🇺🇸
kosada.com
2026-06-01 05:00:55
(2 days ago)
Web vulnerability probing: /secrets.yml
Web App Attack
🇳🇱
debestelapp
2026-06-01 04:25:04
(2 days ago)
Web App Attack
🇹🇷
baku.hosting
2026-06-01 04:05:45
(2 days ago)
CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 85.121.127.75 (NL/The Netherla ...
show more
CSF Auto Report: (mod_security) mod_security (id:949110) triggered by 85.121.127.75 (NL/The Netherlands/-): 5 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 01:49:37
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 21:49:29.394258 2026] [security2:error] [pid 8497:tid 8497] [client 85.121.127.75:38660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ic1.biz"] [uri "/.git/config"] [unique_id "ahzlKdhv3t4s2-bZA3psTAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-06-01 01:39:04
(2 days ago)
http-sensitive-files - IP: 85.121.127.75 - time="2026-06-01T03:39:04+02:00" level=info msg="(555f66 ...
show more
http-sensitive-files - IP: 85.121.127.75 - time="2026-06-01T03:39:04+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 85.121.127.75 (NL/9009) : 4h ban on Ip 85.121.127.75" module=db
show less
Web App Attack
🇫🇷
COMAITE
2026-06-01 01:31:05
(2 days ago)
Suspicious URL access.
Web App Attack
🇳🇱
Site.eu
2026-06-01 01:26:06
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇬🇧
consul.to
2026-06-01 01:19:52
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 00:46:46
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 20:46:41.706802 2026] [security2:error] [pid 5424:tid 5424] [client 85.121.127.75:49244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "endoperfect.com"] [uri "/.git/config"] [unique_id "ahzWcbWLadEQQcDVtkRoAQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-01 00:23:55
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 20:23:50.829204 2026] [security2:error] [pid 17903:tid 17903] [client 85.121.127.75:52260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "endemic.com"] [uri "/.git/config"] [unique_id "ahzRFs8F8APPC499Yz116QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 23:58:34
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 31 19:58:29.597687 2026] [security2:error] [pid 8668:tid 8668] [client 85.121.127.75:53818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "encoremtmorris.com"] [uri "/.git/config"] [unique_id "ahzLJd-t9OzBIynWKDBBLwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-31 21:59:48
(3 days ago)
Auto-ban: >3000 req/min op 2026-05-31
Web App Attack
SSH
Hacking
2026-05-31 04:32:09
(3 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇫🇷
dynamix
2026-05-31 02:28:31
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-05-31 01:03:50
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 21:03:42.746081 2026] [security2:error] [pid 14395:tid 14395] [client 85.121.127.75:35368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "empoweruamerica.empoweruohio.org"] [uri "/.git/config"] [unique_id "ahuI7qConur3H1_FsZlnMAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack