🇺🇸
nyt
2026-10-22 14:51:41
(14 hours ago)
Sensitive File Probe
Web App Attack
🇳🇱
Site.eu
2026-10-22 14:37:37
(14 hours ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
LRob
2026-10-22 13:38:37
(15 hours ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebK ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
🇩🇪
4server
2026-10-22 13:17:42
(16 hours ago)
[ThuOct2215:17:36.1298712026][security2:error][pid1234923:tid1234972][client8.230.96.3:0]ModSecurity ...
show more
[ThuOct2215:17:36.1298712026][security2:error][pid1234923:tid1234972][client8.230.96.3:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.aaaa6877.org.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"atoM8GRfwimkbN7OAUgn-gAAAcw\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 13:06:20
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.230.96.3 (3.96.230.8.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 8.230.96.3 (3.96.230.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:06:14.195156 2026] [security2:error] [pid 6744:tid 6744] [client 8.230.96.3:55688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yanlidesign.com"] [uri "/.git/config"] [unique_id "atoKRoB3fQja3wyvmlcjuQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-22 09:22:04
(19 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 07:46:21
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.230.96.3 (3.96.230.8.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 8.230.96.3 (3.96.230.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 03:46:17.765672 2026] [security2:error] [pid 27217:tid 27217] [client 8.230.96.3:59990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yanchuk.org"] [uri "/.git/config"] [unique_id "atm_Sf8NRlUnUnGo82uOugAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
RamSet
2026-10-22 07:28:55
(21 hours ago)
[ycr] HTTP-Probe on port 443 (via domain). 74 distinct paths probed in 21s. Sustained 79 req/min, 73 ...
show more
[ycr] HTTP-Probe on port 443 (via domain). 74 distinct paths probed in 21s. Sustained 79 req/min, 73 nonexistent paths (404). Paths: /.git/config, /.env, /.env.local, /.env.production, /.env.staging, /.env.development, /.env.test, /.env.remote, /.env.bak, /server-info.php, /server-status.php, /.config/gcloud/application_default_credentials.json, /_environment, /_phpinfo.php, /_profiler/phpinfo, /admin/phpinfo.php, /administrator/phpinfo.php, /application_default_credentials.json, /beta/phpinfo.php, /core/phpinfo.php, /cpanel/phpinfo.php, /credentials.json, /debug.php, /dev/phpinfo.php, /docs/phpinfo.php, /firebase-adminsdk.json, /firebase-key.json, /gcp-credentials.json, /gcp-key.json, /gcp-sa.json, /google-credentials.json, /google-key.json, /hosting/phpinfo.php, /htdocs/phpinfo.php, /i.php, /includes/phpinfo.php, /info, /info.php, /info.php.bak, /key.json, /keyfile.json, /mail/phpinfo.php, /old/phpinfo.php, /old_phpinfo.php, /p.php, /php-info.php, /php.php, /phpinfo, …
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 06:56:53
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.230.96.3 (3.96.230.8.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 8.230.96.3 (3.96.230.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 02:56:46.184361 2026] [security2:error] [pid 8541:tid 8541] [client 8.230.96.3:60268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.4940brooklinedr.com.13waggoners.com"] [uri "/.git/config"] [unique_id "atmzrgrNIhXlDrN2M2lC4AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-22 02:33:25
(1 day ago)
Excessive 404/403 errors
Brute-Force
2026-10-21 22:15:39
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
oisecnet
2026-10-19 21:02:40
(3 days ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-10-19. 3013 requests from thi ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-10-19. 3013 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 03:59:39
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 8.230.96.3 (3.96.230.8.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 8.230.96.3 (3.96.230.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:59:34.968642 2026] [security2:error] [pid 5388:tid 5388] [client 8.230.96.3:58572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xtcdesigns.com"] [uri "/.git/config"] [unique_id "atWVpmVYxgHpwQgZclFP5gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Vano Ganzzz
2026-10-19 03:09:04
(4 days ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Pro ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (POST method)
Endpoint: /dashboard
Timestamp: 2026-10-19T03:09:04Z
Ray ID: a4cc94f4387076ad
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
🇯🇵
ZEROVOX
2026-10-18 21:17:14
(4 days ago)
CrowdSec: crowdsecurity/http-sensitive-files detected
Web App Attack