Anonymous
2026-10-16 14:10:02
(50 minutes ago)
suspicious request in access.log
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 11:53:53
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.224.63.69 (69.63.224.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.224.63.69 (69.63.224.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:53:45.446165 2026] [security2:error] [pid 26786:tid 26818] [client 35.224.63.69:50898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.manage.aafm.us"] [uri "/.git/config"] [unique_id "atIQSQPr2in7HEMKp4mL5gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¨πΏ
UltimWeb
2026-10-16 10:27:43
(4 hours ago)
Fail2ban_apache-auth
Brute-Force
Web App Attack
π³π±
ConsulHosting
2026-10-16 09:24:41
(5 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 08:58:14
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.224.63.69 (69.63.224.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.224.63.69 (69.63.224.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 04:58:10.157759 2026] [security2:error] [pid 26241:tid 26241] [client 35.224.63.69:35970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mamaimhome.andrsn.com"] [uri "/.git/config"] [unique_id "atHnIpT7qzY9mehEeK9vOwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Mangelot Hosting
2026-10-16 08:46:08
(6 hours ago)
(modsec_attack) srv104 ModSecurity attack 35.224.63.69 (US/United States/69.63.224.35.bc.googleuserc ...
show more
(modsec_attack) srv104 ModSecurity attack 35.224.63.69 (US/United States/69.63.224.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
π·π΄
iulianh
2026-10-16 07:53:10
(7 hours ago)
80,443
Brute-Force
SSH
πΊπΈ
TPI-Abuse
2026-10-16 07:22:34
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.224.63.69 (69.63.224.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.224.63.69 (69.63.224.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:22:27.820352 2026] [security2:error] [pid 4599:tid 4599] [client 35.224.63.69:35014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.malta-boat-registration.com.boatregistrationdelaware.com"] [uri "/.git/config"] [unique_id "atHQs1NWxgGANAHnqjGE3AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-16 05:55:09
(9 hours ago)
35.224.63.69 - - [16/Oct/2026:07:55:08 +0200] "GET /.git/config HTTP/1.1" 404 448 "-" "Mozilla/5.0 ( ...
show more
35.224.63.69 - - [16/Oct/2026:07:55:08 +0200] "GET /.git/config HTTP/1.1" 404 448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.224.63.69 - - [16/Oct/2026:07:55:08 +0200] "GET /.git/config HTTP/1.1" 404 252 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.224.63.69 - - [16/Oct/2026:07:55:08 +0200] "GET /.env HTTP/1.1" 404 448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.224.63.69 - - [16/Oct/2026:07:55:08 +0200] "GET /.env HTTP/1.1" 404 252 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.224.63.69 - - [16/Oct/2026:07:55:08 +0200] "GET /.env.local HTTP/1.1" 404 448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0
...
show less
Bad Web Bot
Web App Attack
πΈπͺ
vaia.cloud
2026-10-16 04:55:02
(10 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 04:46:35
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.224.63.69 (69.63.224.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.224.63.69 (69.63.224.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 00:46:30.170744 2026] [security2:error] [pid 14623:tid 14642] [client 35.224.63.69:39696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.maletadelasheras.emehache.net"] [uri "/.git/config"] [unique_id "atGsJl2JqoMxXwQVKN06fAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
FD-IX
2026-10-16 04:24:29
(10 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
π³π±
maxxsense
2026-10-16 04:17:03
(10 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.224.63.69 (US/United States/69.63.22 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.224.63.69 (US/United States/69.63.224.35.bc.googleusercontent.com)
show less
SQL Injection
π©πͺ
altenglaner
2026-10-16 04:15:08
(10 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
π«π·
dynamix
2026-10-16 04:03:45
(10 hours ago)
Multiple WAF Violations
Web App Attack