๐ซ๐ฎ
paissangroup
2026-10-16 19:40:45
(51 minutes ago)
Multiple WAF Violations
Web App Attack
๐ง๐ท
Host One
2026-10-16 17:34:46
(2 hours ago)
Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 differen ...
show more
Web vulnerability scanning: requests to known exploit/probe paths. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 80, 443 (HTTP/HTTPS). Requested paths: /info.php, /phpinfo, /test.php, /admin/phpinfo.php, /phpinfo.php. Automated report.
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-16 16:47:52
(3 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 16:17:43
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:17:37.962218 2026] [security2:error] [pid 27538:tid 27602] [client 35.229.166.97:50990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paidsearchconsulting.com"] [uri "/.git/config"] [unique_id "atJOIRRDOLrQaCejYOQKcQAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-16 15:44:15
(4 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 14:51:12
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:51:06.065071 2026] [security2:error] [pid 12345:tid 12345] [client 35.229.166.97:54472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pagewideprinting.computersraleigh.com"] [uri "/.git/config"] [unique_id "atI52jltL1sld2DZ_qnjiAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-16 14:14:13
(6 hours ago)
Multiple WAF Violations
Web App Attack
๐ฎ๐น
VHosting
2026-10-16 11:20:04
(9 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-10-16 10:39:05
(9 hours ago)
(modsec_attack) srv104 ModSecurity attack 35.229.166.97 (TW/Taiwan/97.166.229.35.bc.googleuserconten ...
show more
(modsec_attack) srv104 ModSecurity attack 35.229.166.97 (TW/Taiwan/97.166.229.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-16 10:05:02
(10 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-10-16 07:41:56
(12 hours ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-16 07:32:46
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:32:41.654246 2026] [security2:error] [pid 25286:tid 25286] [client 35.229.166.97:46108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.packersandribsbbq.blackjobsnetwork.com"] [uri "/.git/config"] [unique_id "atHTGVuXmw52AwZ0g7POrwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 06:58:30
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 02:58:24.090264 2026] [security2:error] [pid 1796:tid 1796] [client 35.229.166.97:51198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pack88.mvscouts.org"] [uri "/.git/config"] [unique_id "atHLEG82ZkknKe8j3VsZegAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
SLSLLC
2026-10-16 06:51:06
(13 hours ago)
35.229.166.97 - - [16/Oct/2026:06:51:06 +0000] "GET /.env HTTP/2.0" 403 1881 "-" "Mozilla/5.0 (X11; ...
show more
35.229.166.97 - - [16/Oct/2026:06:51:06 +0000] "GET /.env HTTP/2.0" 403 1881 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 05:19:49
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.166.97 (97.166.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:19:41.774119 2026] [security2:error] [pid 14623:tid 14654] [client 35.229.166.97:56570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pacific-biologics.fevini.com"] [uri "/.git/config"] [unique_id "atGz7V2JqoMxXwQVKN1BwAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack