π©πͺ
Marcin Stepien
2026-09-29 20:08:15
(3 weeks ago)
Hit honeypot endpoint /.git/config. Automated scanner/bot detected.
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-29 19:49:58
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 8.234.172.153 (153.172.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.172.153 (153.172.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:49:54.515753 2026] [security2:error] [pid 31071:tid 31071] [client 8.234.172.153:39844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jchiggins.com"] [uri "/.git/config"] [unique_id "arwWYl-qditQZaddYf-QxgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-25 20:12:07
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
π«π·
dynamix
2026-09-24 18:14:42
(3 weeks ago)
Multiple WAF Violations
Web App Attack
π³π±
homeshowdomain.nl
2026-09-23 21:59:55
(4 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-22.
show less
Web App Attack
SSH
Hacking
π³π±
Site.eu
2026-09-23 09:00:45
(4 weeks ago)
Excessive 404/403 errors
Brute-Force
Anonymous
2026-09-22 13:45:09
(4 weeks ago)
Observed scanned 10 known-sensitive endpoint(s), e.g.: /, /.env.bak, /admin-panel/.env, /local/.env, ...
show more
Observed scanned 10 known-sensitive endpoint(s), e.g.: /, /.env.bak, /admin-panel/.env, /local/.env, /mailing/.env, /mandrill/.env
show less
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-21 22:12:21
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 8.234.172.153 (153.172.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.172.153 (153.172.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 18:12:18.736586 2026] [security2:error] [pid 804552:tid 804552] [client 8.234.172.153:34760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "raumschach.org"] [uri "/.git/config"] [unique_id "arGrwpxmm4DC6rAvnKp9uQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
FeG Deutschland
2026-09-21 22:06:55
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
π³π±
homeshowdomain.nl
2026-09-21 22:02:32
(1 month ago)
Auto-ban: >3000 req/min op 2026-09-21
Web App Attack
SSH
Hacking
π·π΄
clauss
2026-09-21 14:28:28
(1 month ago)
8.234.172.153 - - [21/Sep/2026:17:28:27 +0300] "GET /phpinfo.php HTTP/2.0" 200 34754 "-" "Mozilla/5. ...
show more
8.234.172.153 - - [21/Sep/2026:17:28:27 +0300] "GET /phpinfo.php HTTP/2.0" 200 34754 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
8.234.172.153 - - [21/Sep/2026:17:28:28 +0300] "GET /info.php HTTP/2.0" 200 34749 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-20 19:23:00
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 8.234.172.153 (153.172.234.8.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.172.153 (153.172.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 15:22:51.847718 2026] [security2:error] [pid 20961:tid 20984] [client 8.234.172.153:54954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "secure.vnbcares.com"] [uri "/.git/config"] [unique_id "arAyi4rWZ5CnQ6_3hcfY2gAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack