2026-10-17 10:09:27
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇬🇧
gws-hostmaster
2026-10-17 10:01:00
(1 day ago)
ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;N ...
show more
ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;PHP Injection Attack: Variable Access Found;Remote Command Execution: Direct Unix Command Execution;Remote Command Execution: Unix Shell Expression Found;Restricted File Access Attempt;SQL Injection Attack: SQL function name detected;URL file extension is restricted by policy;
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 09:52:25
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.96.200.118 (118.200.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.200.118 (118.200.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:52:18.710886 2026] [security2:error] [pid 7074:tid 7074] [client 34.96.200.118:48326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wwts.io"] [uri "/.git/config"] [unique_id "atHz0vTazQ5iR0jvNyPwtAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-16 06:48:51
(2 days ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 06:45:57
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.96.200.118 (118.200.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.200.118 (118.200.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 02:45:53.742147 2026] [security2:error] [pid 23423:tid 23536] [client 34.96.200.118:46558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wwjnd.com"] [uri "/.git/config"] [unique_id "atHIIZ7SOiMGFWJUY8BH_AAAAhc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-16 03:57:23
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇷🇴
iulianh
2026-10-16 00:04:53
(2 days ago)
80,443
Brute-Force
SSH
2026-10-15 19:19:46
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
Alt255
2026-10-15 18:24:59
(2 days ago)
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.96.200.118 - - [15/Oct/2026:20:24:57 +0200] "GET /.git/config HTTP/1.1" 301 530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-15 18:22:27
(2 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 01:07:04
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.96.200.118 (118.200.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.200.118 (118.200.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 21:06:59.495102 2026] [security2:error] [pid 22855:tid 22855] [client 34.96.200.118:55610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.versahealthcare.com"] [uri "/.git/config"] [unique_id "arsPM1k0dqImQi5AtJZONQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-29 00:06:43
(2 weeks ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇫🇷
dynamix
2026-09-28 07:46:33
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇩🇪
FD-IX
2026-09-28 06:23:13
(2 weeks ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-28 04:32:42
(2 weeks ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.96.200.118 - - [28/Sep/2026:06:32:23 +0200] "GET /roundcube//.git/config HTTP/1.1" 403 7438 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
