🇳🇱
Savvii
2026-11-15 18:14:16
UTC ·
(30 minutes ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-11-15 16:45:05
UTC ·
(1 hour ago)
Web App Attack
🇬🇧
gws-hostmaster
2026-11-15 14:53:37
UTC ·
(3 hours ago)
ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;PHP Injection Attack: Variable Access Found;Remote Command Execution: Direct Unix Command Execution;Remote Command Executi ...
show more
ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;PHP Injection Attack: Variable Access Found;Remote Command Execution: Direct Unix Command Execution;Remote Command Execution: Unix Shell Expression Found;Restricted File Access Attempt;SQL Injection Attack: SQL function name detected;
show less
Web App Attack
🇺🇸
francelink.fr
2026-11-15 14:30:23
UTC ·
(4 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-15T14:29:11.000Z.
Web App Attack
🇩🇪
LRob
2026-11-15 12:13:42
UTC ·
(6 hours ago)
Vulnerability scanning | method: GET | path: /.git/config | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Port Scan
Web App Attack
🇫🇷
masterguru
2026-11-15 11:19:21
UTC ·
(7 hours ago)
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})| (932130-135)
Hacking
🇺🇸
TPI-Abuse
2026-11-15 10:12:48
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.187.23.159 (159.23.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:12:44.885609 2026] [security2:error] [pid 18482:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.23.159 (159.23.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 05:12:44.885609 2026] [security2:error] [pid 18482:tid 18482] [client 34.187.23.159:53414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greybrucepork.ca"] [uri "/.git/config"] [unique_id "avmFnDCQ2EXJG29JU9OmDQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
gurnip
2026-11-15 09:00:32
UTC ·
(9 hours ago)
Vulnerability probe of page /.git/config, not found on server.
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-15 08:51:39
UTC ·
(9 hours ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.187.23.159 - - [15/Nov/2026:09:51:34 +0100] "GET /.git/config HTTP/1.1" 301 621 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.187.23.159 - - [15/Nov/2026:09:51:34 +0100] "GET /.git/config HTTP/1.1" 301 621 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
Lee Daniel
2026-11-15 08:24:57
UTC ·
(10 hours ago)
34.187.23.159 - - [15/Nov/2026:03:24:56 -0500] "GET /.env HTTP/1.1" 403 6293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-15 08:20:02
UTC ·
(10 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇵🇫
www.gregorymariani.com
2026-11-15 07:17:39
UTC ·
(11 hours ago)
Web App Attack
🇦🇺
gregoo23
2026-11-15 06:11:35
UTC ·
(12 hours ago)
34.187.23.159 - - [15/Nov/2026:17:11:31 +1100] "GET /info.php HTTP/1.1" 404 71059 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.187.23.159 - - [15/Nov/2026:17:11:33 +1100] "GET /php.php ...
show more
34.187.23.159 - - [15/Nov/2026:17:11:31 +1100] "GET /info.php HTTP/1.1" 404 71059 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.187.23.159 - - [15/Nov/2026:17:11:33 +1100] "GET /php.php HTTP/1.1" 404 71063 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.187.23.159 - - [15/Nov/2026:17:11:34 +1100] "GET /i.php HTTP/1.1" 404 71067 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-15 06:03:13
UTC ·
(12 hours ago)
2.905 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-15 02:08:36
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.187.23.159 (159.23.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 21:08:28.994190 2026] [security2:error] [pid 22434:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.187.23.159 (159.23.187.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 21:08:28.994190 2026] [security2:error] [pid 22434:tid 22434] [client 34.187.23.159:51362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greensealusa.com"] [uri "/.git/config"] [unique_id "avkUHLT7vPuzovxF4dLAlAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
