|
🇺🇸
masterguru
|
|
. Matched phrase "/.git/" at REQUEST_URI. (210492-169)
|
Web App Attack
|
|
|
🇸🇪
Lemmy
|
|
|
Web App Attack
|
|
|
Anonymous
|
|
Unauthorized connection attempt
|
Port Scan
Hacking
Exploited Host
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.209.11.21 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.209.11.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 07:38:50.811367 2026] [security2:error] [pid 2898:tid 2898] [client 104.209.11.21:64713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.238"] [uri "/.env.save"] [unique_id "ah7Ayk4cWzS9KpB-6VpJYgAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
bescared
|
|
F2B - Malicious activity detected. Excessive port scans. -8ff06ede-
|
Port Scan
|
|
|
Anonymous
|
|
12 hits, proto=tcp, ports=2082,2083,2086,2087,8080,8443
|
Port Scan
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.209.11.21 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.209.11.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 06:57:53.047418 2026] [security2:error] [pid 15378:tid 15378] [client 104.209.11.21:64707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.248"] [uri "/.git/config"] [unique_id "ah63MbVTF_-r4K38TsI88wAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Bot detected scanning for vulnerable pages
|
Port Scan
|
|
|
🇺🇸
RAP
|
|
2026-06-02 10:39:25 UTC Unauthorized activity to TCP port 8443. Web App
|
Port Scan
Web App Attack
|
|
|
🇺🇸
stvnrdg.me
|
|
104.209.11.21 - - [02/Jun/2026:09:52:42 +0000] "GET /wp-config.php HTTP/1.1" 404 393 "-" "Mozilla/5. ...
show more
104.209.11.21 - - [02/Jun/2026:09:52:42 +0000] "GET /wp-config.php HTTP/1.1" 404 393 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
|
Hacking
|
|
|
🇩🇪
Lazentis
|
|
Unauthorized access attempt to port 8080 (tcp)
|
Brute-Force
SSH
|
|
|
🇺🇸
MPL
|
|
tcp port scan (16 or more attempts)
|
Port Scan
|
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 104.209.11.21 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.209.11.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 02:35:44.366049 2026] [security2:error] [pid 31795:tid 31795] [client 104.209.11.21:64784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.250"] [uri "/.git/HEAD"] [unique_id "ah55wL8HDzpblS3UNXxecAAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇬🇧
2048
|
|
2026-05-08T05:39:40.431053+02:00 machodeer kernel: [919496.626895] [UFW BLOCK] IN=ens3 OUT= MAC=REDA ...
show more
2026-05-08T05:39:40.431053+02:00 machodeer kernel: [919496.626895] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=104.209.11.21 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=59454 DF PROTO=TCP SPT=48141 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-05-08T05:39:41.461060+02:00 machodeer kernel: [919497.656884] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=104.209.11.21 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=59455 DF PROTO=TCP SPT=48141 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-05-08T05:39:42.484700+02:00 machodeer kernel: [919498.680841] [UFW BLOCK] IN=ens3 OUT= MAC=REDACTED SRC=104.209.11.21 DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=40 ID=59456 DF PROTO=TCP SPT=48141 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
show less
|
Port Scan
|
|