🇩🇪
iNetWorker
2026-09-01 05:14:22
(12 hours ago)
trolling for resource vulnerabilities
Web App Attack
2026-09-01 03:26:03
(14 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.save HTTP/1.1, GET /.env.production HTTP/1.1, GET ...
show more
Bot / scanning and/or hacking attempts: GET /.env.save HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.dev HTTP/1.1, POST / HTTP/1.1, GET /.env HTTP/1.1
show less
Hacking
Web App Attack
2026-09-01 02:04:29
(15 hours ago)
Aggressive web scan
Web App Attack
🇳🇱
Site.eu
2026-08-31 22:37:55
(19 hours ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
homeshowdomain.nl
2026-08-31 21:59:13
(19 hours ago)
Auto-ban: >3000 req/min op 2026-08-31
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-31 18:10:10
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.200.245.223 (223.245.200.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.245.223 (223.245.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 14:10:02.658153 2026] [security2:error] [pid 27179:tid 27179] [client 35.200.245.223:57298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jeffjastro.com.jeffj.net"] [uri "/.git/config"] [unique_id "apXDeoS8FHCJp1PxuePKCgAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 16:21:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.200.245.223 (223.245.200.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.245.223 (223.245.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 12:21:07.792513 2026] [security2:error] [pid 29967:tid 29967] [client 35.200.245.223:36154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jdubindustries.jonathanwilson.me"] [uri "/.git/config"] [unique_id "apWp8y8sib_sXgBQm-gGIAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-08-31 15:02:42
(1 day ago)
🔥 VERY AGGRESSIVE SCANNER probed over 500 inexistent files and PHP scripts in less than an hour.
Hacking
Web App Attack
🇦🇺
screwlooseit.com.au
2026-08-31 14:57:14
(1 day ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
223.245.200.35.bc.googleusercontent.com
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 13:43:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.200.245.223 (223.245.200.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.245.223 (223.245.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:43:11.199070 2026] [security2:error] [pid 22639:tid 22639] [client 35.200.245.223:56280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jbsellsre.burlison.com"] [uri "/.git/config"] [unique_id "apWE7zxG40vfpjPtNBci1AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-08-31 13:30:03
(1 day ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-08-31 13:29:49
(1 day ago)
~ suspicious post ~
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 11:47:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.200.245.223 (223.245.200.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.245.223 (223.245.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:47:13.182055 2026] [security2:error] [pid 31684:tid 31684] [client 35.200.245.223:41728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jaykaydrone.krakowski.net"] [uri "/.git/config"] [unique_id "apVpwWNcQ-RP2CJ5Vl5VKAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-08-31 11:01:26
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
masterguru
2026-08-31 10:41:12
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack