๐ฉ๐ช
TheDjRider
2026-10-11 06:51:31
(2 days ago)
CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ba ...
show more
CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-10-11T06:51:26.246328648Z. Context: http_status=404
show less
Web App Attack
๐ฉ๐ช
paissangroup
2026-10-10 23:58:02
(2 days ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-10 23:30:31
(2 days ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.80.24.219 - - [11/Oct/2026:01:30:16 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 23:25:23
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.80.24.219 (219.24.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.24.219 (219.24.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:25:19.287530 2026] [security2:error] [pid 23461:tid 23461] [client 34.80.24.219:52024] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||z-mgmt.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "z-mgmt.com"] [uri "/z9x8c7v6b5-debug-trigger-z-mgmt.com"] [unique_id "asrJX2o47C0w26MwI97ZNwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 22:33:25
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.80.24.219 (219.24.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.24.219 (219.24.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:33:18.950998 2026] [security2:error] [pid 20656:tid 20663] [client 34.80.24.219:33580] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lasertagmetairie.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lasertagmetairie.com"] [uri "/z9x8c7v6b5-debug-trigger-lasertagmetairie.com"] [unique_id "asq9Ljo5qNU8hVwYWoxcMAAAAMI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
radardatelecom
2026-10-10 22:27:03
(2 days ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ฉ๐ช
svr
2026-10-10 22:19:07
(2 days ago)
Abusive Automated Web Scanner
Web App Attack
๐ซ๐ท
security.rdmc.fr
2026-10-10 22:17:02
(2 days ago)
Web scan: multiple 4xx responses
Web App Attack
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-10-10 22:13:48
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-10 22:11:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.80.24.219 (219.24.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.24.219 (219.24.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 18:11:47.573409 2026] [security2:error] [pid 517:tid 517] [client 34.80.24.219:59226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ficklepassionproductions.com"] [uri "/.env.save"] [unique_id "asq4I2Qku8mjMqIsG5UtBgAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
TheDjRider
2026-10-10 22:10:38
(2 days ago)
CrowdSec detected Sensitive file or backup discovery attempt. Scenario: local/apache-sensitive-paths ...
show more
CrowdSec detected Sensitive file or backup discovery attempt. Scenario: local/apache-sensitive-paths. Automatic ban triggered. Detection time (UTC): 2026-10-10T22:10:35.230761526Z. Context: http_status=404
show less
Hacking
Web App Attack
๐ฉ๐ช
bazter.pro
2026-10-10 22:08:18
(2 days ago)
Fail2Ban: apache-ratelimit - 20 failures
Port Scan
Bad Web Bot
Web App Attack
๐ฉ๐ช
dbmwebdesign
2026-10-10 22:05:12
(2 days ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐ซ๐ท
demomodule
2026-10-10 22:04:19
(2 days ago)
PrestaShop Security Module: directory traversal attempt detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 21:55:14
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.80.24.219 (219.24.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.24.219 (219.24.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 17:55:08.104228 2026] [security2:error] [pid 21618:tid 21618] [client 34.80.24.219:51996] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cubicearth.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cubicearth.com"] [uri "/z9x8c7v6b5-debug-trigger-cubicearth.com"] [unique_id "asq0PHSqM5TLR8lPE4NbYQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack