|
🇺🇸
mnsf
|
|
Too many Status 40X (23)
|
Brute-Force
Web App Attack
|
|
🇭🇺
kranem
|
|
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 16509 (Amazon.com, Inc.)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-10-22T21:43:59Z
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:120.0) Gecko/20100101 Firefox/1 ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 16509 (Amazon.com, Inc.)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-10-22T21:43:59Z
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:120.0) Gecko/20100101 Firefox/120.0
show less
|
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 18.246.73.41 (ec2-18-246-73-41.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:22:17.023081 2026] [security2:error] [pid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 18.246.73.41 (ec2-18-246-73-41.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 19:22:17.023081 2026] [security2:error] [pid 2364:tid 2364] [client 18.246.73.41:46524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hiddenhistory.info"] [uri "/.git/FETCH_HEAD"] [unique_id "atqaqSSwnRoR8aKCRx38NAAAAB0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
SoteriaCovenant
|
|
Automated probe: /config.yml on Soteria Global infrastructure. No vulnerable software present.
|
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 18.246.73.41 (ec2-18-246-73-41.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 18:33:53.292175 2026] [security2:error] [pid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 18.246.73.41 (ec2-18-246-73-41.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 18:33:53.292175 2026] [security2:error] [pid 9550:tid 9550] [client 18.246.73.41:55592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krmartindale.com"] [uri "/.git/config"] [unique_id "atqPUYMZL73APlgwMdEXpQAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
Dominik Lysiak
|
|
18.246.73.41 - - [23/Oct/2026:00:22:22 +0200] "GET /magento_version HTTP/2.0" 200 9750 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)"
18.246.73.41 - - [23/Oct/2026:00:22:27 +0200] "GET /.git/config HTTP/2.0" 200 974 ...
show more
18.246.73.41 - - [23/Oct/2026:00:22:22 +0200] "GET /magento_version HTTP/2.0" 200 9750 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)"
18.246.73.41 - - [23/Oct/2026:00:22:27 +0200] "GET /.git/config HTTP/2.0" 200 9747 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)"
18.246.73.41 - - [23/Oct/2026:00:22:27 +0200] "GET /.git/HEAD HTTP/2.0" 200 9750 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)"
...
show less
|
Web App Attack
|
|
🇩🇪
quiescence.eu
|
|
Probing files/vulnerabilities (.env, .git) - Fail2ban @ quiescence.eu
|
Hacking
Web App Attack
|
|
🇺🇸
danchoivanov
|
|
Automated scanner probing /.git/config on simpleitsrq.com. Auto-blocked by honeypot trap.
|
Web App Attack
Hacking
|
|
🇧🇪
cmbplf
|
|
291 requests with url.path *config.yml
|
Brute-Force
Bad Web Bot
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 18.246.73.41 (ec2-18-246-73-41.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 16:51:20.483850 2026] [security2:error] [pid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 18.246.73.41 (ec2-18-246-73-41.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 16:51:20.483850 2026] [security2:error] [pid 28827:tid 28827] [client 18.246.73.41:44632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "homeschoolwv.com"] [uri "/.env.local"] [unique_id "atp3SLDnD6jfV-gcnQDebwAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇬🇧
relianoid.com
|
|
404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com
|
Web App Attack
|
|
🇺🇸
joeyyax
|
|
Tried SQL dumps ×4, Spring Boot Actuator ×2. Paths: /actuator/configprops, /actuator/env
|
Hacking
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 18.246.73.41 (ec2-18-246-73-41.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 16:05:35.349628 2026] [security2:error] [pid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 18.246.73.41 (ec2-18-246-73-41.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 16:05:35.349628 2026] [security2:error] [pid 9379:tid 9379] [client 18.246.73.41:44622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.perlcreative.com"] [uri "/.git/config"] [unique_id "atpsjwCWxXxY0UiY5iMD6QAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
thesimonmanuel
|
|
18.246.73.41 - - [23/Oct/2026:01:25:39 +0530] "GET /wp-content/plugins/download-manager/readme.txt HTTP/2.0" 200 20720 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)"
|
Web App Attack
|
