๐ง๐ช
cmbplf
2026-10-20 07:07:08
(1 hour ago)
4.167 requests from abuseipdb.com blacklisted IP (1w6d22h)
Brute-Force
Bad Web Bot
๐ฌ๐ง
andypiper
2026-10-20 01:01:17
(7 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ต๐ฑ
strefapi_com
2026-10-20 00:15:01
(8 hours ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-19 23:26:53
(9 hours ago)
35.187.199.86 - - [20/Oct/2026:01:26:47 +0200] "GET / HTTP/1.1" 200 11888 "-" "Mozilla/5.0 (Macintos ...
show more
35.187.199.86 - - [20/Oct/2026:01:26:47 +0200] "GET / HTTP/1.1" 200 11888 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.199.86 - - [20/Oct/2026:01:26:47 +0200] "POST / HTTP/1.1" 200 7781 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.199.86 - - [20/Oct/2026:01:26:48 +0200] "GET /.git/config HTTP/1.1" 403 528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.199.86 - - [20/Oct/2026:01:26:48 +0200] "POST / HTTP/1.1" 200 7781 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.199.86 - - [20/Oct/2026:01:26:48 +0200] "GET /.env HTTP/1.1" 404 525 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
Hacking
๐ซ๐ท
masterguru
2026-10-19 23:17:09
(9 hours ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
๐ง๐ท
radardatelecom
2026-10-19 14:17:03
(18 hours ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-19 13:57:25
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.187.199.86 (86.199.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.199.86 (86.199.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 09:57:18.151976 2026] [security2:error] [pid 9033:tid 9116] [client 35.187.199.86:47054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bluemountainmachining.eliteproductions.tv"] [uri "/.git/config"] [unique_id "atYhvts85a0gKHRE8YFDgAAAAgA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-19 12:58:13
(19 hours ago)
35.187.199.86 - - [19/Oct/2026:14:58:09 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh ...
show more
35.187.199.86 - - [19/Oct/2026:14:58:09 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.199.86 - - [19/Oct/2026:14:58:09 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.199.86 - - [19/Oct/2026:14:58:09 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.199.86 - - [19/Oct/2026:14:58:10 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.199.86 - - [19/Oct/2026:14:58:10 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-10-19 12:13:33
(20 hours ago)
[MonOct1914:13:27.1139952026][security2:error][pid1061941:tid1062056][client35.187.199.86:0]ModSecur ...
show more
[MonOct1914:13:27.1139952026][security2:error][pid1061941:tid1062056][client35.187.199.86:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.bluecirclecapital.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"atYJZ0uCeuUIhYC8y2kZSQAAANI\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-19 11:53:47
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.187.199.86 (86.199.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.199.86 (86.199.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 07:53:43.782000 2026] [security2:error] [pid 19714:tid 19762] [client 35.187.199.86:52738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blueblahfublose.blog.joeandlane.com"] [uri "/.git/config"] [unique_id "atYEx1UcW84pkoh5H0eXYgAAAME"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
debestelapp
2026-10-19 11:50:11
(20 hours ago)
Web App Attack
๐ฌ๐ง
consul.to
2026-10-19 11:40:58
(20 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
dynamix
2026-10-19 07:39:29
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
SCHAPPY
2026-10-19 05:34:10
(1 day ago)
Malicious activity from IP detected: crowdsecurity/http-sensitive-files.
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-19 04:58:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.187.199.86 (86.199.187.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.199.86 (86.199.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 00:58:15.976678 2026] [security2:error] [pid 3573:tid 3573] [client 35.187.199.86:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blog.nyemdr.com"] [uri "/.git/config"] [unique_id "atWjZ7OrZQgdT1JzM_a6FwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack