🇬🇧
WebNiraj
2026-11-15 08:24:46
UTC ·
(9 hours ago)
(mod_security) mod_security (id:9900002) triggered by 8.234.112.202 (IN/India/202.112.234.8.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
Brute-Force
SSH
🇫🇷
COMAITE
2026-11-15 06:20:11
UTC ·
(12 hours ago)
Suspicious URL access.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 06:08:29
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.234.112.202 (202.112.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:08:23.032291 2026] [security2:error] [pid 1942:tid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.112.202 (202.112.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 01:08:23.032291 2026] [security2:error] [pid 1942:tid 1942] [client 8.234.112.202:53012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xtcdesigns.com"] [uri "/.git/config"] [unique_id "avlMV3pN0V1OXvDfK9_vNgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Vano Ganzzz
2026-11-15 04:46:29
UTC ·
(13 hours ago)
Triggered Cloudflare WAF (firewallManaged) from IN.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (POST method)
Endpoint: /
Timestamp: 2026-11-15T04:46:29Z
Ray ID: a5ab9ccb99aedc08
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ...
show more
Triggered Cloudflare WAF (firewallManaged) from IN.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (POST method)
Endpoint: /
Timestamp: 2026-11-15T04:46:29Z
Ray ID: a5ab9ccb99aedc08
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
🇯🇵
thargal
2026-11-15 03:58:14
UTC ·
(14 hours ago)
Sensitive file probe, exploit attempt, CMS probe, path scanning: /core/phpinfo.php, /administrator/phpinfo.php, /includes/phpinfo.php, /wp-admin/phpinfo.php (233 requests in 1 min)
Hacking
Bad Web Bot
Web App Attack
🇨🇦
zXero
2026-11-15 02:32:28
UTC ·
(15 hours ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇸🇪
vaia.cloud
2026-11-14 10:40:01
UTC ·
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
2026-11-14 10:29:20
UTC ·
(1 day ago)
2026/11/14 10:29:18 [error] 3197033#3197033: *195813 [client 8.234.112.202] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `55' ) [file "/usr/ ...
show more
2026/11/14 10:29:18 [error] 3197033#3197033: *195813 [client 8.234.112.202] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `55' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yobookz.com"] [uri "/"] [unique_id "179465215838.078351"] [ref ""], client: 8.234.112.202, server: yobookz.com, request: "POST / HTTP/1.1", host: "yobookz.com"
2026/11/14 10:29:18 [error] 3197033#3197033: *195813 [client 8.234.112.202] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `55' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/RE
...
show less
Brute-Force
🇳🇱
Site.eu
2026-11-14 09:45:43
UTC ·
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
middelkoopcc
2026-11-13 06:17:01
UTC ·
(2 days ago)
2026-11-13 07:15:06 GET /.git/config [301] && 2026-11-13 07:15:06 GET /.env [301] && 2026-11-13 07:15:08 GET /.env.bak [301] && 220 more within 20 minutes
Web App Attack
🇪🇸
pipeline.es
2026-11-13 02:39:44
UTC ·
(2 days ago)
Web scanning / probing for vulnerable paths | URL: /v1/.env | Evidence: rhin.es 8.234.112.202 - - [13/Nov/2026:03:39:29 +0100] \"GET /v1/.env HTTP/1.1\" 404 205 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like G ...
show more
Web scanning / probing for vulnerable paths | URL: /v1/.env | Evidence: rhin.es 8.234.112.202 - - [13/Nov/2026:03:39:29 +0100] \"GET /v1/.env HTTP/1.1\" 404 205 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=IN | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
🇩🇪
ecs.ge
2026-11-12 23:46:19
UTC ·
(2 days ago)
Automatic Fail2Ban report from jail plesk-nginx-probes: multiple matching events detected.
Port Scan
Web App Attack
2026-11-12 23:44:50
UTC ·
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-11-12 19:30:04
UTC ·
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:30:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 8.234.112.202 (202.112.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:30:42.147813 2026] [security2:error] [pid 21781:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.112.202 (202.112.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:30:42.147813 2026] [security2:error] [pid 21781:tid 21781] [client 8.234.112.202:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yggdrasil.org"] [uri "/.git/config"] [unique_id "avYF0ne7PAw0qh1gy1vXhgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
