🇭🇺
bcsaba
2026-10-27 10:33:09
(4 hours ago)
P2S/Node.js exploit tester, but noone asked for it
2026/10/27 11:33:07 [error] 1626345#1626345: *708 ...
show more
P2S/Node.js exploit tester, but noone asked for it
2026/10/27 11:33:07 [error] 1626345#1626345: *70884 [client 34.64.242.197] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `55' ) [file "/etc/nginx/modsec/coreruleset-4.30.0/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "*REDACTED*"] [uri "/"] [unique_id "179309718738.362927"] [ref ""], client: 34.64.242.197, server: rajongo.*REDACTED*, request: "POST / HTTP/1.1", host: "rajongo.*REDACTED*"
show less
Web App Attack
🇹🇭
thaizone.com
2026-10-27 06:52:16
(7 hours ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
2026-10-27 05:59:59
(8 hours ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=25, Diversity=12,2, CanaryOverride=90.
show less
Web App Attack
Bad Web Bot
2026-10-27 02:30:41
(12 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 01:23:44
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.242.197 (197.242.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.242.197 (197.242.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 21:23:37.156608 2026] [security2:error] [pid 16758:tid 16782] [client 34.64.242.197:34326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rainbowbb.com"] [uri "/.git/config"] [unique_id "at_9GcKNATQIwX8DzvGdmAAAAVI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-10-27 01:03:31
(13 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-26T20:08:20.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 00:56:52
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.242.197 (197.242.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.242.197 (197.242.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 20:56:48.391505 2026] [security2:error] [pid 7206:tid 7206] [client 34.64.242.197:41586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rainbarrel.austingrammer.com"] [uri "/.git/config"] [unique_id "at_20PUFpdH5MXnUAAOwlwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-26 23:47:30
(15 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇸🇪
vaia.cloud
2026-10-26 23:40:02
(15 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
2026-10-26 22:47:50
(16 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇨🇭
Origon
2026-10-26 21:11:42
(17 hours ago)
plesk-modsecurity - IP: 34.64.242.197 - [26/Oct/2026:22:11:41.278942 +0100] at_CDe5vi6vSKL6Wzm14rwA ...
show more
plesk-modsecurity - IP: 34.64.242.197 - [26/Oct/2026:22:11:41.278942 +0100] at_CDe5vi6vSKL6Wzm14rwAAABE 34.64.242.197 34864 127.0.0.1 7081 [26/Oct/2026:22:11:41.763107 +0100] at_CDe5vi6vSKL6Wzm14sAAAABc 34.64.242.197 34878 127.0.0.1 7081 [26/Oct/2026:22:11:42.009362 +0100] at_CDu5vi6vSKL6Wzm14sQAAAAk 34.64.242.197 34880 127.0.0.1 7081 [26/Oct/2026:22:11:42.244331 +0100] at_CDu5vi6vSKL6Wzm14sgAAAAs 34.64.242.197 34898 127.0.0.1 7081
show less
Web App Attack
🇳🇱
Site.eu
2026-10-26 17:19:22
(21 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-26 17:05:04
(21 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇯🇵
rafale2k
2026-10-26 16:37:56
(22 hours ago)
WordPress Brute Force
Brute-Force
Web App Attack
🇺🇸
rafaelpfister.ch
2026-10-26 16:19:43
(22 hours ago)
Blocked by WAF: 87 request(s) probing for PHP scripts, WordPress files or secrets on a site without ...
show more
Blocked by WAF: 87 request(s) probing for PHP scripts, WordPress files or secrets on a site without PHP: GET /.env.dist, GET /api/.env, GET /web/.env, GET /src/.env, GET /application/.env, GET /.env~, GET /.env.yml, GET /.env.uat (+79 more) • Reported by: github.com/pfstr/cloudflare-abuseipdb-reporter
show less
Web App Attack