🇺🇸
TPI-Abuse
2026-10-16 11:24:02
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.231.119.76 (76.119.231.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.231.119.76 (76.119.231.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:23:58.410695 2026] [security2:error] [pid 7301:tid 7301] [client 8.231.119.76:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yggdrasil.org"] [uri "/.git/config"] [unique_id "atIJTkEiftsLq3JT5yLS2wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ecs.ge
2026-10-16 11:23:12
(9 hours ago)
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
Web App Attack
Hacking
2026-10-16 10:49:27
(9 hours ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
2026-10-16 10:07:03
(10 hours ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-10-16 09:13:54.
Web App Attack
🇳🇱
Site.eu
2026-10-16 09:28:58
(11 hours ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
e.fierstra
2026-10-16 08:47:49
(11 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-16 08:07:42
(12 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-10-16 07:23:55
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.231.119.76 (76.119.231.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.231.119.76 (76.119.231.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:23:49.826561 2026] [security2:error] [pid 21308:tid 21308] [client 8.231.119.76:50956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yevid.com"] [uri "/.git/config"] [unique_id "atHRBY9HifZoiIi1MzvclwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-16 06:39:44
(13 hours ago)
20 attempts against mh-misbehave-ban on yeti
Brute-Force
Bad Web Bot
Web App Attack
2026-10-16 05:20:51
(15 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-10-16 04:43:06
(15 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
zumbo.net
2026-10-16 04:16:43
(16 hours ago)
[Fri Oct 16 07:16:41.917690 2026] [proxy_fcgi:error] [pid 1801954:tid 1802000] [client 8.231.119.76: ...
show more
[Fri Oct 16 07:16:41.917690 2026] [proxy_fcgi:error] [pid 1801954:tid 1802000] [client 8.231.119.76:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 07:16:42.072850 2026] [proxy_fcgi:error] [pid 1801954:tid 1802005] [client 8.231.119.76:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 07:16:42.247875 2026] [proxy_fcgi:error] [pid 1801953:tid 1801987] [client 8.231.119.76:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 07:16:42.394722 2026] [proxy_fcgi:error] [pid 1801953:tid 1801989] [client 8.231.119.76:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 07:16:42.562765 2026] [proxy_fcgi:error] [pid 1801954:tid 1802001] [client 8.231.119.76:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-10-16 03:50:04
(16 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 03:07:34
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.231.119.76 (76.119.231.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.231.119.76 (76.119.231.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:07:29.381807 2026] [security2:error] [pid 29870:tid 29888] [client 8.231.119.76:49454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yes-on-87.org.credit-card-cap.com"] [uri "/.git/config"] [unique_id "atGU8b8Sb77GTj92wpr3wwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 02:38:12
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.231.119.76 (76.119.231.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.231.119.76 (76.119.231.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 22:38:09.116682 2026] [security2:error] [pid 7358:tid 7358] [client 8.231.119.76:58402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yerevanpress.am"] [uri "/.git/config"] [unique_id "atGOEWu46mOpRVT5ZD8eJQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack