🇩🇪
Vegascosmetics
2026-10-27 14:07:22
(1 hour ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git)
show less
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 11:58:15
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.52.55 (55.52.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.52.55 (55.52.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 07:58:08.285646 2026] [security2:error] [pid 25653:tid 25653] [client 35.189.52.55:60730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.baseball.jpwatters.net"] [uri "/.git/config"] [unique_id "auCR0KtgbR7eSTsEcLvZZwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-27 11:49:44
(3 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇳🇱
ConsulHosting
2026-10-27 11:37:49
(4 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
EGP Abuse Dept
2026-10-27 10:14:22
(5 hours ago)
Scanning for web/db/file exploits on www.barthugooptiek.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 09:46:04
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.52.55 (55.52.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.52.55 (55.52.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 05:45:57.206783 2026] [security2:error] [pid 1109:tid 1209] [client 35.189.52.55:45600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barstow-station.com.ceol.us"] [uri "/.git/config"] [unique_id "auBy1Wpy1FEC-SdAzzruzQAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-27 08:56:43
(6 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 08:12:36
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.189.52.55 (55.52.189.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.189.52.55 (55.52.189.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 04:12:30.825993 2026] [security2:error] [pid 22549:tid 22549] [client 35.189.52.55:35918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.barpubsigns.com.piratecostumesonline.com"] [uri "/.git/config"] [unique_id "auBc7ga2wEkgNcUD9Nxt3wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ams_sec_user
2026-10-27 08:05:16
(7 hours ago)
Automated requests against a hosted website: 226 requests between 07:00 and 07:59 UTC; 209 probes fo ...
show more
Automated requests against a hosted website: 226 requests between 07:00 and 07:59 UTC; 209 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.git/config). Reported automatically.
show less
Hacking
Bad Web Bot
Web App Attack
🇪🇸
Francisco Vallejo
2026-10-27 06:43:13
(9 hours ago)
[Tue Oct 27 07:43:12.788907 2026] [security2:error] [pid 965114:tid 965166] [client 35.189.52.55:524 ...
show more
[Tue Oct 27 07:43:12.788907 2026] [security2:error] [pid 965114:tid 965166] [client 35.189.52.55:52464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.barluna.es"] [uri "/"] [unique_id "auBIAC5iLTr7BAUw8UuDfwAAAMY"]
[Tue Oct 27 07:43:13.088431 2026] [security2:error] [pid 965114:tid 965167] [client 35.189.52.55:52464] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.8"] [tag "applica
...
show less
Brute-Force
SSH
🇩🇪
Bedios GmbH
2026-10-27 05:06:43
(10 hours ago)
Scanning for exposed credentials and private keys.
Hacking
🇺🇸
MatCat
2026-10-27 05:05:13
(10 hours ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
🇳🇱
WeCloudit-Anti-Abuse
2026-10-27 04:38:31
(11 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇨🇦
Anytech
2026-10-27 03:44:43
(12 hours ago)
Blocked by ConnMonitor
Web App Attack
🇬🇧
consul.to
2026-10-27 02:07:31
(13 hours ago)
Web attack/malicious scanning detected
Web App Attack