🇲🇽
octageeks.com
2026-09-16 04:06:56
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇨🇿
SystemAdmin
2026-09-16 03:55:24
(1 day ago)
Doing bad things...
Web App Attack
2026-09-16 03:07:07
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇴
jad-abuse
2026-09-16 03:06:47
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup, server_status. Observed by 1 sensor(s); 169 hits.
show less
Web App Attack
2026-09-16 02:51:40
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-15 22:04:00
(2 days ago)
Auto-ban: >3000 req/min op 2026-09-15
Web App Attack
SSH
Hacking
🇫🇷
dynamix
2026-09-15 14:59:55
(2 days ago)
Multiple WAF Violations
Web App Attack
🇬🇧
gws-hostmaster
2026-09-15 12:48:51
(2 days ago)
ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;N ...
show more
ModSecurity OWASP CRS (Anomaly Score: 50): JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;PHP Injection Attack: Variable Access Found;Remote Command Execution: Direct Unix Command Execution;Remote Command Execution: Unix Shell Expression Found;Restricted File Access Attempt;SQL Injection Attack: SQL function name detected;URL file extension is restricted by policy;
show less
Web App Attack
🇩🇪
jeannelboutique
2026-09-15 11:57:00
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.187.191.92 (BE/Belgium/92.191.187.35 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.187.191.92 (BE/Belgium/92.191.187.35.bc.googleusercontent.com)
show less
SQL Injection
🇳🇱
Site.eu
2026-09-15 10:32:35
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-15 10:19:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.191.92 (92.191.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.191.92 (92.191.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:19:51.461546 2026] [security2:error] [pid 771431:tid 771431] [client 35.187.191.92:50012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lightupaustralia.com"] [uri "/.git/config"] [unique_id "aqkbx-z6M2ODSxgdqUVxuwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-15 08:26:57
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 07:37:09
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.191.92 (92.191.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.191.92 (92.191.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:37:01.861770 2026] [security2:error] [pid 29661:tid 29661] [client 35.187.191.92:50414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jdsqrd.com"] [uri "/.git/config"] [unique_id "aqj1nY7YFXW6I3XmNTo5gQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 04:44:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.191.92 (92.191.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.191.92 (92.191.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 00:44:09.652903 2026] [security2:error] [pid 10976:tid 10976] [client 35.187.191.92:56000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jdhunterlaw.com"] [uri "/.git/config"] [unique_id "aqjNGcqRTglsydZVzSQWbAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 03:57:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.191.92 (92.191.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.191.92 (92.191.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 23:57:49.720853 2026] [security2:error] [pid 17666:tid 17666] [client 35.187.191.92:39798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jdeloa.com"] [uri "/.git/config"] [unique_id "aqjCPcczh0yiYKXXsHvY2QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack