYOR honeypot: observed attack /firebase-key.json
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.214.72.115 (115.72.214.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 16:56:31.184109 2026] [security2:error] [pid 16496:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.214.72.115 (115.72.214.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 16:56:31.184109 2026] [security2:error] [pid 16496:tid 16496] [client 35.214.72.115:52174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sbxyz.net"] [uri "/.git/config"] [unique_id "as6a_zrshtllIfN7bZ8uBQAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
ger-stg-sifi1
|
|
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
|
Web App Attack
|
|
Anonymous
|
|
Bot / seems abusive / Apache connections: 47
|
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
| [Normal/United Kingdom] Aggressive IP 35.214.72.115 (~350 hits). Type: DoS Defender- Web server 400 error code
|
Web App Attack
Hacking
SQL Injection
|
|
🇩🇪
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
|
Exploited Host
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.214.72.115 (115.72.214.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 10:24:08.269152 2026] [security2:error] [pid 12042:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.214.72.115 (115.72.214.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 10:24:08.269152 2026] [security2:error] [pid 12042:tid 12042] [client 35.214.72.115:60992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sbip.loneoakhoney.com"] [uri "/.git/config"] [unique_id "as4_CEKBRotnvfR5bi_QzgAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
paissangroup
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇧🇪
cmbplf
|
|
3.228 requests with url.path *.env
569 requests with url.path *phpinfo.php
101 requests with url.path *credentials.json
|
Brute-Force
Bad Web Bot
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
🇦🇺
AWW-Admin
|
|
(mod_security) mod_security triggered on hostname [redacted] 35.214.72.115 (GB/United Kingdom/115.72.214.35.bc.googleusercontent.com)
|
SQL Injection
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.214.72.115 (115.72.214.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:08:45.113373 2026] [security2:error] [pid 31746:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.214.72.115 (115.72.214.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 17:08:45.113373 2026] [security2:error] [pid 31746:tid 31746] [client 35.214.72.115:55326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saynotoofland.org"] [uri "/.git/config"] [unique_id "as1MXTNzDIL7bH6_WBmTrQAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.214.72.115 - - [12/Oct/2026:22:35:02 +0200] "GET /.git/config HTTP/1.1" 404 31999 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.214.72.115 - - [12/Oct/2026:22:35:02 +0200] "GET /.git/config HTTP/1.1" 404 31999 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.214.72.115 (115.72.214.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 16:28:00.818289 2026] [security2:error] [pid 2598:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.214.72.115 (115.72.214.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 16:28:00.818289 2026] [security2:error] [pid 2598:tid 2598] [client 35.214.72.115:40660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sayhellotometamodernism.com"] [uri "/.git/config"] [unique_id "as1C0CjcKQ2uhDg8M5jjWgAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
