🇸🇪
vaia.cloud
2026-07-25 01:15:02
(5 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-07-25 00:05:43
(6 hours ago)
Scanning/Probing (17)
Brute-Force
Web App Attack
2026-07-25 00:05:25
(6 hours ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (82/60 min)'; Requests=82
Port Scan
🇳🇱
homeshowdomain.nl
2026-07-24 22:00:37
(8 hours ago)
Auto-ban: >3000 req/min op 2026-07-24
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-24 18:27:48
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 14:27:41.075393 2026] [security2:error] [pid 8390:tid 8390] [client 18.191.252.94:41992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ofertasdetrabajosyempleos.com.creartest.com"] [uri "/.git/config"] [unique_id "amOunaupU-xWsebhIfwN_QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-07-24 16:38:31
(13 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
www.nomadomia.com
2026-07-24 16:01:48
(14 hours ago)
Hack attack .env
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-07-24 15:40:04
(14 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-07-24 14:14:30
(16 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-07-24 14:10:40
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 10:10:36.316153 2026] [security2:error] [pid 766568:tid 766568] [client 18.191.252.94:48110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.odinscelestialtrust.org.rejuvenationsystems.com"] [uri "/.git/config"] [unique_id "amNyXI-c2IMUIo5eNrCq3gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 11:21:13
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:21:08.493818 2026] [security2:error] [pid 135158:tid 135158] [client 18.191.252.94:52662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.octozonehealth.mroxygen.org"] [uri "/.git/config"] [unique_id "amNKpB2r8gCGxC3DAv4PpAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-24 10:35:16
(20 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 09:36:09
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 05:36:03.526229 2026] [security2:error] [pid 3808232:tid 3808332] [client 18.191.252.94:51312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oconnorpest2.oconnorpest.biz"] [uri "/.git/config"] [unique_id "amMyA4oEHmBUfe0z-dsRNAAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 07:17:01
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 18.191.252.94 (ec2-18-191-252-94.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:16:57.132377 2026] [security2:error] [pid 29674:tid 29674] [client 18.191.252.94:49742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oceanicpier.callbobh.com"] [uri "/.git/config"] [unique_id "amMRaZcM0oCE3F0rmJfbjgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack