🇳🇱
homeshowdomain.nl
2026-06-09 22:01:42
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-09
Web App Attack
SSH
Hacking
🇫🇷
masterguru
2026-06-09 12:30:01
(1 week ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.244.78.105 (AU/Australia/105.78.24 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.244.78.105 (AU/Australia/105.78.244.35.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-09 12:24:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:24:24.438394 2026] [security2:error] [pid 11507:tid 11507] [client 35.244.78.105:32798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "indoorsfinishing.com"] [uri "/.git/config"] [unique_id "aigF-PpcVY6jNmeSCSOMCwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 11:50:22
(1 week ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇩🇪
big-cloud.nl
2026-06-09 09:40:33
(1 week ago)
Try to access /.git/config
Web App Attack
🇳🇿
Antinson
2026-06-09 08:34:50
(1 week ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇩🇪
IVski
2026-06-09 07:39:09
(1 week ago)
IVski WAF | Sensitive file probe detected - looking for .git
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 07:03:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:02:58.535548 2026] [security2:error] [pid 3695:tid 3695] [client 35.244.78.105:60576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mark-et-ing-1llc.com.nldi.us"] [uri "/.git/config"] [unique_id "aie6ol5SdKSE4vOyixOlmQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
DumaNet
2026-06-09 04:53:00
(1 week ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jun 09. 00:38:32
Source IP: 35.244 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jun 09. 00:38:32
Source IP: 35.244.78.105
Portion of the log(s):
35.244.78.105 - [09/Jun/2026:00:38:31 +0200] "GET /private/.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.0.11) Gecko/2009060215 Firefox/3.0.11 (.NET CLR 3.5.30729)"
35.244.78.105 - [09/Jun/2026:00:38:31 +0200] "GET /.env.uat HTTP/1.1" 404 153 "-" "Opera/9.5 (Microsoft Windows; PPC; Opera Mobi; U) SonyEricssonX1i/R2AA Profile/MIDP-2.0 Configuration/CLDC-1.1"
35.244.78.105 - [09/Jun/2026:00:38:31 +0200] "GET /internal/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YandexNews/4.0; +http://yandex.com/bots)"
35.244.78.105 - [09/Jun/2026:00:38:31 +0200] "GET /api/.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36"
35.244.78.105 - [09/Jun/2026:00:38:31 +0200] "GET /config/.env.local HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh
show less
Web App Attack
Hacking
🇺🇸
OceanTreasure
2026-06-09 04:35:45
(1 week ago)
tcp/80; Git configuration exposure attempt: "GET /.git/config" @ 2026-06-09T04:25:59Z [azure]
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 04:15:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:15:13.343562 2026] [security2:error] [pid 1124:tid 1124] [client 35.244.78.105:35638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zendogenpets.com"] [uri "/.git/config"] [unique_id "aieTUQXGrC6BZxCxvB4VlAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:31:43
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:31:40.514310 2026] [security2:error] [pid 22084:tid 22084] [client 35.244.78.105:36424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hotpay.co"] [uri "/.git/config"] [unique_id "aieJHKBQTp4pQY7KOL_53wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 02:48:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:48:27.509265 2026] [security2:error] [pid 20945:tid 20945] [client 35.244.78.105:32880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.united-kingdom-boat-registration.com.boatregistrationdelaware.com"] [uri "/.git/config"] [unique_id "aid--zl67ai4a8WV03ePCgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-09 02:33:26
(1 week ago)
[TueJun0904:33:23.2863582026][security2:error][pid2194818:tid2194935][client35.244.78.105:0]ModSecur ...
show more
[TueJun0904:33:23.2863582026][security2:error][pid2194818:tid2194935][client35.244.78.105:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autoeuro.lv\"][uri\"/.git/config\"][unique_id\"aid7cx3qoJ9FR4ljbm4F9AAAANA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 01:21:25
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.78.105 (105.78.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:21:21.895132 2026] [security2:error] [pid 5319:tid 5319] [client 35.244.78.105:48460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.participation.vjrott.com"] [uri "/.git/config"] [unique_id "aidqkaDQKs-1qwWPfUNT0AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack