🇩🇪
FD-IX
2026-09-05 02:16:58
(16 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
Anonymous
2026-09-04 22:43:25
(20 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
homeshowdomain.nl
2026-09-04 22:02:58
(21 hours ago)
Auto-ban: >3000 req/min op 2026-09-04
Web App Attack
SSH
Hacking
🇺🇸
JustMeHere
2026-09-04 19:52:02
(23 hours ago)
[Fri Sep 04 15:51:57.492088 2026] [security2:error] [pid 825:tid 988] [client 35.231.60.63:50364] Mo ...
show more
[Fri Sep 04 15:51:57.492088 2026] [security2:error] [pid 825:tid 988] [client 35.231.60.63:50364] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vpn.yorknation.com"] [uri "/var/www/.git/config"] [unique_id "apshXf-bTfvKvUzCbQGGbAAAAI8"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 19:35:08
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 15:34:59.258649 2026] [security2:error] [pid 22326:tid 22326] [client 35.231.60.63:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.local639.com"] [uri "/html/.git/config"] [unique_id "apsdY3uhTXvRqKgO1kcmDQAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-04 17:26:09
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mnsf
2026-09-04 17:05:48
(1 day ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇦🇺
AWW-Admin
2026-09-04 14:47:32
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 35.231.60.63 (US/United States/63.60.23 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.231.60.63 (US/United States/63.60.231.35.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-09-04 14:30:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:30:46.386387 2026] [security2:error] [pid 25648:tid 25648] [client 35.231.60.63:58498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tv.grancanariaholidays.com"] [uri "/api/.git/config"] [unique_id "aprWFj_3YRD3_h3BAYXvOQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:16:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:16:31.413168 2026] [security2:error] [pid 30712:tid 30712] [client 35.231.60.63:52638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "insidepublications.com"] [uri "/.git/config"] [unique_id "apqoj7JMZA8qOTWT-F25agAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-04 11:15:03
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:43:25
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:43:17.560957 2026] [security2:error] [pid 413:tid 413] [client 35.231.60.63:39760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ttlatl.com"] [uri "/app/.git/config"] [unique_id "apqStcAP_aQ7xYzz3z3wpQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-09-04 05:14:36
(1 day ago)
12 attacks on VC URLs:
GET /app/.git/config HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-09-04 05:07:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.60.63 (63.60.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 01:07:36.640229 2026] [security2:error] [pid 6278:tid 6278] [client 35.231.60.63:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "postmaster.perl-photo.com"] [uri "/site/.git/config"] [unique_id "appSGGfGxEnqcKLJJDsnbgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-09-04 04:55:36
(1 day ago)
crowdsecurity/http-sensitive-files
Web App Attack