🇲🇽
octageeks.com
2026-09-30 04:18:15
(12 hours ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
SLSLLC
2026-09-29 20:53:27
(19 hours ago)
35.189.35.123 - - [29/Sep/2026:20:53:26 +0000] "GET /.env HTTP/1.1" 403 2108 "-" "Mozilla/5.0 (Macin ...
show more
35.189.35.123 - - [29/Sep/2026:20:53:26 +0000] "GET /.env HTTP/1.1" 403 2108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-28 22:33:21
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 21:03:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:03:48.700324 2026] [security2:error] [pid 5423:tid 5423] [client 35.189.35.123:55832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lobstersupplier.wholesalelivelobsters.com"] [uri "/.git/config"] [unique_id "arrWNOa3eBvA-LbuxCEBzwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 15:33:52
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:33:45.489152 2026] [security2:error] [pid 21321:tid 21321] [client 35.189.35.123:33190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.carlsvoice.com"] [uri "/.git/config"] [unique_id "arfl2VtNA2sDSDr4uRuS-gAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 14:54:28
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:54:24.382380 2026] [security2:error] [pid 19411:tid 19411] [client 35.189.35.123:53036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.carlosmol.com"] [uri "/.git/config"] [unique_id "arfcoHhedXt8JiJK0e2TbwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-26 10:49:16
(4 days ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
homeshowdomain.nl
2026-09-25 22:00:48
(4 days ago)
Auto-ban: >3000 req/min op 2026-09-25
Web App Attack
SSH
Hacking
2026-09-25 06:39:09
(5 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-09-25 06:23:29
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
maxxsense
2026-09-25 03:00:57
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.189.35.123 (AU/Australia/123.35.189. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.189.35.123 (AU/Australia/123.35.189.35.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-24 20:06:18
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 16:06:14.377469 2026] [security2:error] [pid 15806:tid 15806] [client 35.189.35.123:36906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whatisozone.mroxygen.org"] [uri "/.git/config"] [unique_id "arWCtnnxB2EZMINR_mu2dQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-24 03:37:34
(6 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 09:21:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.35.123 (123.35.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:21:12.033527 2026] [security2:error] [pid 23294:tid 23294] [client 35.189.35.123:34392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xhumanlikerobots.com"] [uri "/.git/config"] [unique_id "arJIiIIbhsZWis_THZ-FQwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-21 02:54:48
(1 week ago)
Web attack/malicious scanning detected
Web App Attack