🇫🇮
inlink.ltd
2026-05-26 09:06:49
(1 week ago)
Known malicious PHP file or CMS probe
Web App Attack
🇬🇧
PeravixGroup
2026-05-08 06:48:49
(4 weeks ago)
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ...
show more
Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇱🇻
garmtech.com
2026-05-07 22:26:41
(4 weeks ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-26.104.207.42.145.web-spamm ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 01-26.104.207.42.145.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇵🇰
sbk97 (https://sayor.net)
2026-04-30 00:46:18
(1 month ago)
HTTP attack observed: GET /.git/HEAD HTTP/1.1 | status=404 | response_size=196
Brute-Force
🇵🇰
sbk97 (https://sayor.net)
2026-04-30 00:46:18
(1 month ago)
HTTP attacks observed: GET /.git/HEAD HTTP/1.1 | status=404
Brute-Force
🇳🇱
jjnxpct
2026-02-19 04:50:34
(3 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config]
show less
Web App Attack
Hacking
🇮🇹
VHosting
2026-02-18 22:19:14
(3 months ago)
Detected attack and reported by a human
Brute-Force
Web App Attack
SSH
DDoS Attack
Exploited Host
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-18 01:05:29
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.145 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 17 20:05:24.538260 2026] [security2:error] [pid 21352:tid 21352] [client 104.207.42.145:13853] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radiointernational.net"] [uri "/config/.env"] [unique_id "aZUQVLx4h_vhGdBpHwK8bAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
relianoid.com
2026-02-03 03:35:33
(4 months ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇩🇪
Packets-Decreaser.NET
2025-12-29 14:01:25
(5 months ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇨🇭
backslash
2025-12-04 21:00:05
(6 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-11-29 12:04:56
(6 months ago)
botnet
DDoS Attack
🇺🇸
TPI-Abuse
2025-11-26 12:31:21
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.145 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 07:31:15.865754 2025] [security2:error] [pid 16368:tid 16368] [client 104.207.42.145:50031] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tees4three.gamedayincentives.com"] [uri "/.env"] [unique_id "aSbzE768IM4HoH5qYIROjAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 06:10:34
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.145 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 01:10:29.137560 2025] [security2:error] [pid 10726:tid 10726] [client 104.207.42.145:48025] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.splashstation.org"] [uri "/.git/HEAD"] [unique_id "aSaZ1chmP4h2XMNB6yko4wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-26 05:18:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.42.145 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.42.145 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 26 00:18:48.113621 2025] [security2:error] [pid 20734:tid 20734] [client 104.207.42.145:24133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.technoware-lb.com"] [uri "/.git/HEAD"] [unique_id "aSaNuGDlk1ClSUS5d5KSNwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack