🇳🇱
homeshowdomain.nl
2026-11-03 23:03:54
UTC ·
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-02.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-03 21:12:26
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.165.15 (15.165.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:12:22.242428 2026] [security2:error] [pid 8244:tid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.165.15 (15.165.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:12:22.242428 2026] [security2:error] [pid 8244:tid 8244] [client 35.187.165.15:54858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "godscreationobservatory.com"] [uri "/.git/config"] [unique_id "aupONr52YBroFoVi8ZatdQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 20:02:24
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.165.15 (15.165.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:02:21.043684 2026] [security2:error] [pid 30761:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.165.15 (15.165.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:02:21.043684 2026] [security2:error] [pid 30761:tid 30761] [client 35.187.165.15:43982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gods-law.com"] [uri "/.git/config"] [unique_id "auo9zXWGOGR4mkxTiIO6NAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-11-03 19:14:45
UTC ·
(2 days ago)
URL Probing: /web/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 17:53:34
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.165.15 (15.165.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:53:29.467422 2026] [security2:error] [pid 28012:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.165.15 (15.165.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:53:29.467422 2026] [security2:error] [pid 28012:tid 28012] [client 35.187.165.15:55146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "godplusus.com"] [uri "/.git/config"] [unique_id "auofmY77UPLvXzdBOGxcYwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 12:22:44
UTC ·
(2 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇫🇷
mon0
2026-11-03 09:26:52
UTC ·
(2 days ago)
Blocked by IDS: crowdsecurity/appsec-vpatch (2 events)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 03:48:45
UTC ·
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 35.187.165.15 (15.165.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:48:41.893722 2026] [security2:error] [pid 21099:tid ...
show more
(mod_security) mod_security (id:949110) triggered by 35.187.165.15 (15.165.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:48:41.893722 2026] [security2:error] [pid 21099:tid 21099] [client 35.187.165.15:45388] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hallemann.com"] [uri "/.git/config"] [unique_id "aulZmZcuwXIKex2JncjDWgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 00:33:40
UTC ·
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇸🇪
vaia.cloud
2026-11-03 00:15:12
UTC ·
(3 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-02 22:59:20
UTC ·
(3 days ago)
Auto-ban: >3000 req/min op 2026-11-02
Web App Attack
SSH
Hacking
2026-11-02 22:18:53
UTC ·
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-11-02 20:45:40
UTC ·
(3 days ago)
20 attempts against mh-misbehave-ban on pf221105
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-11-02 12:07:17
UTC ·
(3 days ago)
Scanning for web/db/file exploits on www.gerssenvanschaik.nl
SQL Injection
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-02 11:15:03
UTC ·
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
