🇮🇹
VHosting
2026-10-27 19:55:04
(32 minutes ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-27 18:14:21
(2 hours ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.246.52.142 - - [27/Oct/2026:19:14:07 +0100] "GET /.git/config HTTP/1.1" 403 2108 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-27 17:12:17
(3 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 15:10:36
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.52.142 (142.52.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.52.142 (142.52.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 11:10:33.083764 2026] [security2:error] [pid 20906:tid 20906] [client 35.246.52.142:45710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.velocitymechcrm.com.jbcllcnet.com"] [uri "/.git/config"] [unique_id "auC-6SNe2YhgV8hHdlKKOwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
j-tap
2026-10-27 13:49:31
(6 hours ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
🇳🇱
Savvii
2026-10-27 11:47:06
(8 hours ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-10-27 10:51:18
(9 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git)
show less
Hacking
Brute-Force
Web App Attack
🇬🇧
Yosi
2026-10-27 10:00:28
(10 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇨🇦
Etienne Pilon
2026-10-27 09:49:19
(10 hours ago)
Observed 2026-10-27T09:49:19+00:00 to 2026-10-27T09:51:20+00:00 (UTC). HTTP: 406 requests to sensiti ...
show more
Observed 2026-10-27T09:49:19+00:00 to 2026-10-27T09:51:20+00:00 (UTC). HTTP: 406 requests to sensitive web paths. Permanent inbound IP block verified by Observatory (runtime and persistent firewall rule). Observed activity only; this is not proof of compromise.
show less
Web App Attack
🇩🇪
Hazzard
2026-10-27 07:19:46
(13 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-10-27 06:01:03
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.52.142 (142.52.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.52.142 (142.52.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 02:00:59.035215 2026] [security2:error] [pid 1601:tid 1687] [client 35.246.52.142:34348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vcschief.pwrcoupling.com"] [uri "/.git/config"] [unique_id "auA-G5u89S36FG2rBB2sPAAAAgc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
UltimWeb
2026-10-27 05:23:19
(15 hours ago)
Fail2ban_apache-auth
Brute-Force
Web App Attack
2026-10-27 04:52:41
(15 hours ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 03:19:00
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.52.142 (142.52.246.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.52.142 (142.52.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:18:52.883014 2026] [security2:error] [pid 28046:tid 28046] [client 35.246.52.142:36060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vaxd.cs-mall.com"] [uri "/.git/config"] [unique_id "auAYHK2Ij5JQKfj3EmZ-YAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-10-27 01:32:59
(18 hours ago)
web exploits
Hacking
Exploited Host
Web App Attack