🇬🇧
andypiper
2026-09-16 01:03:08
(32 minutes ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-09-16 00:51:46
(44 minutes ago)
Restricted File Access Attempt. Matched phrase ".aws/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇳🇱
Site.eu
2026-09-16 00:35:19
(1 hour ago)
Excessive multi-domain requests
Brute-Force
2026-09-16 00:20:39
(1 hour ago)
[Tue Sep 15 20:16:57.672901 2026] [access_compat:error] [pid 5526] [client 35.202.24.179:18660] AH01 ...
show more
[Tue Sep 15 20:16:57.672901 2026] [access_compat:error] [pid 5526] [client 35.202.24.179:18660] AH01797: client denied by server configuration: /home/taxbrackets/public_html/public/server-status
[Tue Sep 15 20:16:58.774523 2026] [authz_core:error] [pid 5550] [client 35.202.24.179:17970] AH01630: client denied by server configuration: /home/taxbrackets/public_html/public/.htpasswd
[Tue Sep 15 20:17:58.484341 2026] [authz_core:error] [pid 6232] [client 35.202.24.179:16622] AH01630: client denied by server configuration: /home/taxrates-legacy/public_html/.htpasswd
[Tue Sep 15 20:20:29.658583 2026] [access_compat:error] [pid 7379] [client 35.202.24.179:9853] AH01797: client denied by server configuration: /home/taxassessors/public_html/server-status
[Tue Sep 15 20:20:31.330527 2026] [authz_core:error] [pid 7499] [client 35.202.24.179:9874] AH01630: client denied by server configuration: /home/taxassessors/public_html/.htpasswd
...
show less
Brute-Force
🇫🇷
✨
2026-09-16 00:09:18
(1 hour ago)
Domain : tavistockbrewery.com
Rule : hack
2026-09-16 00:07:55 ***hidden-privacy*** GET /phpinfo.php ...
show more
Domain : tavistockbrewery.com
Rule : hack
2026-09-16 00:07:55 ***hidden-privacy*** GET /phpinfo.php - 443 - 35.202.24.179 HTTP/2 Mozilla/5.0 (compatible; MistralAI-User/1.0; https://mistral.ai/) - tavistockbrewery.com 301 0 0 451 396 99 - -
show less
Hacking
SQL Injection
Brute-Force
🇺🇸
TPI-Abuse
2026-09-16 00:09:10
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.202.24.179 (179.24.202.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.202.24.179 (179.24.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:09:06.954456 2026] [security2:error] [pid 19651:tid 19651] [client 35.202.24.179:60844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tavo.info"] [uri "/%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env"] [unique_id "aqneIqQ2eQxA-Y9f5coS7wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇳
evicky2002
2026-09-16 00:02:04
(1 hour ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇺🇸
entangled_mongoose
2026-09-15 23:22:06
(2 hours ago)
Probed /wp-json.
Web App Attack
🇬🇧
Apache
2026-09-15 22:38:01
(2 hours ago)
(mod_security) mod_security (id:930100) triggered by 35.202.24.179 (US/United States/179.24.202.35.b ...
show more
(mod_security) mod_security (id:930100) triggered by 35.202.24.179 (US/United States/179.24.202.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇳🇱
debestelapp
2026-09-15 22:35:20
(3 hours ago)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-15 21:59:15
(3 hours ago)
Auto-ban: >3000 req/min op 2026-09-15
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-15 21:46:53
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.202.24.179 (179.24.202.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.202.24.179 (179.24.202.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:46:45.944668 2026] [security2:error] [pid 16488:tid 16488] [client 35.202.24.179:33824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taschstudios.com"] [uri "/appearance/../../.env"] [unique_id "aqm8xSdmKuVKtPYNviQHLwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-15 20:50:04
(4 hours ago)
suspicious request in access.log
Web App Attack
🇧🇷
dominioz
2026-09-15 20:47:37
(4 hours ago)
2026-09-15 20:46:42 GET /settings.json - - 35.202.24.179 HTTP/2 DuckAssistBot/1.1+(https://duckduckg ...
show more
2026-09-15 20:46:42 GET /settings.json - - 35.202.24.179 HTTP/2 DuckAssistBot/1.1+(https://duckduckgo.com/duckassistbot) - 301 466
2026-09-15 20:46:42 GET /config.json - - 35.202.24.179 HTTP/2 Mozilla/5.0+(compatible;+MistralAI-User/1.0;++https://mistral.ai/) - 301 466
2026-09-15 20:46:42 GET /config.js - - 35.202.24.179 HTTP/2 Mozilla/5.0+(compatible;+Hunyuan/1.0;++https://hunyuan.tencent.com/) - 301 466
2026-09-15 20:46:43 GET /configuration.js - - 35.202.24.179 HTTP/2 Mozilla/5.0+(compatible;+Kimi-SearchBot/1.0;++https://kimi.ai/) - 301 466
2026-09-15 20:46:43 GET /settings.js - - 35.202.24.179 HTTP/2 Mozilla/5.0+(compatible;+YiBot/1.0;++https://01.ai/) - 301 466
2026-09-15 20:46:43 GET /config.json.js - - 35.202.24.179 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+PerplexityBot/1.0;++https://perplexity.ai/perplexitybot) - 301 466
2026-09-15 20:46:44 GET /credentials.js - - 35.202.24.179 HTTP/2 Mozilla/5.0+(compatible;+Google-Extended;++http://www.google.com/
...
show less
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-15 20:35:25
(5 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack