2026-10-17 10:10:00
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇬🇧
Vert Paysage
2026-10-17 10:05:33
(1 week ago)
SecurityShield WAF: Signature WAF [CRS-942180] critical — Detects basic SQL authentication bypass at ...
show more
SecurityShield WAF: Signature WAF [CRS-942180] critical — Detects basic SQL authentication bypass attempts 1/3
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-17 00:44:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.97.33.228 (228.33.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.33.228 (228.33.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:44:03.587723 2026] [security2:error] [pid 15268:tid 15268] [client 34.97.33.228:52518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bosdkbook.joepeters.org"] [uri "/.git/config"] [unique_id "atLE0wft2StbXrNPbc6nzwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 00:23:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.97.33.228 (228.33.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.33.228 (228.33.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:23:45.356719 2026] [security2:error] [pid 14139:tid 14139] [client 34.97.33.228:52076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bosch.pamplonaserviciotecnico.com"] [uri "/.git/config"] [unique_id "atLAEQz8Ha5STMGBgemrJwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-16 23:30:32
(1 week ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-16 23:23:05
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-16 22:02:02
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-15.
show less
Web App Attack
SSH
Hacking
🇳🇱
debestelapp
2026-10-16 21:05:09
(1 week ago)
Web App Attack
🇳🇱
Mangelot Hosting
2026-10-16 20:04:56
(1 week ago)
(modsec_attack) srv102 ModSecurity attack 34.97.33.228 (JP/Japan/228.33.97.34.bc.googleusercontent.c ...
show more
(modsec_attack) srv102 ModSecurity attack 34.97.33.228 (JP/Japan/228.33.97.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
2026-10-16 18:40:57
(1 week ago)
Banned by Fail2Ban on server
Web App Attack
🇩🇪
big-cloud.nl
2026-10-16 16:49:52
(1 week ago)
Try to access /.git/config
Web App Attack
🇧🇪
cmbplf
2026-10-16 16:40:27
(1 week ago)
107 requests with url.path *.php.bak
Brute-Force
Bad Web Bot
🇳🇱
Alt255
2026-10-16 15:35:59
(1 week ago)
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.97.33.228 - - \[16/Oct/2026:17:35:57 +0200\] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-16 15:20:25
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇸🇪
1337v411
2026-10-16 15:03:55
(1 week ago)
[2026-10-16T15:03:54+00:00] uri="/.git/config" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe ...
show more
[2026-10-16T15:03:54+00:00] uri="/.git/config" ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack