🇳🇱
homeshowdomain.nl
2025-11-22 22:59:02
UTC ·
(11 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-21.
Hacking
Web App Attack
SSH
🇺🇸
octageeks.com
2025-11-22 05:06:15
UTC ·
(11 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇬🇧
[email protected]
2025-11-22 00:40:11
UTC ·
(11 months ago)
...
Brute-Force
SSH
🇬🇧
AvonleaConsulting
2025-11-21 23:58:03
UTC ·
(11 months ago)
Attempts to probe web pages for vulnerable PHP or other applications
Web App Attack
🇳🇱
homeshowdomain.nl
2025-11-21 23:02:25
UTC ·
(11 months ago)
Auto-ban: >3000 req/min op 2025-11-21
Hacking
Web App Attack
SSH
🇮🇹
LTM
2025-11-21 07:20:01
UTC ·
(11 months ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-21 07:12:56
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 174.129.95.82 (ec2-174-129-95-82.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 02:12:49.876325 2025] [security2:error] [pid 14771:t ...
show more
(mod_security) mod_security (id:210492) triggered by 174.129.95.82 (ec2-174-129-95-82.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 21 02:12:49.876325 2025] [security2:error] [pid 14771:tid 14771] [client 174.129.95.82:46150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.layoverinamsterdam.thinkingepic.com"] [uri "/.git/config"] [unique_id "aSAQ8ZjOBbdYzMMjhH0KSwAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2025-11-21 07:00:13
UTC ·
(11 months ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
www.winos.me
2025-11-21 05:16:55
UTC ·
(11 months ago)
stream fail
Web App Attack
🇺🇸
COMPLEX
2025-11-21 05:04:40
UTC ·
(11 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 14618 (AMAZON-AES)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
Bad Web Bot
2025-11-21 05:04:34
UTC ·
(11 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-11-21 04:57:45
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 174.129.95.82 (ec2-174-129-95-82.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 23:57:37.757198 2025] [security2:error] [pid 31903:t ...
show more
(mod_security) mod_security (id:210492) triggered by 174.129.95.82 (ec2-174-129-95-82.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 23:57:37.757198 2025] [security2:error] [pid 31903:tid 31903] [client 174.129.95.82:36448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "superzilla.com"] [uri "/.git/config"] [unique_id "aR_xQY1AfGTOPG_0VjcnrQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-11-21 04:38:18
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 174.129.95.82 (ec2-174-129-95-82.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 23:38:15.116665 2025] [security2:error] [pid 9903:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 174.129.95.82 (ec2-174-129-95-82.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 23:38:15.116665 2025] [security2:error] [pid 9903:tid 9903] [client 174.129.95.82:36170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "silvermoonpizza.com"] [uri "/.git/config"] [unique_id "aR_stwlnSupLZ_ITmla6bQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2025-11-21 04:29:47
UTC ·
(11 months ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-11-21 04:20:04
UTC ·
(11 months ago)
(mod_security) mod_security (id:210492) triggered by 174.129.95.82 (ec2-174-129-95-82.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 23:20:00.575141 2025] [security2:error] [pid 14191:t ...
show more
(mod_security) mod_security (id:210492) triggered by 174.129.95.82 (ec2-174-129-95-82.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 23:20:00.575141 2025] [security2:error] [pid 14191:tid 14191] [client 174.129.95.82:48042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ratalads.com"] [uri "/.git/config"] [unique_id "aR_ocHoZ-eDts4AL2wZobwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack