🇳🇱
homeshowdomain.nl
2026-11-05 22:59:21
UTC ·
(10 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
Web App Attack
SSH
Hacking
2026-11-04 02:13:26
UTC ·
(2 days ago)
Multiple, malicious web requests detected
Port Scan
Hacking
🇩🇪
LRob
2026-11-03 23:37:51
UTC ·
(2 days ago)
Secret file probe | method: GET | path: /.env | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 23:32:59
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.199.165.215 (215.165.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:32:51.577064 2026] [security2:error] [pid 27891: ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.165.215 (215.165.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:32:51.577064 2026] [security2:error] [pid 27891:tid 27891] [client 104.199.165.215:37382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adamsclothiers.com"] [uri "/.git/config"] [unique_id "aupvIzS5xYDJYMsEeS7W2AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-03 23:02:12
UTC ·
(2 days ago)
Auto-ban: >3000 req/min op 2026-11-03
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-03 20:04:24
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.199.165.215 (215.165.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:04:17.045354 2026] [security2:error] [pid 4042:t ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.165.215 (215.165.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:04:17.045354 2026] [security2:error] [pid 4042:tid 4042] [client 104.199.165.215:35804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adampayments.com"] [uri "/.git/config"] [unique_id "auo-QaAhJRfMdIIywP8RpwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 17:21:25
UTC ·
(2 days ago)
http scanning for .env files
...
Hacking
Web App Attack
2026-11-03 14:23:43
UTC ·
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-11-03 12:34:33
UTC ·
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-03 11:41:24
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 104.199.165.215 (215.165.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:41:20.088272 2026] [security2:error] [pid 30356: ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.165.215 (215.165.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 06:41:20.088272 2026] [security2:error] [pid 30356:tid 30356] [client 104.199.165.215:32918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adamfogel.com"] [uri "/.git/config"] [unique_id "aunIYI1sy2Yd2Xm0re03DgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
KTSTechnology
2026-11-03 05:51:13
UTC ·
(3 days ago)
Web vulnerability scanning detected by our ISP firewall
Web App Attack
🇳🇱
debestelapp
2026-11-03 02:05:10
UTC ·
(3 days ago)
Web App Attack
🇬🇧
consul.to
2026-11-03 00:45:11
UTC ·
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 00:01:08
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 104.199.165.215 (215.165.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:00:57.034802 2026] [security2:error] [pid 12280: ...
show more
(mod_security) mod_security (id:210492) triggered by 104.199.165.215 (215.165.199.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:00:57.034802 2026] [security2:error] [pid 12280:tid 12280] [client 104.199.165.215:49298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armandselmwoodpark.com"] [uri "/.git/config"] [unique_id "aukkOTfKXY9qDv49mBPyEgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
/dev/null
2026-11-02 23:55:27
UTC ·
(3 days ago)
Web attack | malicious scanning detected.
Hacking
Web App Attack
