🇺🇸
chronos
2026-11-02 16:31:00
UTC ·
(1 week ago)
[AUTORAVALT][[02/11/2026 - 13:30:59 -03:00 UTC]
Attack from [Google LLC]
[8.235.86.61][61.86.235.8.bc.googleusercontent.com]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit i ...
show more
[AUTORAVALT][[02/11/2026 - 13:30:59 -03:00 UTC]
Attack from [Google LLC]
[8.235.86.61][61.86.235.8.bc.googleusercontent.com]
Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin a]
...
show less
Hacking
Web App Attack
🇬🇧
Mendip_Defender
2026-11-02 16:23:07
UTC ·
(1 week ago)
[02/Nov/2026:16:23:07.338984 +0000] aui463lB_VGOIm0HUS-GQwAAABQ 8.235.86.61 53928 188.246.206.60 7081
[02/Nov/2026:16:23:07.990411 +0000] aui462K4tVdgMiY1kxvVPgAAAE0 8.235.86.61 54112 188.246.206.60 7081
...
Brute-Force
🇺🇸
Mundo Bueno
2026-11-02 13:42:34
UTC ·
(1 week ago)
[ISILIA Protection v2.3] Tentative d'accès: /public../.env [RATE LIMITED - 1800s quarantine] | Pays: US | UA: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 13:27:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:27:49.911508 2026] [security2:error] [pid 23128:tid 2312 ...
show more
(mod_security) mod_security (id:210492) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:27:49.911508 2026] [security2:error] [pid 23128:tid 23128] [client 8.235.86.61:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.empoweruamerica.org"] [uri "/.env.config"] [unique_id "auiP1UbHDgIaMzUflFoCJQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-11-02 12:59:15
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 8.235.86.61 (US/United States/61.86.235.8.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 12:01:59
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:01:53.728008 2026] [security2:error] [pid 8799:tid 8799] ...
show more
(mod_security) mod_security (id:210492) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:01:53.728008 2026] [security2:error] [pid 8799:tid 8799] [client 8.235.86.61:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.365soft.top"] [uri "/.env.credentials"] [unique_id "auh7sW_sNPFgSC8s2wbNWQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-11-02 11:52:59
UTC ·
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇦🇺
clapper
2026-11-02 11:09:13
UTC ·
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 8.235.86.61 (US/United States/61.86.235.8.bc.googleusercontent.com): 5 in the last 600 secs; ID: rub
Brute-Force
Bad Web Bot
🇫🇷
regishoussin
2026-11-02 10:40:59
UTC ·
(1 week ago)
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-11-02 10:40 UTC.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 10:30:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:30:35.405624 2026] [security2:error] [pid 5667:tid 5667] ...
show more
(mod_security) mod_security (id:210492) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:30:35.405624 2026] [security2:error] [pid 5667:tid 5667] [client 8.235.86.61:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.uwsvita.org"] [uri "/.env.prod.bak"] [unique_id "auhmS2NDfDa6_LCIZJmE4wAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 09:34:01
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇩🇰
ScamAware
2026-11-02 08:54:49
UTC ·
(1 week ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 42. Unique request paths counted internally: 42. Cloudflare acti ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 42. Unique request paths counted internally: 42. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 08:50:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 03:50:51.059253 2026] [security2:error] [pid 26333:tid 2633 ...
show more
(mod_security) mod_security (id:210492) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 03:50:51.059253 2026] [security2:error] [pid 26333:tid 26333] [client 8.235.86.61:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.triplejrealty.com"] [uri "/files../.env"] [unique_id "auhO64BuWROJBF2jb2lwLgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-02 08:46:07
UTC ·
(1 week ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 08:25:13
UTC ·
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 03:25:06.211611 2026] [security2:error] [pid 2331:tid 2331] ...
show more
(mod_security) mod_security (id:210730) triggered by 8.235.86.61 (61.86.235.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 03:25:06.211611 2026] [security2:error] [pid 2331:tid 2331] [client 8.235.86.61:56974] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||_dc-mx.5a2509c10390.nyemdr.com|F|2"] [data ".5a2509c10390.nyemdr.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "_dc-mx.5a2509c10390.nyemdr.com"] [uri "/z9x8c7v6b5-debug-trigger-_dc-mx.5a2509c10390.nyemdr.com"] [unique_id "auhI4oeT-B1ojp2EdJXVTQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
