🇳🇱
homeshowdomain.nl
2026-06-15 21:59:31
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-15 03:57:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.203.39.207 (207.39.203.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.39.207 (207.39.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:57:46.361744 2026] [security2:error] [pid 17770:tid 17770] [client 35.203.39.207:50414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.nhhostas.com"] [uri "/.git/config"] [unique_id "ai94OisUvQKxpcAJy8_WNAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-06-15 03:35:31
(1 week ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇬🇧
consul.to
2026-06-15 03:13:16
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 02:49:15
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.203.39.207 (207.39.203.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.39.207 (207.39.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:49:10.976740 2026] [security2:error] [pid 9439:tid 9439] [client 35.203.39.207:37566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lazymanvegan.com.trafficstopper.com"] [uri "/frontend/.git/config"] [unique_id "ai9oJrKJtWN3K1v3sr4_bwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
xxkodedxx
2026-06-15 02:01:23
(1 week ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get, 58× edge-block ...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get, 58× edge-block in 10m window.
Origin: CA / AS396982 Google LLC
Active: 02:00:47→02:00:48 UTC
Volume: 58 HTTP req, 2 honeypot probe(s)
Bait taken: /wordpress/.git/config, /wp-content/.git/config
Status mix: 444×58
Vhost fishing: teachme.ztx-lab.com
UA: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-15 01:11:23
(1 week ago)
[MonJun1503:11:20.4255712026][security2:error][pid3433961:tid3433972][client35.203.39.207:0]ModSecur ...
show more
[MonJun1503:11:20.4255712026][security2:error][pid3433961:tid3433972][client35.203.39.207:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.special-home.ch.136-243-54-122.cpanel.site\"][uri\"/build/.git/config\"][unique_id\"ai9ROPVHKKAbdH2Vu-gXPQAAAAc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-06-15 01:05:46
(1 week ago)
Abuse Detected (30)
Brute-Force
Web App Attack
🇳🇱
wlt-blocker
2026-06-15 00:58:14
(1 week ago)
Unauthorized access to webpage admin
Web App Attack
🇩🇪
Savvii
2026-06-15 00:45:51
(1 week ago)
20 attempts against mh-misbehave-ban on grass
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-15 00:26:44
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
kosada.com
2026-06-14 23:33:07
(1 week ago)
Web vulnerability probing: /app/.git/config
Web App Attack
🇨🇭
ALPHANET
2026-06-14 23:20:27
(1 week ago)
web exploits
Hacking
Exploited Host
Web App Attack
🇫🇷
dynamix
2026-06-14 23:16:01
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 22:09:02
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.203.39.207 (207.39.203.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.39.207 (207.39.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:08:58.361896 2026] [security2:error] [pid 5417:tid 5417] [client 35.203.39.207:49562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.coolerboxes.greenlight.us"] [uri "/.git/config"] [unique_id "ai8meujh1UoGNid5532UBgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack