๐ณ๐ฑ
Savvii
2026-09-16 05:23:42
(20 minutes ago)
20 attempts against mh_ha-misbehave-ban on toon-dev
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-16 04:35:35
(1 hour ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-09-16 03:11:52
(2 hours ago)
Trying to access config files
Web App Attack
๐บ๐ธ
Charlesiv
2026-09-16 00:35:05
(5 hours ago)
Triggered Cloudflare WAF (firewallCustom) from FI.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from FI.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-09-15T23:23:29Z
Ray ID: a3bb6125ae6e9780
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
MatCat
2026-09-15 23:05:09
(6 hours ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-15 22:55:33
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:55:27.835728 2026] [security2:error] [pid 22056:tid 22056] [client 34.88.227.103:39046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tools.alitcogroup.com"] [uri "/.git/config"] [unique_id "aqnM32uTxtBNL-DeEfxt-wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-15 21:10:24
(8 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฌ๐ง
venus.launch.bz
2026-09-15 20:27:23
(9 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.88.227.103 (FI/Finland/103.227.88.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.88.227.103 (FI/Finland/103.227.88.34.bc.googleusercontent.com)
show less
SQL Injection
๐ฉ๐ฐ
toolbit.online
2026-09-15 20:12:48
(9 hours ago)
Behavior strongly consistent with automated vulnerability scanning, per CrowdSec - 11 probing events ...
show more
Behavior strongly consistent with automated vulnerability scanning, per CrowdSec - 11 probing events. Classified as automated probing for exposed files / admin panels (scenario "http-probing", in our own server logs). Behavioural detection, auto-banned at the firewall.
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-09-15 19:28:30
(10 hours ago)
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla ...
show more
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 18:34:56
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:34:49.133879 2026] [security2:error] [pid 29391:tid 29391] [client 34.88.227.103:40788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toody.com"] [uri "/.git/config"] [unique_id "aqmPyVH3IogLhxh9fDfhFgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 18:06:53
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:06:46.796620 2026] [security2:error] [pid 8897:tid 8897] [client 34.88.227.103:59968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tonytremblayauthor.com"] [uri "/.git/config"] [unique_id "aqmJNmFbtsu88Jym-vQiJAAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 17:47:40
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:47:34.902685 2026] [security2:error] [pid 20356:tid 20457] [client 34.88.227.103:56630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tonysergio.com"] [uri "/.git/config"] [unique_id "aqmEtl1t9Vrxp7KL8blHEQAAAhg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 17:17:15
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.227.103 (103.227.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:17:07.854872 2026] [security2:error] [pid 1301845:tid 1301845] [client 34.88.227.103:43210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tonylai.com"] [uri "/.git/config"] [unique_id "aql9k1oPD9JYPeWhce7-6AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-15 16:55:04
(12 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack