🇫🇷
SpaceHost-Server
2026-11-12 23:14:05
UTC ·
(14 hours ago)
Brute-Force
Web App Attack
🇫🇷
service Informatique
2026-11-12 04:00:37
UTC ·
(1 day ago)
GET /.env
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-11 23:14:02
UTC ·
(1 day ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-11-11 17:48:16
UTC ·
(1 day ago)
2026/11/11 17:48:14 [error] 2031557#2031557: *28633261 access forbidden by rule, client: 100.53.7.70, server: binixo.ph, request: "GET /.gitlab-ci.yml HTTP/1.1", host: "binixo.ph"
2026/11/11 17:48:14 [error] 2031557#2031557: *28633265 access forbidde ...
show more
2026/11/11 17:48:14 [error] 2031557#2031557: *28633261 access forbidden by rule, client: 100.53.7.70, server: binixo.ph, request: "GET /.gitlab-ci.yml HTTP/1.1", host: "binixo.ph"
2026/11/11 17:48:14 [error] 2031557#2031557: *28633265 access forbidden by rule, client: 100.53.7.70, server: binixo.ph, request: "GET /.git/config.old HTTP/1.1", host: "binixo.ph"
2026/11/11 17:48:14 [error] 2031557#2031557: *28633266 access forbidden by rule, client: 100.53.7.70, server: binixo.ph, request: "GET /config/.git/config HTTP/1.1", host: "binixo.ph"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 16:39:50
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 100.53.7.70 (ec2-100-53-7-70.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:39:45.080164 2026] [security2:error] [pid 26243:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 100.53.7.70 (ec2-100-53-7-70.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:39:45.080164 2026] [security2:error] [pid 26243:tid 26255] [client 100.53.7.70:44704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mojodelicatesse.com.oplconnect.com"] [uri "/config/.git/config"] [unique_id "avSaUY6Ts5nRPPkuWuwMKAAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-11 16:25:45
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇨🇭
jebla.ch
2026-11-11 16:07:04
UTC ·
(1 day ago)
Busted by the WatchPost edge sentinel: this host was probing web-app endpoints for a way in. Blocked at the edge, logged, and shared with the community. Last seen 2026-11-11 15:53 UTC.
Web App Attack
🇮🇹
VHosting
2026-11-11 16:05:09
UTC ·
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-11 15:27:37
UTC ·
(1 day ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 100.53.7.70 - - [11/Nov/2026:16:27:24 +0100] "GET /.env HTTP/1.1" 301 6239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_2 like Mac OS X) AppleWebKi ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 100.53.7.70 - - [11/Nov/2026:16:27:24 +0100] "GET /.env HTTP/1.1" 301 6239 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Mobile/15E148 Safari/604.1"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 15:20:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 100.53.7.70 (ec2-100-53-7-70.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:20:04.892545 2026] [security2:error] [pid 19077:tid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 100.53.7.70 (ec2-100-53-7-70.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:20:04.892545 2026] [security2:error] [pid 19077:tid 19077] [client 100.53.7.70:12806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cmcnyc.com"] [uri "/.env"] [unique_id "avSHpM-EqofH1XXiJRsrNQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:59:15
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 100.53.7.70 (ec2-100-53-7-70.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:59:11.709588 2026] [security2:error] [pid 32412:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 100.53.7.70 (ec2-100-53-7-70.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:59:11.709588 2026] [security2:error] [pid 32412:tid 32412] [client 100.53.7.70:52400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pcmechanic.com"] [uri "/.env"] [unique_id "avR0r460y0wDA9DkOalzyQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
