🇫🇮
6kilowatti
2026-09-12 15:01:17
(1 hour ago)
[12/Sep/2026:15:01:13 +0000] - 404 404 - GET https ysf.oh6ah.fi "/.git/config" [Client 8.234.56.159] ...
show more
[12/Sep/2026:15:01:13 +0000] - 404 404 - GET https ysf.oh6ah.fi "/.git/config" [Client 8.234.56.159] [Length 242] [Gzip 1.19] [Sent-to 10.144.0.10] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[12/Sep/2026:15:01:16 +0000] - 404 404 - GET https ysf.oh6ah.fi "/.env" [Client 8.234.56.159] [Length 242] [Gzip 1.19] [Sent-to 10.144.0.10] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 14:42:18
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 8.234.56.159 (159.56.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.56.159 (159.56.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 10:42:14.365330 2026] [security2:error] [pid 13091:tid 13112] [client 8.234.56.159:54018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yucef.com"] [uri "/.git/config"] [unique_id "aqVkxpqYxShA0VboHHixuwAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-12 14:04:38
(2 hours ago)
8.234.56.159 - - [12/Sep/2026:09:04:37 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Li ...
show more
8.234.56.159 - - [12/Sep/2026:09:04:37 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 8.234.56.159
8.234.56.159 - - [12/Sep/2026:09:04:37 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 8.234.56.159
8.234.56.159 - - [12/Sep/2026:09:04:37 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 8.234.56.159
8.234.56.159 - - [12/Sep/2026:09:04:37 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 8.234.56.159
8.234.56.159 - - [12/Sep/2026:09:04:37 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-12 10:58:30
(5 hours ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-09-12 10:46:55
(5 hours ago)
8.234.56.159 - - [12/Sep/2026:18:46:54 +0800] "GET /phpinfo.php HTTP/1.1" 404 26371 "-" "Mozilla/5.0 ...
show more
8.234.56.159 - - [12/Sep/2026:18:46:54 +0800] "GET /phpinfo.php HTTP/1.1" 404 26371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
8.234.56.159 - - [12/Sep/2026:18:46:54 +0800] "GET /php.php HTTP/1.1" 404 26371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
8.234.56.159 - - [12/Sep/2026:18:46:54 +0800] "GET /php.php HTTP/1.1" 404 26371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-09-12 09:39:20
(6 hours ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 09:26:36
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.234.56.159 (159.56.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.56.159 (159.56.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 05:26:31.650890 2026] [security2:error] [pid 25597:tid 25597] [client 8.234.56.159:54726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ypsisda.net"] [uri "/.git/config"] [unique_id "aqUax2cFRVrmM29jze4_5wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-09-12 08:47:21
(7 hours ago)
(y3) Failed access -byebye- from 8.234.56.159 (US/United States/159.56.234.8.bc.googleusercontent.co ...
show more
(y3) Failed access -byebye- from 8.234.56.159 (US/United States/159.56.234.8.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
🇳🇱
e.fierstra
2026-09-12 05:10:50
(10 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
middelkoopcc
2026-09-12 05:03:07
(11 hours ago)
2026-09-12 07:00:54 GET /.git/config [301] && 2026-09-12 07:00:54 GET /.env [301] && 2026-09-12 07:0 ...
show more
2026-09-12 07:00:54 GET /.git/config [301] && 2026-09-12 07:00:54 GET /.env [301] && 2026-09-12 07:00:56 GET /.env.bak [301] && 239 more within 20 minutes
show less
Web App Attack
🇳🇱
Site.eu
2026-09-12 04:35:37
(11 hours ago)
Excessive 404/403 errors
Brute-Force
🇧🇪
cmbplf
2026-09-12 04:25:01
(11 hours ago)
5.240 requests from abuseipdb.com blacklisted IP (10mos4d19h)
Brute-Force
Bad Web Bot
🇫🇮
6kilowatti
2026-09-12 03:42:55
(12 hours ago)
[12/Sep/2026:03:42:51 +0000] - 404 404 - GET https ysf.oh6ah.fi "/.git/config" [Client 8.234.56.159] ...
show more
[12/Sep/2026:03:42:51 +0000] - 404 404 - GET https ysf.oh6ah.fi "/.git/config" [Client 8.234.56.159] [Length 242] [Gzip 1.19] [Sent-to 10.144.0.10] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[12/Sep/2026:03:42:54 +0000] - 404 404 - GET https ysf.oh6ah.fi "/.env" [Client 8.234.56.159] [Length 242] [Gzip 1.19] [Sent-to 10.144.0.10] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
Web App Attack
🇨🇭
dalslab ltd
2026-09-12 02:22:55
(13 hours ago)
[12/Sep/2026:04:22:55 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 8.234.56.159] [Length ...
show more
[12/Sep/2026:04:22:55 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 8.234.56.159] [Length 552] [Gzip -] [Sent-to 10.1.1.49] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[12/Sep/2026:04:22:55 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 8.234.56.159] [Length 552] [Gzip -] [Sent-to 10.1.1.49] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[12/Sep/2026:04:22:55 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 8.234.56.159] [Length 552] [Gzip -] [Sent-to 10.1.1.49] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[12/Sep/2026:04:22:55 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 8.234.56.159] [Length 552] [Gzip -] [Sent-to 10.1.1.49] "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-11 21:59:39
(18 hours ago)
Auto-ban: >3000 req/min op 2026-09-11
Web App Attack
SSH
Hacking