๐ฎ๐ณ
evicky2002
2026-09-23 06:00:01
(1 day ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ซ๐ท
SpaceHost-Server
2026-09-22 22:25:31
(1 day ago)
Brute-Force
Web App Attack
๐ฉ๐ช
ใใใจใใใใ
2026-09-22 05:14:35
(2 days ago)
Automated web attack source per OWASP CRS classification against a self-hosted nginx web service. . ...
show more
Automated web attack source per OWASP CRS classification against a self-hosted nginx web service. . Self-hosted service; no site identifiers included.
show less
Port Scan
Web App Attack
๐บ๐ธ
[email protected]
2026-09-21 16:50:42
(2 days ago)
CrowdSec ban: crowdsecurity/unifi-flood-detection (duration: 71h59m49s)
Port Scan
๐ฒ๐พ
Rizzy
2026-09-21 06:21:03
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐จ๐ฆ
polycoda
2026-09-21 04:28:12
(3 days ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - ๐ก Port Scan (Non Decay-Based) - โช๏ธ Excessive ...
show more
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - ๐ก Port Scan (Non Decay-Based) - โช๏ธ Excessive 30X Errors (Decay-Based)
show less
Port Scan
Hacking
Bad Web Bot
Web App Attack
2026-09-21 04:12:56
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-21 03:52:25
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 23:52:18.733148 2026] [security2:error] [pid 9148:tid 9148] [client 35.252.225.141:47660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.urban-tails.com"] [uri "/wp-config.php.old"] [unique_id "arCp8vvYvyOoKYHy_7hLRgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-21 03:22:39
(3 days ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
big-cloud.nl
2026-09-21 03:10:43
(3 days ago)
Try to access /ssl/server.key
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 01:18:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 21:18:14.229156 2026] [security2:error] [pid 12941:tid 12941] [client 35.252.225.141:49464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.upascendia.com"] [uri "/.git/config"] [unique_id "arCF1hjNfc9FwNKxNJ518AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 00:28:41
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 20:28:37.297012 2026] [security2:error] [pid 24433:tid 24433] [client 35.252.225.141:54376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.astariafilms.com"] [uri "/infra/.env"] [unique_id "arB6NTM1ITWKvxn8xQQG3QAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Marc
2026-09-21 00:04:17
(3 days ago)
35.252.225.141 - - [21/Sep/2026:02:04:17 +0200] "GET /.bashrc HTTP/2.0" 404 291 "-" "Mozilla/5.0 (co ...
show more
35.252.225.141 - - [21/Sep/2026:02:04:17 +0200] "GET /.bashrc HTTP/2.0" 404 291 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 35.252.225.141 - - [21/Sep/2026:02:04:17 +0200] "GET /rclone.conf HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 35.252.225.141 - - [21/Sep/2026:02:04:17 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-20 23:43:21
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:43:18.535515 2026] [security2:error] [pid 32336:tid 32336] [client 35.252.225.141:38002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lmffl.com"] [uri "/.env.backup"] [unique_id "arBvlmYvT5I8S2az2HnLIwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 23:22:01
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.225.141 (141.225.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:21:57.795396 2026] [security2:error] [pid 11366:tid 11481] [client 35.252.225.141:42804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tylergrimes.com"] [uri "/.git/HEAD"] [unique_id "arBqlRnaBE6kEOuHqfs1IgAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack