2026-09-16 02:22:24
(1 hour ago)
XSS Attempt
Hacking
🇩🇪
Vegascosmetics
2026-09-15 19:51:09
(8 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: \.env (Match: .env)
show less
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 19:29:33
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.221.46.142 (142.46.221.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.221.46.142 (142.46.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:29:28.861233 2026] [security2:error] [pid 12399:tid 12426] [client 35.221.46.142:33164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giftsandgarland.com"] [uri "/.git/config"] [unique_id "aqmcmDWNNfK8yjUo47J6wgAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-15 17:21:33
(10 hours ago)
Try to access /.git/config
Web App Attack
🇳🇱
e.fierstra
2026-09-15 17:18:59
(10 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 08:56:31
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.221.46.142 (142.46.221.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.221.46.142 (142.46.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 04:56:26.532068 2026] [security2:error] [pid 2464:tid 2464] [client 35.221.46.142:44104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanlegion935.com"] [uri "/.git/config"] [unique_id "aqkIOpvplfXAM3yh8kiP7QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
sc user
2026-09-15 06:28:19
(21 hours ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
🇮🇱
Dolphi
2026-09-14 15:52:20
(1 day ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-14 15:45:04
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-14 15:42:56
(1 day ago)
(mod_security) mod_security (id:225170) triggered by 35.221.46.142 (142.46.221.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 35.221.46.142 (142.46.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 11:42:52.613145 2026] [security2:error] [pid 7295:tid 7295] [client 35.221.46.142:65080] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||apuntesdeinversion.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "apuntesdeinversion.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "aqgV_OLadUbr_pNUyM4MoQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack