🇳🇱
ConsulHosting
2026-09-16 13:01:41
(16 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
4server
2026-09-16 10:26:07
(18 hours ago)
[WedSep1612:26:01.8938712026][security2:error][pid429504:tid429530][client34.175.25.198:0]ModSecurit ...
show more
[WedSep1612:26:01.8938712026][security2:error][pid429504:tid429530][client34.175.25.198:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"enricoalbertini.com\"][uri\"/\"][unique_id\"aqpuuQ44cH5v7S7cOYDsTQAAAJU\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-09-16 07:58:30
(21 hours ago)
[Wed Sep 16 09:58:29.435455 2026] [:error] [pid 672732:tid 672732] [client 34.175.25.198:49510] ModS ...
show more
[Wed Sep 16 09:58:29.435455 2026] [:error] [pid 672732:tid 672732] [client 34.175.25.198:49510] ModSecurity: Warning. Matched "Operator `Rx' with parameter `(?i)(?:b[\\"'\\)\\[\\x5c]*(?:(?:(?:\\|\\||&&)[\\s\\x0b]*)?\\$[!#\\(\\*\\-0-9\\?@_a-\\{]*)?\\x5c?u[\\"'\\)\\[\\x5c]*(?:(?:(?:\\|\\||&&)[\\s\\x0b]*)?\\$[!#\\(\\*\\-0-9\\?@_a-\\{]*)?\\x5c?s[\\"'\\)\\[\\x5c]*(?:(?:(?:\\|\\||&&)[\\s\\x0b]*)?\\$ (10193 characters omitted)' against variable `ARGS:0' (Value: `{"then": "$1:__proto__:then", "status": "resolved_model", "reason": -1, "value": "{\\"then\\":\\"$B1337 (319 characters omitted)' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-932-APPLICATION-ATTACK-RCE.conf"] [line "186"] [id "932235"] [rev ""] [msg "Remote Command Execution: Unix Command Injection (command without evasion)"] [data "Matched Data: | base64 found within ARGS:0: {\\x22then\\x22: \\x22$1:__proto__:then\\x22, \\x22status\\x22: \\x22resolved_model\\x22, \\x22reason\\x22: -1, \\x22value\\x22: \\x22{\\x5c\\x22then\\x5c\
...
show less
Web App Attack
🇫🇷
COMAITE
2026-09-16 07:37:15
(21 hours ago)
Suspicious URL access.
Web App Attack
2026-09-16 07:35:01
(21 hours ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 06:45:16
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.25.198 (198.25.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.25.198 (198.25.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:45:10.384994 2026] [security2:error] [pid 13220:tid 13301] [client 34.175.25.198:37736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ennerdale.org"] [uri "/.git/config"] [unique_id "aqo69mGlUUfR8vDHoZrhbwAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-16 06:44:42
(22 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 05:34:18
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.25.198 (198.25.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.25.198 (198.25.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 01:34:14.620207 2026] [security2:error] [pid 16732:tid 16732] [client 34.175.25.198:56458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enlightened-workplace.com"] [uri "/.git/config"] [unique_id "aqoqVlxhFRcwPFuThy9FngAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-09-16 05:10:06
(23 hours ago)
Automated WAF report: 1500-2000 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 03:33:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.175.25.198 (198.25.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.25.198 (198.25.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:33:13.723094 2026] [security2:error] [pid 11969:tid 11969] [client 34.175.25.198:50532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enjoy2dance.com"] [uri "/.git/config"] [unique_id "aqoN-TKavqmgXQ4lZKvq3QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-16 03:14:54
(1 day ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.175.25.198 - - [16/Sep/2026:05:14:48 +0200] "GET /.git/config HTTP/1.1" 301 622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
yvoictra
2026-09-16 02:50:03
(1 day ago)
Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files
Web App Attack
🇫🇷
dynamix
2026-09-16 02:22:34
(1 day ago)
Multiple WAF Violations
Web App Attack
🇫🇷
✨
2026-09-16 02:11:16
(1 day ago)
Domain : enigma.ollyfray.com
Rule : hack
2026-09-16 02:09:47 ***hidden-privacy*** GET /.env.bak - 44 ...
show more
Domain : enigma.ollyfray.com
Rule : hack
2026-09-16 02:09:47 ***hidden-privacy*** GET /.env.bak - 443 - 162.158.123.243 HTTP/2 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - enigma.ollyfray.com 404 0 2 12883 492 30 - 34.175.25.198
show less
Hacking
SQL Injection
Brute-Force
🇳🇱
Site.eu
2026-09-16 02:03:46
(1 day ago)
Excessive multi-domain requests
Brute-Force