🇨🇭
🇨🇭 Hosting
2026-10-17 05:10:05
(1 hour ago)
Automated WAF report: 1000-1500 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-10-17 01:43:38
(4 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git)
show less
Hacking
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-10-17 01:32:07
(4 hours ago)
398 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇫🇷
masterguru
2026-10-17 01:25:28
(4 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 23:34:38
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.185.145.35 (35.145.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.145.35 (35.145.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 19:34:34.720777 2026] [security2:error] [pid 750:tid 750] [client 35.185.145.35:54474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.circle-h-growers.hemihauling.com"] [uri "/.git/config"] [unique_id "atK0it6rfyIvrMYodg5lRAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-16 21:59:42
(8 hours ago)
Auto-ban: >3000 req/min op 2026-10-16
Web App Attack
SSH
Hacking
2026-10-16 21:26:10
(8 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇩🇪
robotstxt
2026-10-16 20:37:32
(9 hours ago)
35.185.145.35 - - [16/Oct/2026:20:37:02 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Windows N ...
show more
35.185.145.35 - - [16/Oct/2026:20:37:02 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.185.145.35"
35.185.145.35 - - [16/Oct/2026:20:37:02 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.185.145.35"
35.185.145.35 - - [16/Oct/2026:20:37:02 +0000] "GET /.git/config HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.185.145.35"
35.185.145.35 - - [16/Oct/2026:20:37:03 +0000] "GET /.env HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.185.145.35"
35.185.145.35 - - [16/Oct/2026:20:37:03 +0000] "GET /.env.local HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64;
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 19:18:14
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.185.145.35 (35.145.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.145.35 (35.145.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 15:18:07.429974 2026] [security2:error] [pid 19213:tid 19213] [client 35.185.145.35:34656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cindybearce.maffiniandbearce.com"] [uri "/.git/config"] [unique_id "atJ4b088EE_tPLcT37RIuwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-16 15:59:06
(14 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
Octopuce
2026-10-16 15:36:55
(14 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 15:20:39
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.185.145.35 (35.145.185.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.145.35 (35.145.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:20:33.369089 2026] [security2:error] [pid 12947:tid 12947] [client 35.185.145.35:57452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cienmalos.hodlmoser.com"] [uri "/.git/config"] [unique_id "atJAwWTCM_VjJ7NrtOnPNQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-10-16 15:05:17
(15 hours ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇺🇸
francelink.fr
2026-10-16 14:51:04
(15 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-16T14:46:54.000Z.
Web App Attack
🇫🇷
fmomo3143
2026-10-16 14:49:10
(15 hours ago)
cie-6 : Trying access system files=>/phpinfo.php(phpinfo.php)
Hacking