๐บ๐ธ
MPL
2026-06-09 15:48:39
(55 minutes ago)
tcp ports: 80,443 (12 or more attempts)
Port Scan
๐ฉ๐ช
big-cloud.nl
2026-06-09 15:43:03
(1 hour ago)
Try to access /.git/config
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-06-09 14:11:40
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 14:04:31
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:04:25.717565 2026] [security2:error] [pid 17166:tid 17192] [client 35.253.65.235:47398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.destination-kitchen.com"] [uri "/.git/config"] [unique_id "aigdaUPBymP8rG2JOek4HAAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 13:27:43
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:27:35.657963 2026] [security2:error] [pid 1836:tid 1836] [client 35.253.65.235:50702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ozarktulsa.com"] [uri "/.git/config"] [unique_id "aigUx3TXmnPVuBH4DbM2bwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 12:27:40
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:27:34.016058 2026] [security2:error] [pid 14856:tid 14856] [client 35.253.65.235:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindmaterial.io"] [uri "/.git/config"] [unique_id "aigGtjaZlJNPEHiNt43AqAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 11:57:21
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:57:16.195091 2026] [security2:error] [pid 23752:tid 23752] [client 35.253.65.235:53262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.obgynhistory.com.utilis.net"] [uri "/.git/config"] [unique_id "aif_nAE5TkTf-Q_Rqsw-1QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 11:00:49
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:00:44.693322 2026] [security2:error] [pid 29608:tid 29608] [client 35.253.65.235:50680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dylanwalsh.net"] [uri "/.git/config"] [unique_id "aifyXO98JvVt-_dpwP5r3wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-09 10:09:28
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 09:58:12
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:58:04.293435 2026] [security2:error] [pid 7036:tid 7036] [client 35.253.65.235:47118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.atame.elpais.mx"] [uri "/.git/config"] [unique_id "aifjrMoU9b48iCO876pDfgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 08:46:54
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:46:51.430283 2026] [security2:error] [pid 28673:tid 28673] [client 35.253.65.235:53360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weird.eco"] [uri "/.git/config"] [unique_id "aifS--HeABLWRHgSiI0QcwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 06:52:15
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:52:10.527556 2026] [security2:error] [pid 12437:tid 12456] [client 35.253.65.235:36922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mykfccares.com"] [uri "/.git/config"] [unique_id "aie4GrzEVxhXdfxaxMrlTAAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:46:22
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:46:16.050796 2026] [security2:error] [pid 24863:tid 24863] [client 35.253.65.235:42882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.heaven.avmcyber.com"] [uri "/.git/config"] [unique_id "aieoqFoIpQ-6AsrI1eK3HAAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-06-09 03:48:39
(12 hours ago)
[TueJun0905:48:35.7623562026][security2:error][pid3359803:tid3360048][client35.253.65.235:0]ModSecur ...
show more
[TueJun0905:48:35.7623562026][security2:error][pid3359803:tid3360048][client35.253.65.235:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"webdisk.aidconsultancy.ch\"][uri\"/.git/config\"][unique_id\"aieNE86behFUo_pG4hDHEgAAAM0\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 00:34:58
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.65.235 (235.65.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:34:51.560273 2026] [security2:error] [pid 3428:tid 3428] [client 35.253.65.235:57146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "groupof12.com"] [uri "/.git/config"] [unique_id "aidfq1dUvYzEfDiO1RVAswAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack