๐ฉ๐ช
Hary74656
2026-10-16 08:12:30
(1 day ago)
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
g_inboun ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
g_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "hass.aschi.at"] [uri "/"] [unique_id "atHcbcsH7nOE3VwuKRQ92AAAAFY"]
[Fri Oct 16 10:12:29.921600 2026] [vhost schani.hostmi.at] [security2:error] [pid 369377:tid 139877528098496] [client 34.176.82.226:46462] [realclient 34.176.82.226:46462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 30)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "hass.aschi.at"] [uri "/"] [unique_id "atHcbcsH7nOE3VwuKRQ92QAAAEs"]
show less
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-16 08:01:16
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-16 05:04:29
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-16 03:31:02
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.82.226 (226.82.176.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.82.226 (226.82.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:30:56.643590 2026] [security2:error] [pid 12205:tid 12205] [client 34.176.82.226:53928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harwoodmechanical.com"] [uri "/.git/config"] [unique_id "atGacOwzjno7vsEazOq0eQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 02:58:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.82.226 (226.82.176.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.82.226 (226.82.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 22:58:48.987505 2026] [security2:error] [pid 1954:tid 1954] [client 34.176.82.226:42168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harveyalperin.com"] [uri "/.git/config"] [unique_id "atGS6LC2gauX3c1r3EsDrAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 02:24:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.82.226 (226.82.176.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.82.226 (226.82.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 22:24:54.811346 2026] [security2:error] [pid 23008:tid 23008] [client 34.176.82.226:35106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harvestfrc.com"] [uri "/.git/config"] [unique_id "atGK9iv4qXItc6wWU5tJOQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-16 02:24:44
(1 day ago)
9.585 requests with url.path *.env
1.603 requests with url.path *phpinfo.php
296 requests with ur ...
show more
9.585 requests with url.path *.env
1.603 requests with url.path *phpinfo.php
296 requests with url.path *credentials.json
show less
Brute-Force
Bad Web Bot
๐จ๐ฆ
john doe
2026-10-16 02:02:10
(1 day ago)
SentinelBot: Secret-path hunting (5 distinct paths): Env File Hunting (score: 61)
Bad Web Bot
Anonymous
2026-10-15 23:20:05
(2 days ago)
| [Dangerous/Chile] Aggressive IP 34.176.82.226 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/Chile] Aggressive IP 34.176.82.226 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
Anonymous
2026-10-15 19:37:08
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-10-15 18:37:40
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ณ๐ฑ
debestelapp
2026-10-15 18:10:09
(2 days ago)
Web App Attack
๐ซ๐ท
dynamix
2026-10-15 18:10:06
(2 days ago)
Multiple WAF Violations
Web App Attack
๐จ๐ฆ
Anytech
2026-10-15 18:03:24
(2 days ago)
Blocked by ConnMonitor
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-08-21 04:07:26
(1 month ago)
Wordpress malicious attack:[octaflood]
Web App Attack