🇮🇳
evicky2002
2026-09-10 06:00:02
(1 week ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇲🇽
octageeks.com
2026-09-10 04:18:29
(1 week ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
Charlesiv
2026-09-09 14:36:38
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from ZA.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from ZA.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-09-09T14:21:39Z
Ray ID: a386d72eff69b910
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
🇩🇪
Interceptor_HQ
2026-09-09 14:35:53
(1 week ago)
request_uri: /.git/config -- automatic report --
Brute-Force
Hacking
🇿🇦
conure.sh
2026-09-09 12:10:31
(1 week ago)
csagent: score 21.5: 404 noise floor x6, secrets grab x2; 1 domain(s) in 0s
Web App Attack
🇫🇷
masterguru
2026-09-09 11:43:20
(1 week ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
🇦🇹
piqwjdas
2026-09-09 08:01:46
(1 week ago)
{"transaction":{"client_ip":"34.35.157.135","time_stamp":"Wed Sep 9 10:01:46 2026","server_id":"468 ...
show more
{"transaction":{"client_ip":"34.35.157.135","time_stamp":"Wed Sep 9 10:01:46 2026","server_id":"46824fc494f03034e6b98e26d7a2d7a06b25f0b7","client_port":38128,"host_ip":"212.186.116.154","host_port":443,"unique_id":"178894090640.268805","is_interrupted":false,"request":{"method":"GET","http_version":"1.1","hostname":"ocean-dockge.spiess-vienna.at","uri":"/","headers":{"Host":"ocean-dockge.spiess-vienna.at","User-Agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","Accept-Encoding":"gzip, deflate","Accept":"*/*","Next-Action":"x","Connection":"keep-alive","X-Nextjs-Request-Id":"309cae47"}},"response":{"http_code":400,"headers":{"Server":"nginx\u0000","Date":"Wed, 09 Sep 2026 08:01:46 GMT","Content-Type":"text/html; charset=utf-8","X-Content-Type-Options":"nosniff","Connection":"keep-alive","Content-Language":"en","Vary":"Accept-Language","Referrer-Policy":"same-origin","Cross-Origin-Opener-Policy":"same-origin"}},"producer":{"mo
...
show less
Web App Attack
🇳🇱
Site.eu
2026-09-09 05:14:59
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
Mundo Bueno
2026-09-09 05:06:45
(1 week ago)
[ISILIA Protection v2.1] Tentative d'accès: /.git/config | Pays: ZA | UA: Mozilla/5.0 (Macintosh; In ...
show more
[ISILIA Protection v2.1] Tentative d'accès: /.git/config | Pays: ZA | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.
show less
Hacking
Web App Attack
🇳🇱
Webhoster
2026-09-09 04:19:11
(1 week ago)
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
🇦🇺
screwlooseit.com.au
2026-09-09 03:49:29
(1 week ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/135.157.35.34.bc.googleuserconten ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/135.157.35.34.bc.googleusercontent.com
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 18:50:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.35.157.135 (135.157.35.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.157.135 (135.157.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 14:50:07.193491 2026] [security2:error] [pid 3723:tid 3723] [client 34.35.157.135:49978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nolagardenmarket.com"] [uri "/.git/config"] [unique_id "ap8HX1pJtTTYzObtr6WzrgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-07 09:30:48
(1 week ago)
11.458 requests with url.path *.env
1.794 requests with url.path *phpinfo.php
329 requests with u ...
show more
11.458 requests with url.path *.env
1.794 requests with url.path *phpinfo.php
329 requests with url.path *credentials.json
show less
Brute-Force
Bad Web Bot
2026-09-07 09:16:12
(1 week ago)
Bot / seems abusive / Apache connections: 37
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 08:11:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.35.157.135 (135.157.35.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.157.135 (135.157.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 04:11:00.090516 2026] [security2:error] [pid 31886:tid 31886] [client 34.35.157.135:43220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nolaanimereviews.com"] [uri "/.git/config"] [unique_id "ap5xlNyJ9JvjDPVP6o-26wAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack