2026-10-16 05:21:21
(12 hours ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=25, Rate=1,4, Diversity=20, CanaryOverride=90.
show less
Web App Attack
DDoS Attack
Bad Web Bot
2026-10-16 04:47:36
(13 hours ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 04:21:06
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.109.37 (37.109.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.109.37 (37.109.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 00:20:58.980717 2026] [security2:error] [pid 32475:tid 32475] [client 34.17.109.37:55628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbt4me.com"] [uri "/.git/config"] [unique_id "atGmKh51Nf-7AOxhyP3a1AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 03:29:45
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.109.37 (37.109.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.109.37 (37.109.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:29:41.846766 2026] [security2:error] [pid 30706:tid 30706] [client 34.17.109.37:44590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbrooketaylor.com"] [uri "/.git/config"] [unique_id "atGaJR-cO4FHqdIQbPH6rQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-16 03:22:03
(14 hours ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
Skyrider
2026-10-16 03:21:04
(14 hours ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-10-16 03:15:23
(14 hours ago)
(modsec_attack) srv201 ModSecurity attack 34.17.109.37 (IT/Italy/37.109.17.34.bc.googleusercontent.c ...
show more
(modsec_attack) srv201 ModSecurity attack 34.17.109.37 (IT/Italy/37.109.17.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
Site.eu
2026-10-16 02:34:59
(15 hours ago)
Excessive 404/403 errors
Brute-Force
🇿🇦
conure.sh
2026-10-16 02:29:33
(15 hours ago)
csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 9s
Web App Attack
🇩🇪
dbmwebdesign
2026-10-16 02:10:09
(15 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇩🇪
Hary74656
2026-10-16 01:44:06
(16 hours ago)
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
inbound_ ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "dbl.aschi.at"] [uri "/dbl/"] [unique_id "atGBZssH7nOE3VwuKRT8hgAAAEk"]
[Fri Oct 16 03:44:06.288508 2026] [vhost tools.aschi.at] [security2:error] [pid 369377:tid 139877647623872] [client 34.17.109.37:39462] [realclient 34.17.109.37:39462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "dbl.aschi.at"] [uri "/dbl/"] [unique_id "atGBZssH7nOE3VwuKRT8hwAAAEc"]
show less
Web App Attack
2026-10-16 01:07:03
(16 hours ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-10-16 00:46:23.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 00:31:55
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.109.37 (37.109.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.109.37 (37.109.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:31:48.139896 2026] [security2:error] [pid 5054:tid 5095] [client 34.17.109.37:39016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbestcarting.com"] [uri "/.git/config"] [unique_id "atFwdAJVP2kuyvkdAgRYoQAAAco"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-16 00:30:04
(17 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-10-15 19:27:49
(22 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking