Anonymous
2026-08-25 15:10:43
(3 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-08-24 14:21:08
(4 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git)
show less
Hacking
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-08-24 14:13:14
(4 days ago)
20 attempts against mh-misbehave-ban on mars
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-24 14:09:12
(4 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
interbiznw.com
2026-08-24 14:02:49
(4 days ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ท๐ด
iulianh
2026-08-24 12:48:45
(4 days ago)
80,443
Brute-Force
SSH
Anonymous
2026-08-24 12:29:19
(4 days ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 12:17:24
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.35.107.250 (vps3574727.trouble-free.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.107.250 (vps3574727.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 08:17:20.449369 2026] [security2:error] [pid 14091:tid 14091] [client 162.35.107.250:34960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tdsdemo.com"] [uri "/.git/config"] [unique_id "aow2UGolta3XHOowb1kzswAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 09:52:14
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.35.107.250 (vps3574727.trouble-free.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.107.250 (vps3574727.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 05:52:10.777514 2026] [security2:error] [pid 3581985:tid 3582003] [client 162.35.107.250:55698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "millievelasco.com"] [uri "/.git/config"] [unique_id "aowUSv9rw0LZNyS4rUlbawAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 09:06:37
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 162.35.107.250 (vps3574727.trouble-free.net): 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.107.250 (vps3574727.trouble-free.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 05:06:31.017338 2026] [security2:error] [pid 4685:tid 4685] [client 162.35.107.250:52236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarahsmith.ws"] [uri "/.git/config"] [unique_id "aowJlzaN2sWHeShbVE2tYgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
IndigoRidge
2026-08-24 02:37:04
(4 days ago)
162.35.107.250 - - [23/Aug/2026:22:37:03 -0400] "GET /actuator HTTP/1.1" 404 5489 "-" "Mozilla/5.0 ( ...
show more
162.35.107.250 - - [23/Aug/2026:22:37:03 -0400] "GET /actuator HTTP/1.1" 404 5489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
162.35.107.250 - - [23/Aug/2026:22:37:03 -0400] "GET /.git/config HTTP/1.1" 404 5489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
162.35.107.250 - - [23/Aug/2026:22:37:04 -0400] "GET /actuator/env HTTP/1.1" 404 5489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
162.35.107.250 - - [23/Aug/2026:22:37:04 -0400] "GET /server-status HTTP/1.1" 404 5489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
162.35.107.250 - - [23/Aug/2026:22:37:04 -0400] "GET /actuator/configprops HTTP/1.1" 404 5489 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
๐ฎ๐น
VHosting
2026-08-23 23:30:07
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-08-23 18:32:03
(5 days ago)
183 requests with url.path *config.json
148 requests with url.path *secrets.json
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-08-23 16:39:30
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 162.35.107.250 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 162.35.107.250 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 12:39:26.833958 2026] [security2:error] [pid 25633:tid 25649] [client 162.35.107.250:54874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crowns.org"] [uri "/.git/config"] [unique_id "aosiPiDWIRS11wg9rcfbHgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack