🇺🇸
mnsf
2026-11-04 03:05:14
UTC ·
(2 days ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
2026-11-04 01:04:48
UTC ·
(2 days ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-04 00:36:11
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.237.235.205 (205.235.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:36:04.276383 2026] [security2:error] [pid 7953:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.235.205 (205.235.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:36:04.276383 2026] [security2:error] [pid 7953:tid 7953] [client 35.237.235.205:55370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waleed-alshalan.com"] [uri "/.git/config"] [unique_id "aup99G6zy_s0M-WOPpBXDAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-04 00:20:15
UTC ·
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
Roderic
2026-11-03 19:00:06
UTC ·
(2 days ago)
Insights: web vulnerability probing, 123 requests on 1 site, e.g. /.git/config (as: Browser via Google Cloud)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 18:23:18
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.237.235.205 (205.235.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:23:10.883093 2026] [security2:error] [pid 14712:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.235.205 (205.235.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:23:10.883093 2026] [security2:error] [pid 14712:tid 14712] [client 35.237.235.205:36682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wakims.com"] [uri "/.git/config"] [unique_id "auomjmOBBpvpr5zsN3ulvgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 12:23:57
UTC ·
(3 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
2026-11-03 00:26:49
UTC ·
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-11-02 22:05:20
UTC ·
(3 days ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
🇺🇸
iwle
2026-11-02 16:14:44
UTC ·
(4 days ago)
[Mon Nov 02 11:14:42.967486 2026] [:error] [pid 310558:tid 310670] [client 35.237.235.205:0] [client 35.237.235.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\ ...
show more
[Mon Nov 02 11:14:42.967486 2026] [:error] [pid 310558:tid 310670] [client 35.237.235.205:0] [client 35.237.235.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "autodiscover.iwle.com"] [uri "/.env"] [unique_id "aui28sP7WXZVVsFwaN5tuAAAAJg"]
[Mon Nov 02 11:14:43.044824 2026] [:error] [pid 323614:tid 323646] [client 35.237.235.205:0] [client 35.237.235.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 15:48:19
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.237.235.205 (205.235.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:48:16.114542 2026] [security2:error] [pid 8839:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.235.205 (205.235.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:48:16.114542 2026] [security2:error] [pid 8839:tid 8839] [client 35.237.235.205:37100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.indie100.com"] [uri "/.git/config"] [unique_id "auiwwIVWcEht-qsLX094NQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-02 15:24:53
UTC ·
(4 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇩🇪
XICTRON
2026-11-02 13:55:03
UTC ·
(4 days ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
2026-11-02 10:25:57
UTC ·
(4 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇳🇱
Cloud86 B.V.
2026-07-22 18:00:10
UTC ·
(3 months ago)
categories: Email Spam
Email Spam
