🇫🇷
masterguru
2026-07-28 08:19:45
(3 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-28 06:15:28
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 15.156.89.239 (ec2-15-156-89-239.ca-central-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 15.156.89.239 (ec2-15-156-89-239.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 02:15:21.876572 2026] [security2:error] [pid 463651:tid 463651] [client 15.156.89.239:57798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ptrmedical.post-therapyreconditioning.com"] [uri "/.git/config"] [unique_id "amhI-eyugBD3NuMULED6fAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-07-28 05:36:20
(5 hours ago)
Try to access /.git/config
Web App Attack
🇳🇱
Site.eu
2026-07-28 03:32:43
(7 hours ago)
Excessive multi-domain requests
Brute-Force
2026-07-28 02:05:15
(9 hours ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (82/60 min)'; Requests=82
Port Scan
🇳🇱
homeshowdomain.nl
2026-07-27 22:00:11
(13 hours ago)
Auto-ban: >3000 req/min op 2026-07-27
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-27 14:54:30
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 15.156.89.239 (ec2-15-156-89-239.ca-central-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 15.156.89.239 (ec2-15-156-89-239.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:54:24.218058 2026] [security2:error] [pid 2043044:tid 2043044] [client 15.156.89.239:60924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.radioairplay.joebankx.com"] [uri "/.git/config"] [unique_id "amdxIMcrNJeRaQM2iVBY5AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-07-27 06:42:02
(1 day ago)
block ruleset AA06B7315BA6AEB6421B52F0B32E14B509FD5FF0
SQL Injection
🇳🇱
Savvii
2026-07-27 04:30:28
(1 day ago)
20 attempts against mh-misbehave-ban on yeti
Brute-Force
Bad Web Bot
Web App Attack
2026-07-27 02:58:03
(1 day ago)
(caddyscan) Scanner path probe from 15.156.89.239 (CA/Canada/ec2-15-156-89-239.ca-central-1.compute. ...
show more
(caddyscan) Scanner path probe from 15.156.89.239 (CA/Canada/ec2-15-156-89-239.ca-central-1.compute.amazonaws.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 15.156.89.239 - - [27/Jul/2026:02:57:58 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 15.156.89.239 - - [27/Jul/2026:02:57:58 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 15.156.89.239 - - [27/Jul/2026:02:57:58 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 15.156.89.239 - - [27/Jul/2026:02:57:58 +0000] "GET /.env.production HTTP/1.1"
[REDACTED] 200 2627 15.156.89.239 - - [27/Jul/2026:02:57:58 +0000] "GET /.env.staging HTTP/1.1"
show less
Port Scan
🇳🇿
Antinson
2026-07-26 23:54:14
(1 day ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇵🇱
Budyn
2026-07-26 09:50:54
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇫🇷
Octopuce
2026-07-26 07:32:39
(2 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇮🇹
VHosting
2026-07-26 04:00:05
(2 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2024-07-06 01:54:03
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 15.156.89.239 (ec2-15-156-89-239.ca-central-1.c ...
show more
(mod_security) mod_security (id:210492) triggered by 15.156.89.239 (ec2-15-156-89-239.ca-central-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 05 21:53:43.263553 2024] [security2:error] [pid 13343] [client 15.156.89.239:42624] [client 15.156.89.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/wp-content/themes/.git/config"] [unique_id "Zoijp3jlzGHI6zUx_7N9dQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack