๐ฌ๐ง
Greg Poulson
2026-10-20 13:05:14
(23 minutes ago)
Our website was hit by this DDOS at a rate of 115 in 5 minutes.
DDoS Attack
Web Spam
Brute-Force
๐ณ๐ฑ
Site.eu
2026-10-20 12:31:55
(56 minutes ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-20 10:24:29
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.241.116.245 (245.116.241.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.116.245 (245.116.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 06:24:25.577748 2026] [security2:error] [pid 14115:tid 14115] [client 35.241.116.245:45244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thefleetnetwork.com.thesweetfam.com"] [uri "/.git/config"] [unique_id "atdBWfoopSwoYyFwwgptJAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 09:43:25
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.241.116.245 (245.116.241.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.116.245 (245.116.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 05:43:19.384921 2026] [security2:error] [pid 27382:tid 27382] [client 35.241.116.245:53226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thefiregoddess.cain2016.org"] [uri "/.git/config"] [unique_id "atc3t44V9YcOnRO4hc6y7AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-20 09:37:53
(3 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 07:29:49
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.241.116.245 (245.116.241.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.116.245 (245.116.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 03:29:45.117919 2026] [security2:error] [pid 4366:tid 4475] [client 35.241.116.245:38754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theextraordinaryoffice.monopostoyachts.com"] [uri "/.git/config"] [unique_id "atcYacVlP5-898sfHXyAtAAAAYs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 07:00:14
(6 hours ago)
Bot / seems abusive / Apache connections: 33
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 00:13:15
(13 hours ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
masterguru
2026-10-19 23:30:15
(13 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-10-19 21:59:39
(15 hours ago)
Auto-ban: >3000 req/min op 2026-10-19
Web App Attack
SSH
Hacking
๐ฟ๐ฆ
conure.sh
2026-10-19 12:24:40
(1 day ago)
csagent: score 21.5: 404 noise floor x6, secrets grab x2; 1 domain(s) in 1s
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-19 09:40:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.241.116.245 (245.116.241.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.116.245 (245.116.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 05:40:11.224660 2026] [security2:error] [pid 15694:tid 15694] [client 35.241.116.245:50870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.swedastaxidermy.com.jeffmitchell.info"] [uri "/.git/config"] [unique_id "atXle3TxSBq8x1cX57JnOAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-19 06:15:40
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
Anonymous
2026-10-19 06:05:43
(1 day ago)
35.241.116.245 - - [19/Oct/2026:08:05:38 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows ...
show more
35.241.116.245 - - [19/Oct/2026:08:05:38 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.116.245 - - [19/Oct/2026:08:05:38 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.116.245 - - [19/Oct/2026:08:05:39 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.116.245 - - [19/Oct/2026:08:05:39 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.116.245 - - [19/Oct/2026:08:05:39 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.116.245 - - [19/Oct/
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 05:43:34
(1 day ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.241.116.245 - - \[19/Oct/2026:07:43:30 +0200\] "GET /.git/config HTTP/1.1" 301 458 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack