🇪🇸
Gem
2026-08-28 22:11:22
(1 month ago)
Unauthorized web scan.
Web App Attack
🇩🇪
onkeltom
2026-08-25 12:32:19
(1 month ago)
Unauthorized connection attempts
Brute-Force
Hacking
2026-08-25 05:23:39
(1 month ago)
denied traffic to a non-approved destination port. destination port 1224.
Port Scan
🇺🇸
TPI-Abuse
2026-08-25 03:16:43
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:16:37.303006 2026] [security2:error] [pid 14689:tid 14689] [client 198.199.83.65:33488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visage-nico.com"] [uri "/.git/config"] [unique_id "ao0JFV0NU-G3zTWjyPdUugAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-25 01:02:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 21:02:33.808562 2026] [security2:error] [pid 28754:tid 28754] [client 198.199.83.65:34374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lognlumber.com"] [uri "/.git/config"] [unique_id "aozpqSqK4EL7q3PFahqKPQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-08-24 23:34:58
(1 month ago)
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ...
show more
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths.
show less
Hacking
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-24 22:00:17
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-23.
show less
Web App Attack
SSH
Hacking
🇺🇸
k3rn3l109
2026-08-24 15:49:29
(1 month ago)
Sentinel honeypot: cf-waf-auto hit on sentinelmdm.com UA=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit ...
show more
Sentinel honeypot: cf-waf-auto hit on sentinelmdm.com UA=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
show less
Hacking
🇺🇸
TPI-Abuse
2026-08-24 12:39:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 08:39:20.792188 2026] [security2:error] [pid 3911017:tid 3911601] [client 198.199.83.65:45434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mecconsultant.com"] [uri "/.git/config"] [unique_id "aow7XlejrQ14baZ7ZWbHNQAAAZc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-24 08:05:40
(1 month ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-24 07:56:45
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 03:56:41.372509 2026] [security2:error] [pid 29615:tid 29615] [client 198.199.83.65:59894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mardensmith.com"] [uri "/.git/config"] [unique_id "aov5ObRxv2jLdavhdwWOjAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-24 06:03:02
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 02:02:55.239826 2026] [security2:error] [pid 24423:tid 24423] [client 198.199.83.65:59312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "notariaarauco.cl"] [uri "/.git/config"] [unique_id "aovej_eK0JCfUDslRrbwHQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-24 05:21:03
(1 month ago)
[MonAug2407:20:59.5811542026][security2:error][pid611919:tid612046][client198.199.83.65:0]ModSecurit ...
show more
[MonAug2407:20:59.5811542026][security2:error][pid611919:tid612046][client198.199.83.65:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"your-team.ch\"][uri\"/.git/config\"][unique_id\"aovUu623420QPB0YPzy8UQAAARA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇦🇺
Bay13
2026-08-24 02:27:13
(1 month ago)
CrowdSec:custom/http-sensitive-files
Web App Attack
🇺🇸
TPI-Abuse
2026-08-23 22:29:06
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 198.199.83.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 23 18:28:58.843542 2026] [security2:error] [pid 30406:tid 30406] [client 198.199.83.65:52276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nmposters.com"] [uri "/.git/config"] [unique_id "aot0KjvZ-jJr2Q0nx18W-gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack