🇲🇾
Rizzy
2026-10-26 07:00:41
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 06:49:12
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.230.124 (124.230.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:49:02.587702 2026] [security2:error] [pid 27702:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.230.124 (124.230.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 02:49:02.587702 2026] [security2:error] [pid 27702:tid 27702] [client 35.236.230.124:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.area52designs.com"] [uri "/.htpasswd"] [unique_id "at733pGc4e7ctusWZyBRXgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-26 05:45:51
(2 days ago)
Banned by Fail2Ban on server
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 04:42:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.230.124 (124.230.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 00:41:58.264416 2026] [security2:error] [pid 12128:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.230.124 (124.230.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 00:41:58.264416 2026] [security2:error] [pid 12128:tid 12128] [client 35.236.230.124:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.antitribu.com"] [uri "/.env.production"] [unique_id "at7aFt5m8ogzVO5r5O7G0gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
proactive-noc
2026-10-26 04:20:11
(2 days ago)
Web application abuse detected 8 times recently; honeypot-j.
Hacking
Web App Attack
🇺🇸
oralunal
2026-10-26 04:08:11
(2 days ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-25 23:52:10
(2 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇪🇸
robotstxt
2026-10-25 23:38:11
(2 days ago)
35.236.230.124 - - [25/Oct/2026:23:37:18 +0000] "GET /robots.txt HTTP/2.0" 403 119 "https://anagavilan.com/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-" edge="35.236.230.12 ...
show more
35.236.230.124 - - [25/Oct/2026:23:37:18 +0000] "GET /robots.txt HTTP/2.0" 403 119 "https://anagavilan.com/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-" edge="35.236.230.124"
35.236.230.124 - - [25/Oct/2026:23:37:20 +0000] "GET /sitemap.xml HTTP/2.0" 403 20 "https://anagavilan.com/sitemap.xml" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "-" edge="35.236.230.124"
35.236.230.124 - - [25/Oct/2026:23:37:22 +0000] "GET /sitemap_index.xml HTTP/2.0" 403 20768 "https://anagavilan.com/sitemap_index.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" "-" edge="35.236.230.124"
35.236.230.124 - - [25/Oct/2026:23:37:22 +0000] "GET /wp-content/cache/autoptimize/js/autoptimize_ca8543698f99bcc6999ef289de18185c.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/
...
show less
Web App Attack
🇩🇪
bazter.pro
2026-10-25 20:55:41
(2 days ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-10-25 16:36:33
(3 days ago)
trying to access non-authorized port
Port Scan
🇬🇧
thetomtaylor.co.uk
2026-10-24 14:07:02
(4 days ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [wa01,wa02]
Hacking
SQL Injection
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-24 13:55:57
(4 days ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,wa01]
Hacking
SQL Injection
Web App Attack
🇫🇷
polarolouis
2026-10-24 10:32:14
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
updown.io
2026-10-24 09:18:29
(4 days ago)
{"level":"info","ts":1792833506.817125,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.236.230.124","remote_port":"33216","client_ip":"35.236.230.124","proto":"HTTP/2.0","method":"POST","host":"status.bizman.gr","ur ...
show more
{"level":"info","ts":1792833506.817125,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.236.230.124","remote_port":"33216","client_ip":"35.236.230.124","proto":"HTTP/2.0","method":"POST","host":"status.bizman.gr","uri":"/graphql","headers":{"Sec-Fetch-Dest":["empty"],"Referer":["https://status.bizman.gr"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Google Chrome\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Accept-Language":["en-US,en;q=0.9"],"Priority":["u=1, i"],"Sec-Ch-Ua-Platform":["\"Android\""],"Origin":["https://status.bizman.gr"],"Content-Length":["86"],"Sec-Ch-Ua-Mobile":["?1"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept":["*/*"],"Content-Type":["application/json"],"Sec-Fetch-Site":["same-origin"],"Sec-Fetch-Mode":["cors"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.bi
...
show less
DDoS Attack
Web App Attack
🇺🇸
francelink.fr
2026-10-24 03:15:27
(4 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-23T09:05:40.000Z.
Web App Attack
