2026-06-02 15:58:50
(1 day ago)
[server.tmg.gr] httpd-404: sites=cardioathena2025.gr; logs=/var/log/httpd/domains/cardioathena2025.g ...
show more
[server.tmg.gr] httpd-404: sites=cardioathena2025.gr; logs=/var/log/httpd/domains/cardioathena2025.gr.log; samples=/.git/config | /.git/HEAD | /
show less
Web App Attack
🇹🇼
tye
2026-06-02 15:40:18
(1 day ago)
Wazuh Alert Evidence: [Tue Jun 02 23:40:15.070118 2026] [security2:error] [pid 3756512] [client 23.1 ...
show more
Wazuh Alert Evidence: [Tue Jun 02 23:40:15.070118 2026] [security2:error] [pid 3756512] [client 23.161.169.114:46108] [client 23.161.169.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.23.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "tye.asia"] [uri "/.git/config"] [unique_id "ah75X9ImSA_iy4c98ZbnKgAAAAY"]
show less
Web App Attack
🇵🇱
lns.bz
2026-06-02 14:56:51
(1 day ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 14:10:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 23.161.169.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 23.161.169.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 10:09:57.827988 2026] [security2:error] [pid 15894:tid 15894] [client 23.161.169.114:37442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "now-app.space"] [uri "/.git/config"] [unique_id "ah7kNdXCPEMUFWOnDK2GRQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-06-02 13:35:50
(1 day ago)
.env scanning [BY]
Web App Attack
🇬🇧
consul.to
2026-06-02 12:55:40
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
2026-06-02 12:05:01
(2 days ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-06-02 11:45:05
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 23.161.169.114 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 23.161.169.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 07:44:57.124163 2026] [security2:error] [pid 13707:tid 13707] [client 23.161.169.114:40860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smid.tv"] [uri "/.git/config"] [unique_id "ah7COWgv-pPjWvhRWmbf5AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-06-02 11:39:28
(2 days ago)
(bot_kill_mega) Aggressive Bot Blocked: bingbot 23.161.169.114 (GB/United Kingdom/-): 1 in the last ...
show more
(bot_kill_mega) Aggressive Bot Blocked: bingbot 23.161.169.114 (GB/United Kingdom/-): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.161.169.114 - - [02/Jun/2026:14:39:18 +0300] "GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/2.0" 200 29597 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
show less
Port Scan
🇲🇾
Rizzy
2026-06-02 11:32:13
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
WellSpring
2026-06-02 11:30:23
(2 days ago)
good bot honeypot on 512.today/.git/HEAD — WellSpr.ing/NetSentinel civic-AI security layer
Bad Web Bot
🇨🇦
john doe
2026-06-02 10:55:38
(2 days ago)
SentinelBot: Spring Boot Exploit (score: 72)
Web App Attack
2026-06-02 10:55:20
(2 days ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
2026-06-02 09:15:58
(2 days ago)
(caddyscan) Scanner path probe from 23.161.169.114 (GB/United Kingdom/-): 5 in the last 3600 secs; P ...
show more
(caddyscan) Scanner path probe from 23.161.169.114 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 23.161.169.114 - - [02/Jun/2026:09:15:57 +0000] "GET /.git/HEAD HTTP/1.1"
[REDACTED] 200 2627 23.161.169.114 - - [02/Jun/2026:09:15:57 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 23.161.169.114 - - [02/Jun/2026:09:15:57 +0000] "GET /.git/HEAD HTTP/1.1"
[REDACTED] 200 2627 23.161.169.114 - - [02/Jun/2026:09:15:57 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 23.161.169.114 - - [02/Jun/2026:09:15:57 +0000] "GET /.env.local HTTP/1.1"
show less
Port Scan
🇫🇮
stinpriza
2026-06-02 08:36:04
(2 days ago)
Web App Attack
Web App Attack