🇳🇱
ams_sec_user
2026-11-12 20:05:20
UTC ·
(32 seconds ago)
Automated requests against a hosted website: 452 requests between 19:00 and 19:59 UTC; 418 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.git/config). Reported automatically.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
entangled_mongoose
2026-11-12 19:28:54
UTC ·
(36 minutes ago)
Probed /info.php.
Web App Attack
🇺🇸
Charlesiv
2026-11-12 19:23:51
UTC ·
(42 minutes ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /keyfile.json
Timestamp: 2026-11-12T18:45:38Z
Ray ID: a597b1e16ba12eff
UA: Mozilla/5.0 (Macintosh; I ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: MANAGED_CHALLENGE
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /keyfile.json
Timestamp: 2026-11-12T18:45:38Z
Ray ID: a597b1e16ba12eff
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-12 18:26:10
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.20.178.124 (124.178.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:26:03.969932 2026] [security2:error] [pid 7359:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.20.178.124 (124.178.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:26:03.969932 2026] [security2:error] [pid 7359:tid 7359] [client 34.20.178.124:41136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isst-d-nwicg.org.praemiumtech.com"] [uri "/.git/config"] [unique_id "avYEuy42iUb5kKpMIHIjLQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-11-12 18:18:37
UTC ·
(1 hour ago)
plesk-modsecurity - IP: 34.20.178.124 - [12/Nov/2026:19:18:36.593987 +0100] avYC_GTK29oqxA0xzoFyfQAAANc 34.20.178.124 58456 127.0.0.1 7081 [12/Nov/2026:19:18:36.977464 +0100] avYC_GTK29oqxA0xzoFyggAAAMY 34.20.178.124 58594 127.0.0.1 7081 [12/Nov/202 ...
show more
plesk-modsecurity - IP: 34.20.178.124 - [12/Nov/2026:19:18:36.593987 +0100] avYC_GTK29oqxA0xzoFyfQAAANc 34.20.178.124 58456 127.0.0.1 7081 [12/Nov/2026:19:18:36.977464 +0100] avYC_GTK29oqxA0xzoFyggAAAMY 34.20.178.124 58594 127.0.0.1 7081 [12/Nov/2026:19:18:37.177803 +0100] avYC_WTK29oqxA0xzoFyhAAAANg 34.20.178.124 50746 127.0.0.1 7081 [12/Nov/2026:19:18:37.354706 +0100] avYC_WTK29oqxA0xzoFyiQAAAMM 34.20.178.124 50834 127.0.0.1 7081
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:10:49
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.20.178.124 (124.178.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:10:43.022502 2026] [security2:error] [pid 12400:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.20.178.124 (124.178.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:10:43.022502 2026] [security2:error] [pid 12400:tid 12400] [client 34.20.178.124:56250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isslv.net"] [uri "/.git/config"] [unique_id "avYBI3ZVwtE0yTYk5kuv0AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-12 17:47:40
UTC ·
(2 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
Anonymous
2026-11-12 17:11:39
UTC ·
(2 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
Little Iguana
2026-11-12 17:09:23
UTC ·
(2 hours ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇺🇸
dot.mg
2026-11-12 12:20:07
UTC ·
(7 hours ago)
Scan of vulnerable files
Web App Attack
Anonymous
2026-11-12 12:19:11
UTC ·
(7 hours ago)
Scan for .env Files at 2026-11-12T12:19:11+00:00
Web App Attack
Anonymous
2026-11-12 11:49:05
UTC ·
(8 hours ago)
Scan for .env Files at 2026-11-12T11:49:05+00:00
Web App Attack