🇩🇪
ITSNF
2026-05-30 20:20:03
(4 days ago)
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=80
Port Scan
Hacking
🇺🇸
Charlesiv
2026-05-30 20:00:59
(4 days ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 9009 (M247 Europe SRL)
P ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 9009 (M247 Europe SRL)
Protocol: HTTP/1.1 (GET method)
Endpoint: /_next/static/buildManifest.js
Timestamp: 2026-05-30T19:57:19Z
Ray ID: a0404ea44d719ff6
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 OPR/116.0.0.0
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-30 19:59:57
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 15:59:50.753188 2026] [security2:error] [pid 20785:tid 20785] [client 85.121.127.88:37984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "local.creasolu.com"] [uri "/.git/config"] [unique_id "ahtBthPuTv_ysiWDDnyABQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-05-30 19:53:44
(4 days ago)
85.121.127.88 - - [30/May/2026:21:53:44 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ...
show more
85.121.127.88 - - [30/May/2026:21:53:44 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.2; +https://openai.com/gptbot" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 19:36:18
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 15:36:12.429087 2026] [security2:error] [pid 21012:tid 21012] [client 85.121.127.88:46466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lobstercrmbeta.modernsalessolutions.com"] [uri "/.git/config"] [unique_id "ahs8LArWZdIaXUSyJ-eVPQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 17:33:10
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 13:33:02.561358 2026] [security2:error] [pid 30361:tid 30361] [client 85.121.127.88:50432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lmga.net"] [uri "/.git/config"] [unique_id "ahsfTsAExgiLT0Aj-61HaAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-30 16:53:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 12:52:55.725748 2026] [security2:error] [pid 8214:tid 8214] [client 85.121.127.88:58682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.git/config"] [unique_id "ahsV56HW-RzoIa7T1WQgxAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-05-30 16:34:53
(4 days ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 85.121.127.88 (NL/The Netherlands/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 85.121.127.88 (NL/The Netherlands/-): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-05-30 07:40:59
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 85.121.127.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 03:40:50.730885 2026] [security2:error] [pid 12066:tid 12066] [client 85.121.127.88:46494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livingwaterresortandspa.com"] [uri "/backend/.env"] [unique_id "ahqUgrWkHxLE9xvUJw5KcAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack