🇦🇺
A.i.D.A.N.N
2026-09-16 13:07:47
(1 hour ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 12:56:14
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:56:08.383778 2026] [security2:error] [pid 27968:tid 27968] [client 35.231.62.125:37934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.niftythrifty.mykidsdaycare.net"] [uri "/.git/config"] [unique_id "aqqR6LFWDL2FFP6-AAqzcQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-16 12:48:02
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 23:04:47
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:04:41.408989 2026] [security2:error] [pid 12524:tid 12529] [client 35.231.62.125:44786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notedstories.com.morganswarsong.com"] [uri "/.git/config"] [unique_id "aqnPCblj8sLycv4Ch6F8AAAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 22:15:17
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:15:11.355683 2026] [security2:error] [pid 24799:tid 24821] [client 35.231.62.125:47900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notary.brucejoell.com"] [uri "/.git/config"] [unique_id "aqnDb3fDM4kuQv0mgPqSpwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
iulianh
2026-09-15 22:13:42
(16 hours ago)
80,443
Brute-Force
SSH
🇳🇱
Alt255
2026-09-15 21:59:43
(16 hours ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.231.62.125 - - [15/Sep/2026:23:59:42 +0200] "GET /.git/config HTTP/1.1" 200 2828 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:53:46
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:53:41.470963 2026] [security2:error] [pid 1311:tid 1311] [client 35.231.62.125:53092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notarileconsulting.silvermoonherbals.com"] [uri "/.git/config"] [unique_id "aqm-ZVpyWTAPj4lR3pGqmgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:25:09
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:25:04.147799 2026] [security2:error] [pid 21213:tid 21213] [client 35.231.62.125:55578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notapublica.carpascarpe.com"] [uri "/.git/config"] [unique_id "aqm3sIrwC9_YGwR9DoyfPwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-15 21:24:14
(17 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 21:06:26
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.62.125 (125.62.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:06:19.654659 2026] [security2:error] [pid 512:tid 512] [client 35.231.62.125:40704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notahotshot.zombiekillabob.com"] [uri "/.git/config"] [unique_id "aqmzSwVtHTmy3NdCcZwV1AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-15 20:25:08
(18 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-15 19:59:46
(18 hours ago)
Multiple WAF Violations
Web App Attack
🇮🇹
VHosting
2026-09-15 19:45:04
(18 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇦🇺
rubixstudios
2026-09-15 17:43:02
(20 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack