Anonymous
2026-10-14 17:37:18
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฉ๐ช
wassita
2026-10-14 17:14:36
(2 days ago)
automated scan probing for sensitive/config files โ requested path: /.git/config โ response: 404
Bad Web Bot
Web App Attack
๐ง๐ท
ICS Labs
2026-10-14 15:20:35
(2 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-14 UTC.
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-14 09:10:54
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.240.211.170 (170.211.240.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.211.170 (170.211.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 05:10:49.845709 2026] [security2:error] [pid 15555:tid 15555] [client 35.240.211.170:47470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arabou.co"] [uri "/.git/config"] [unique_id "as9HGal8yGpupoNz0XePYAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-14 06:20:03
(2 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-10-14 06:06:49
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-14 05:54:43
(2 days ago)
35.240.211.170 - - [14/Oct/2026:07:54:38 +0200] "POST / HTTP/1.1" 200 7765 "-" "Mozilla/5.0 (Macinto ...
show more
35.240.211.170 - - [14/Oct/2026:07:54:38 +0200] "POST / HTTP/1.1" 200 7765 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.240.211.170 - - [14/Oct/2026:07:54:39 +0200] "GET /.git/config HTTP/1.1" 403 524 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.240.211.170 - - [14/Oct/2026:07:54:39 +0200] "POST / HTTP/1.1" 200 7765 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.240.211.170 - - [14/Oct/2026:07:54:39 +0200] "GET /.env HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.240.211.170 - - [14/Oct/2026:07:54:39 +0200] "GET /.env.local HTTP/1.1" 404 521 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 S
show less
Web App Attack
Hacking
๐บ๐ธ
interbiznw.com
2026-10-14 00:09:23
(2 days ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
Anonymous
2026-10-13 19:25:27
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-15 22:22:08
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.240.211.170 (170.211.240.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.211.170 (170.211.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:22:04.276339 2026] [security2:error] [pid 30721:tid 30721] [client 35.240.211.170:55252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "97films.media"] [uri "/.git/config"] [unique_id "aqnFDLpGunlXSl8oLkLx6wAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-15 17:54:12
(1 month ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-15 16:22:36
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 12:42:40
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.240.211.170 (170.211.240.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.211.170 (170.211.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 08:42:32.230080 2026] [security2:error] [pid 29245:tid 29245] [client 35.240.211.170:41644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corangues.com"] [uri "/.git/config"] [unique_id "aqk9OFFAHdV7xEtUSNBLYAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 07:29:00
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.240.211.170 (170.211.240.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.211.170 (170.211.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:28:55.510872 2026] [security2:error] [pid 25326:tid 25326] [client 35.240.211.170:57078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coralseasbeach.com"] [uri "/.git/config"] [unique_id "aqjzt00I3f4vpK8p08OzpgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-15 06:45:04
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack