🇧🇪
madeit
2026-11-09 11:23:07
UTC ·
(3 days ago)
Web App Attack
🇧🇪
madeit
2026-10-19 09:11:21
UTC ·
(3 weeks ago)
Web App Attack
Anonymous
2026-10-08 05:33:27
UTC ·
(1 month ago)
IP matched detection query many 3xx errors.
Brute-Force
🇧🇪
madeit
2026-10-03 10:16:52
UTC ·
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-09-20 12:44:50
UTC ·
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-09-06 08:41:05
UTC ·
(2 months ago)
Web App Attack
🇩🇪
tsZero
2026-08-23 17:46:18
UTC ·
(2 months ago)
Scan example: path=/.env.dev status=403
Hacking
🇬🇧
rakkor
2026-08-23 06:22:43
UTC ·
(2 months ago)
2026/08/23 07:22:33 [error] 25088#25088: *3228565 open() "/usr/syno/synoman/.env.production" failed (2: No such file or directory), client: 172.71.190.60, server: cam.rakkor.uk, request: "GET /.env.production HTTP/2.0", host: "cam.rakkor.uk", referre ...
show more
2026/08/23 07:22:33 [error] 25088#25088: *3228565 open() "/usr/syno/synoman/.env.production" failed (2: No such file or directory), client: 172.71.190.60, server: cam.rakkor.uk, request: "GET /.env.production HTTP/2.0", host: "cam.rakkor.uk", referrer: "https://www.google.com/search?q=cam.rakkor.uk"
2026/08/23 07:22:42 [error] 25090#25090: *3228575 open() "/usr/syno/synoman/.env.save" failed (2: No such file or directory), client: 172.71.190.60, server: cam.rakkor.uk, request: "HEAD /.env.save HTTP/2.0", host: "cam.rakkor.uk"
...
show less
Brute-Force
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-18 03:31:19
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 23:31:15.446887 2026] [security2:error] [pid 5056:tid 5056] [client 172.71.190.60:12346] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 23:31:15.446887 2026] [security2:error] [pid 5056:tid 5056] [client 172.71.190.60:12346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.gbcwoodbine.org"] [uri "/.git/config"] [unique_id "aoPSA8hXCC7UP9Q2mKGT3AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-17 22:00:28
UTC ·
(2 months ago)
Auto-ban: >3000 req/min op 2026-08-17
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-17 11:20:44
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:20:39.047235 2026] [security2:error] [pid 1759:tid 1831] [client 172.71.190.60:13058] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 07:20:39.047235 2026] [security2:error] [pid 1759:tid 1831] [client 172.71.190.60:13058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.shaneblair.com"] [uri "/.git/config"] [unique_id "aoLuh3-CxSq_jrfv2xLQ_gAAAYU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 10:10:40
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 06:10:36.270139 2026] [security2:error] [pid 32647:tid 32751] [client 172.71.190.60:14329] M ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 06:10:36.270139 2026] [security2:error] [pid 32647:tid 32751] [client 172.71.190.60:14329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.conservativelabor.com"] [uri "/.git/HEAD"] [unique_id "aoLeHNikLFsc0FA_e-7plQAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 09:00:43
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:00:05.671458 2026] [security2:error] [pid 6465:tid 6465] [client 172.71.190.60:10549] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 05:00:05.671458 2026] [security2:error] [pid 6465:tid 6465] [client 172.71.190.60:10549] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "networthbuilding.com"] [uri "/.git/HEAD"] [unique_id "aoLNlec-D2J_urHYSYuIUgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-17 08:02:36
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:02:30.609231 2026] [security2:error] [pid 9589:tid 9589] [client 172.71.190.60:11508] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.71.190.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 17 04:02:30.609231 2026] [security2:error] [pid 9589:tid 9589] [client 172.71.190.60:11508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.cbrtome.cl"] [uri "/.git/HEAD"] [unique_id "aoLAFtPARhQrJi0-bquunAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-08-16 20:43:56
UTC ·
(2 months ago)
Web App Attack