🇮🇹
paoloartone
2026-11-14 06:00:24
UTC ·
(2 hours ago)
Reverse proxy TCO: 247 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 13/11/2026.
Web App Attack
Hacking
Port Scan
🇧🇪
boxed-it
2026-11-13 23:40:40
UTC ·
(8 hours ago)
GET /.git/config (Tarpitted for 6h24m34s, wasted 1.32MB)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-13 23:01:05
UTC ·
(9 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.
Web App Attack
SSH
Hacking
🇩🇪
rh24
2026-11-13 19:48:26
UTC ·
(12 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.228.43.239 (FI/Finland/239.43.228.35.bc.googleusercontent.com): (CF_ENABLE)
SQL Injection
Anonymous
2026-11-13 19:20:33
UTC ·
(12 hours ago)
Automated abuse report by SpeedIT Security Team
Brute-Force
SSH
🇩🇪
Mr-Money
2026-11-13 19:15:49
UTC ·
(13 hours ago)
scenario: crowdsecurity/http-sensitive-files - events: 5
Web App Attack
Hacking
🇧🇷
radardatelecom
2026-11-13 16:55:04
UTC ·
(15 hours ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 16:02:10
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.228.43.239 (239.43.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:02:05.197511 2026] [security2:error] [pid 18781:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.43.239 (239.43.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:02:05.197511 2026] [security2:error] [pid 18781:tid 18781] [client 35.228.43.239:34440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.katisfaction.dannyvanrijswijk.com"] [uri "/.git/config"] [unique_id "avc0fVcdJMXdXIPm7sJTSgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-13 14:18:19
UTC ·
(18 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 13:31:34
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.228.43.239 (239.43.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:31:29.446340 2026] [security2:error] [pid 6208:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.43.239 (239.43.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 08:31:29.446340 2026] [security2:error] [pid 6208:tid 6208] [client 35.228.43.239:36338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kathiepontinen.seizetheseason.com"] [uri "/.git/config"] [unique_id "avcRMQckCVwrA8ilM9vR7QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 12:26:54
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.228.43.239 (239.43.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:26:49.143917 2026] [security2:error] [pid 31001:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.43.239 (239.43.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:26:49.143917 2026] [security2:error] [pid 31001:tid 31001] [client 35.228.43.239:36184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kateshendge.com.sigi.biz"] [uri "/.git/config"] [unique_id "avcCCXkDS29GDCJuH5uQrAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 11:46:17
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.228.43.239 (239.43.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:46:12.585601 2026] [security2:error] [pid 27027:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.228.43.239 (239.43.228.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 06:46:12.585601 2026] [security2:error] [pid 27027:tid 27027] [client 35.228.43.239:42376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.katemcleod.kathrynmcbride.com"] [uri "/.git/config"] [unique_id "avb4hHiFpX3AsAd-hPmbAQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ams_sec_user
2026-11-13 11:05:17
UTC ·
(21 hours ago)
Automated requests against a hosted website: 226 requests between 10:00 and 10:59 UTC; 209 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.git/config). Reported automatically.
Hacking
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-13 08:31:24
UTC ·
(23 hours ago)
353 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
Anonymous
2026-11-13 08:08:13
UTC ·
(1 day ago)
Bot / seems abusive / Apache connections: 20
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack