🇺🇸
slay3r9903
2026-09-03 22:39:35
(21 minutes ago)
IP address blocked by Cloudflare security rules due to suspicious activity and security violations.
Hacking
Bad Web Bot
2026-09-03 22:37:13
(24 minutes ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇩🇪
Zentro
2026-09-03 22:29:05
(32 minutes ago)
Automated honeypot/fail2ban detection
Port Scan
Hacking
Web App Attack
2026-09-03 22:26:40
(34 minutes ago)
213.209.159.84 - - [04/Sep/2026:00:26:39 +0200] "GET /.git/config HTTP/1.1" 200 11272 "https://www.x ...
show more
213.209.159.84 - - [04/Sep/2026:00:26:39 +0200] "GET /.git/config HTTP/1.1" 200 11272 "https://www.xn--free-rseau-g7a.fr/.git/config" "Mozilla/5.0 (compatible; GitFinder/1.0)"
show less
Web App Attack
🇩🇪
gadix
2026-09-03 22:21:40
(39 minutes ago)
[03/Sep/2026:21:51:44.238710 +0200] apnP0C6nyCW21Y4hvTJH1wAAAIo 213.209.159.84 60572 127.0.0.1 7081
...
show more
[03/Sep/2026:21:51:44.238710 +0200] apnP0C6nyCW21Y4hvTJH1wAAAIo 213.209.159.84 60572 127.0.0.1 7081
[03/Sep/2026:21:51:45.150104 +0200] apnP0S6nyCW21Y4hvTJH2AAAAJI 213.209.159.84 41536 127.0.0.1 7080
[04/Sep/2026:00:21:37.426725 +0200] apny8dWzcWr-UviINLSwwAAAAAI 213.209.159.84 54868 127.0.0.1 7081
...
show less
Web App Attack
🇫🇷
arsonist
2026-09-03 22:07:42
(53 minutes ago)
[fail2ban]
2026-09-03T22:07:42.158867+00:00 arson caddy[1890453]: {"level":"info","ts":1788473262.15 ...
show more
[fail2ban]
2026-09-03T22:07:42.158867+00:00 arson caddy[1890453]: {"level":"info","ts":1788473262.1588056,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"213.209.159.84","remote_port":"54166","client_ip":"213.209.159.84","proto":"HTTP/1.1","method":"GET","host":"dlx.arson.gg","uri":"/.git/config","headers":{"User-Agent":["Mozilla/5.0 (compatible; GitFinder/1.0)"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"dlx.arson.gg","ech":false}},"bytes_read":0,"user_id":"","duration":0.000104126,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}}
...
show less
Bad Web Bot
🇪🇸
tutaim.com
2026-09-03 22:00:11
(1 hour ago)
⛔ [04/09/26] This IP has been detected performing multiple attacks on websites (6 attempts blocked). ...
show more
⛔ [04/09/26] This IP has been detected performing multiple attacks on websites (6 attempts blocked). Potential malicious activity.
show less
Brute-Force
SSH
Web App Attack
FTP Brute-Force
🇩🇪
abuse-detection
2026-09-03 21:52:14
(1 hour ago)
Security detection: http-sensitive-probes
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 21:33:09
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 213.209.159.84 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 213.209.159.84 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:33:02.818465 2026] [security2:error] [pid 15251:tid 15251] [client 213.209.159.84:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haywardcarpentry.com"] [uri "/.git/config"] [unique_id "apnnjr73GB_-hNfMJBwzNAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-03 21:06:41
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇩
Burayot
2026-09-03 20:41:07
(2 hours ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 213.209.159.84 (DE/Germany/-): 2 in ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 213.209.159.84 (DE/Germany/-): 2 in the last 3600 secs
show less
Web App Attack
🇫🇮
mnazibo
2026-09-03 20:30:49
(2 hours ago)
Date: Sep 03 23:23:11 2026 EAT | Reported IP: 213.209.159.84 mod_security | id: 930130 949110 | DE/u ...
show more
Date: Sep 03 23:23:11 2026 EAT | Reported IP: 213.209.159.84 mod_security | id: 930130 949110 | DE/usernameab.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5); Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5)
show less
SQL Injection
Brute-Force
Bad Web Bot
🇫🇷
pm33
2026-09-03 20:21:02
(2 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇬🇧
kie
2026-09-03 20:19:12
(2 hours ago)
03-09-2026:20:18:14UTC [Nginx Web Server] Suspicious web request: path:/.git (2 request(s)).
Bad Web Bot
Web App Attack
🇫🇷
Mickmick21
2026-09-03 20:03:52
(2 hours ago)
213.209.159.84 - - [03/Sep/2026:22:03:52 +0200] "GET /.git/config HTTP/1.1" 418 0 "-" "Mozilla/5.0 ( ...
show more
213.209.159.84 - - [03/Sep/2026:22:03:52 +0200] "GET /.git/config HTTP/1.1" 418 0 "-" "Mozilla/5.0 (compatible; GitFinder/1.0)"
...
show less
Port Scan
Web App Attack