π©πͺ
IVski.com
2026-10-18 05:21:03
(3 days ago)
IVski WAF | Sensitive file probe detected - looking for .env
Hacking
Brute-Force
Web App Attack
π³π±
homeshowdomain.nl
2026-10-17 21:59:35
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-16.
show less
Web App Attack
SSH
Hacking
π³π±
Site.eu
2026-10-17 09:46:04
(4 days ago)
Excessive multi-domain requests
Brute-Force
π«π·
masterguru
2026-10-17 09:31:48
(4 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
π³π±
homeshowdomain.nl
2026-10-16 21:59:50
(4 days ago)
Auto-ban: >3000 req/min op 2026-10-16
Web App Attack
SSH
Hacking
Anonymous
2026-10-16 20:12:25
(4 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 15:38:36
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:38:31.456846 2026] [security2:error] [pid 1396:tid 1396] [client 35.236.206.205:41812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rntoday.danged.com"] [uri "/.git/config"] [unique_id "atJE90qUtbve3C-HMwIG3AAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
agenciahypelab.com.br
2026-10-16 14:23:49
(4 days ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
πΊπΈ
TPI-Abuse
2026-10-16 13:48:08
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:48:04.158974 2026] [security2:error] [pid 32252:tid 32270] [client 35.236.206.205:56490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rmoeis.wwwhst.com"] [uri "/.git/config"] [unique_id "atIrFIRr5_eT4PScjg1uVQAAANA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 13:17:09
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:17:06.882638 2026] [security2:error] [pid 24806:tid 24806] [client 35.236.206.205:39106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rmhpolarracing.com.wolter-hausser.com"] [uri "/.git/config"] [unique_id "atIj0iXentUnW1unUrtP1wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
Rocky Mountain Bioengineering Symposium
2026-10-16 12:40:24
(5 days ago)
35.236.206.205 - - [16/Oct/2026:06:40:24 -0600] "GET /.git/config HTTP/1.1" 301 507 "-" "Mozilla/5.0 ...
show more
35.236.206.205 - - [16/Oct/2026:06:40:24 -0600] "GET /.git/config HTTP/1.1" 301 507 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 11:14:21
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:14:17.615433 2026] [security2:error] [pid 30628:tid 30628] [client 35.236.206.205:55292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rlarms.dc406.org"] [uri "/.git/config"] [unique_id "atIHCXB3O33Z0Fr2beIP0AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π§πΎ
lns.bz
2026-10-16 10:39:24
(5 days ago)
Too many 404 requests [BY]
Web App Attack
π©πͺ
FD-IX
2026-10-16 09:50:38
(5 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 09:22:54
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.206.205 (205.206.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:22:50.492976 2026] [security2:error] [pid 6590:tid 6590] [client 35.236.206.205:35266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rjohnson.thenewplace.org"] [uri "/.git/config"] [unique_id "atHs6u4os8Z67H-YsHRxuwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack