🇺🇸
interbiznw.com
2026-11-06 07:17:43
UTC ·
(25 minutes ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇸🇪
vaia.cloud
2026-11-06 06:40:01
UTC ·
(1 hour ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇨🇴
conexcol
2026-11-06 06:14:10
UTC ·
(1 hour ago)
(mod_security) mod_security (id:900321) triggered by 178.128.251.125 (NL/The Netherlands/-): 5 in the last 3600 secs
Brute-Force
🇩🇪
macrob
2026-11-06 06:04:14
UTC ·
(1 hour ago)
2026/11/06 06:04:06 [error] 2789056#2789056: *7582680 access forbidden by rule, client: 178.128.251.125, server: binixo.es, request: "GET /.git/HEAD HTTP/1.1", host: "binixo.es"
2026/11/06 06:04:10 [error] 2789057#2789057: *7582840 access forbidden b ...
show more
2026/11/06 06:04:06 [error] 2789056#2789056: *7582680 access forbidden by rule, client: 178.128.251.125, server: binixo.es, request: "GET /.git/HEAD HTTP/1.1", host: "binixo.es"
2026/11/06 06:04:10 [error] 2789057#2789057: *7582840 access forbidden by rule, client: 178.128.251.125, server: binixo.es, request: "GET /.bfrt-1793945050918205664-404 HTTP/1.1", host: "binixo.es"
2026/11/06 06:04:13 [error] 2789056#2789056: *7582682 access forbidden by rule, client: 178.128.251.125, server: binixo.es, request: "GET /.vite/manifest.json HTTP/1.1", host: "binixo.es"
...
show less
Web App Attack
🇩🇪
Hazzard
2026-11-06 06:02:43
UTC ·
(1 hour ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted]): (CF_ENABLE)
Port Scan
🇧🇪
cmbplf
2026-11-06 05:29:03
UTC ·
(2 hours ago)
148 requests with url.path *config.json
100 requests with url.path *.hg/*
Brute-Force
Bad Web Bot
🇷🇴
cataa33
2026-11-06 03:47:50
UTC ·
(3 hours ago)
Honeypot hit (stage 1, depth 0). Type: Desktop PC Browser. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-06 03:10:43
UTC ·
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-11-06 03:06:47
UTC ·
(4 hours ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-11-06 02:40:26
UTC ·
(5 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-06 01:24:16
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 178.128.251.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 20:24:09.235608 2026] [security2:error] [pid 12698:tid 12698] [client 178.128.251.125:3758 ...
show more
(mod_security) mod_security (id:210492) triggered by 178.128.251.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 20:24:09.235608 2026] [security2:error] [pid 12698:tid 12698] [client 178.128.251.125:37580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerniganbuilders.com"] [uri "/.git/HEAD"] [unique_id "au0sOUORsd3lo7IdEudFnQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 00:27:35
UTC ·
(7 hours ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-05 22:59:43
UTC ·
(8 hours ago)
Auto-ban: >3000 req/min op 2026-11-05
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-05 20:52:15
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 178.128.251.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:52:08.024064 2026] [security2:error] [pid 17953:tid 17953] [client 178.128.251.125:5462 ...
show more
(mod_security) mod_security (id:210492) triggered by 178.128.251.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:52:08.024064 2026] [security2:error] [pid 17953:tid 17953] [client 178.128.251.125:54622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gensou.net"] [uri "/.git/HEAD"] [unique_id "auzseLxFH9-fP3joLOfwCwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 20:26:29
UTC ·
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 178.128.251.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:26:25.124958 2026] [security2:error] [pid 29274:tid 29274] [client 178.128.251.125:5932 ...
show more
(mod_security) mod_security (id:210492) triggered by 178.128.251.125 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:26:25.124958 2026] [security2:error] [pid 29274:tid 29274] [client 178.128.251.125:59322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bmillernotary.com"] [uri "/.git/HEAD"] [unique_id "auzmcXIgXoA7RnUpISwHywAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack