🇳🇱
homeshowdomain.nl
2026-11-13 23:01:18
UTC ·
(15 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.
Web App Attack
SSH
Hacking
🇩🇪
FeG Deutschland
2026-11-13 17:34:29
UTC ·
(21 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
Anonymous
2026-11-13 08:29:31
UTC ·
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇲🇾
Rizzy
2026-11-13 04:05:34
UTC ·
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-12 22:59:03
UTC ·
(1 day ago)
Auto-ban: >3000 req/min op 2026-11-12
Web App Attack
SSH
Hacking
🇩🇪
Petros Stefanakis
2026-11-12 22:53:18
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 8.236.208.53 (US/United States/53.208.236.8.bc.googleusercontent.com)
SQL Injection
Anonymous
2026-11-12 22:52:28
UTC ·
(1 day ago)
ModSecurity rejected a query
Bad Web Bot
Web App Attack
🇷🇺
kkn
2026-11-12 22:34:36
UTC ·
(1 day ago)
8.236.208.53 - - [13/Nov/2026:01:34:35 +0300] "GET /.git/config HTTP/1.1" 404 713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "3.28"
8.236.208.53 - - [13/Nov/2026:01:34:35 +030 ...
show more
8.236.208.53 - - [13/Nov/2026:01:34:35 +0300] "GET /.git/config HTTP/1.1" 404 713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "3.28"
8.236.208.53 - - [13/Nov/2026:01:34:35 +0300] "GET /.env HTTP/1.1" 404 713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "3.28"
8.236.208.53 - - [13/Nov/2026:01:34:35 +0300] "GET /.env.local HTTP/1.1" 404 713 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "3.28"
...
show less
Web App Attack
🇫🇷
mail.avx.gr
2026-11-12 22:04:41
UTC ·
(1 day ago)
plesk-rapid-ban sensitive-file-probe host=zepos.paladin.gr
Hacking
🇫🇷
dynamix
2026-11-12 20:58:12
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:34:14
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 8.236.208.53 (53.208.236.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:34:07.884511 2026] [security2:error] [pid 29195:tid 29 ...
show more
(mod_security) mod_security (id:210730) triggered by 8.236.208.53 (53.208.236.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:34:07.884511 2026] [security2:error] [pid 29195:tid 29195] [client 8.236.208.53:59920] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zenventures.co.uk|F|2"] [data ".env.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zenventures.co.uk"] [uri "/.env.bak"] [unique_id "avYUr0bgEu4eo81fc9TEXgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Prcek
2026-11-12 19:22:26
UTC ·
(1 day ago)
PortScan:HOST=8.236.208.53,DPORTS=443
Port Scan
🇨🇭
Origon
2026-11-12 19:13:24
UTC ·
(1 day ago)
plesk-modsecurity - IP: 8.236.208.53 - [12/Nov/2026:20:13:23.763816 +0100] avYP07Dkr6j2XS-1bm85RAAAABY 8.236.208.53 44000 127.0.0.1 7081 [12/Nov/2026:20:13:24.097942 +0100] avYP1LDkr6j2XS-1bm85RgAAAAI 8.236.208.53 44040 127.0.0.1 7081 [12/Nov/2026:2 ...
show more
plesk-modsecurity - IP: 8.236.208.53 - [12/Nov/2026:20:13:23.763816 +0100] avYP07Dkr6j2XS-1bm85RAAAABY 8.236.208.53 44000 127.0.0.1 7081 [12/Nov/2026:20:13:24.097942 +0100] avYP1LDkr6j2XS-1bm85RgAAAAI 8.236.208.53 44040 127.0.0.1 7081 [12/Nov/2026:20:13:24.232991 +0100] avYP1MgtPJHJHSKs9jHCQgAAANY 8.236.208.53 44052 127.0.0.1 7081 [12/Nov/2026:20:13:24.373562 +0100] avYP1LDkr6j2XS-1bm85SAAAAA0 8.236.208.53 44068 127.0.0.1 7081
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 18:50:46
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.236.208.53 (53.208.236.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:50:42.494359 2026] [security2:error] [pid 3246:tid 324 ...
show more
(mod_security) mod_security (id:210492) triggered by 8.236.208.53 (53.208.236.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:50:42.494359 2026] [security2:error] [pid 3246:tid 3246] [client 8.236.208.53:33186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zentricity.com"] [uri "/.git/config"] [unique_id "avYKgpdnR1OoBoioPamZUwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-12 17:30:05
UTC ·
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack