🇫🇷
IRISIO
2026-05-04 09:38:36
(1 month ago)
scans/SQL injection/spam posts : 142 queries
Web App Attack
SQL Injection
🇩🇪
LRob.fr
2026-05-04 00:30:03
(1 month ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-03 23:17:41
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 192.210.193.154 (192-210-193-154-host.colocross ...
show more
(mod_security) mod_security (id:210492) triggered by 192.210.193.154 (192-210-193-154-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 03 19:17:36.202662 2026] [security2:error] [pid 17412:tid 17412] [client 192.210.193.154:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.poweribo.com"] [uri "/.env"] [unique_id "affXkGBdtlpbKydoODAcmQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BellFix
2026-05-03 23:04:54
(1 month ago)
Fail2ban reported 192.210.193.154 for npm-admin
Web App Attack
🇫🇷
SpaceHost-Server
2026-05-03 22:35:28
(1 month ago)
Brute-Force
Web App Attack
🇧🇪
voormedia
2026-05-03 22:00:04
(1 month ago)
Accessed trap at '/config/secrets.yml'
Web App Attack
🇩🇪
macrob
2026-05-03 19:16:48
(1 month ago)
2026/05/03 19:16:35 [error] 3914563#3914563: *198126620 access forbidden by rule, client: 192.210.19 ...
show more
2026/05/03 19:16:35 [error] 3914563#3914563: *198126620 access forbidden by rule, client: 192.210.193.154, server: binixo.lk, request: "GET /.next/build-manifest.json HTTP/2.0", host: "binixo.lk"
2026/05/03 19:16:42 [error] 3914566#3914566: *198126758 access forbidden by rule, client: 192.210.193.154, server: binixo.lk, request: "GET /.vite/manifest.json HTTP/2.0", host: "binixo.lk"
2026/05/03 19:16:47 [error] 3914563#3914563: *198126874 access forbidden by rule, client: 192.210.193.154, server: binixo.lk, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "binixo.lk"
...
show less
Web App Attack
🇫🇷
dynamix
2026-05-03 19:03:21
(1 month ago)
Multiple WAF Violations
Web App Attack
🇩🇪
macrob
2026-05-03 16:52:15
(1 month ago)
2026/05/03 16:52:06 [error] 3874197#3874197: *197899591 access forbidden by rule, client: 192.210.19 ...
show more
2026/05/03 16:52:06 [error] 3874197#3874197: *197899591 access forbidden by rule, client: 192.210.193.154, server: finami.ph, request: "GET /.next/build-manifest.json HTTP/2.0", host: "www.finami.ph"
2026/05/03 16:52:11 [error] 3874196#3874196: *197899826 access forbidden by rule, client: 192.210.193.154, server: finami.ph, request: "GET /.vite/manifest.json HTTP/2.0", host: "www.finami.ph"
2026/05/03 16:52:14 [error] 3874197#3874197: *197899591 access forbidden by rule, client: 192.210.193.154, server: finami.ph, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "www.finami.ph"
...
show less
Web App Attack
2026-05-03 14:01:03
(1 month ago)
Portscan: TCP/443 (6x), TCP/80 (10x)
Port Scan
🇺🇸
interbiznw.com
2026-05-03 13:52:04
(1 month ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇱🇻
garmtech.com
2026-05-03 13:33:13
(1 month ago)
Attempted access to sensitive endpoint (/config/secrets.yml) detected. Automated scan or unauthorize ...
show more
Attempted access to sensitive endpoint (/config/secrets.yml) detected. Automated scan or unauthorized probing.
show less
Web App Attack
2026-05-03 12:39:58
(1 month ago)
192.210.193.154 - - [03/May/2026:14:38:54 +0200] "GET /asset-manifest.json HTTP/1.1" 404 483 "-" "Mo ...
show more
192.210.193.154 - - [03/May/2026:14:38:54 +0200] "GET /asset-manifest.json HTTP/1.1" 404 483 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
192.210.193.154 - - [03/May/2026:14:38:58 +0200] "GET /manifest.json HTTP/1.1" 404 483 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
192.210.193.154 - - [03/May/2026:14:38:59 +0200] "GET /build-manifest.json HTTP/1.1" 404 483 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
192.210.193.154 - - [03/May/2026:14:38:59 +0200] "GET /_next/static/buildManifest.js HTTP/1.1" 404 483 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
192.210.193.154 - - [03/May/2026:14:39:01 +0200] "GET /_next/build-manifest.json HTTP/1.1" 404 483 "-"
...
show less
DDoS Attack
🇨🇳
Bro Charlie
2026-05-03 12:38:40
(1 month ago)
192.210.193.154 - - [03/May/2026:20:37:15 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compat ...
show more
192.210.193.154 - - [03/May/2026:20:37:15 +0800] "GET / HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" "-"
192.210.193.154 - - [03/May/2026:20:37:20 +0800] "GET /sitemap.xml HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; CohereBot/1.0; +https://cohere.com/bot)" "-"
192.210.193.154 - - [03/May/2026:20:37:25 +0800] "GET /robots.txt HTTP/1.1" 403 16922 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-"
192.210.193.154 - - [03/May/2026:20:37:32 +0800] "GET /asset-manifest.json HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] )" "-"
192.210.193.154 - - [03/May/2026:20:37:35 +0800] "GET /manifest.json HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; ClaudeBot/1.0; [email protected] )" "-"
192.210.193.154 - - [03/May/2026:20:37:38 +0800] "GET /build-manifest.json HTTP/1.1" 403 16922 "-" "Mozilla/5.0 (compatible; CohereBot/1.0; +https://cohere.com/bot)" "-"
192.210.193.154 - - [03
...
show less
DDoS Attack
🇬🇧
consul.to
2026-05-03 11:48:36
(1 month ago)
Web attack/malicious scanning detected
Web App Attack