🇲🇽
octageeks.com
2026-08-30 04:23:59
(6 hours ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 22:17:26
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.71.239.198 (198.239.71.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.71.239.198 (198.239.71.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 18:17:19.332875 2026] [security2:error] [pid 6673:tid 6673] [client 34.71.239.198:40276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "limobustacoma.com"] [uri "/app/.git/config"] [unique_id "apNab4lhEpyHbLpmlw1VqgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-28 22:04:23
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-28 00:50:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.71.239.198 (198.239.71.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.71.239.198 (198.239.71.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 20:50:44.572165 2026] [security2:error] [pid 13668:tid 13668] [client 34.71.239.198:42100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trafficstopper.com"] [uri "/wordpress/.git/config"] [unique_id "apDbZFuakvxRjNHXDfJepQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-08-27 21:20:39
(2 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-08-27 21:12:09
(2 days ago)
34.71.239.198 - - [27/Aug/2026:23:12:09 +0200] "GET /wordpress/.git/config HTTP/1.1" 404 153 "-" "cr ...
show more
34.71.239.198 - - [27/Aug/2026:23:12:09 +0200] "GET /wordpress/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-08-27 18:47:49
(2 days ago)
Multiple WAF Violations
Web App Attack
🇮🇹
VHosting
2026-08-27 18:40:03
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
rsa
2026-08-27 18:37:00
(2 days ago)
GET /.git/config HTTP/1.1
DDoS Attack
Brute-Force
Exploited Host
Web App Attack
Hacking
🇦🇺
2000cn.com.au
2026-08-27 18:36:14
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-27 17:36:00
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.71.239.198 (198.239.71.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.71.239.198 (198.239.71.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 13:35:54.193897 2026] [security2:error] [pid 28530:tid 28530] [client 34.71.239.198:55960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.baumannarchitecture.com"] [uri "/public/.git/config"] [unique_id "apB1enFolKu9OguFbz0ErgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-27 16:46:39
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-27 16:14:02
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.71.239.198 (198.239.71.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.71.239.198 (198.239.71.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:13:57.374559 2026] [security2:error] [pid 23919:tid 23975] [client 34.71.239.198:40470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tameladreyerlcsw.workconfident.com"] [uri "/www/.git/config"] [unique_id "apBiRYBX2qbiejqIbjyAFgAAAU8"]
show less
Brute-Force
Bad Web Bot
Web App Attack