🇧🇪
FrankNeirynck
2026-11-15 10:58:57
UTC ·
(7 hours ago)
insink.duckdns.org 142.93.151.206 - - [13/Nov/2026:22:56:16 +0100] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" 0.000
...
Hacking
Brute-Force
🇩🇪
FeG Deutschland
2026-11-14 21:17:16
UTC ·
(21 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇺🇸
francelink.fr
2026-11-14 19:56:24
UTC ·
(22 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-14T19:53:39.000Z.
Web App Attack
🇳🇱
mieg
2026-11-14 19:53:50
UTC ·
(22 hours ago)
Web vulnerability probing
Brute-Force
Web App Attack
🇩🇪
tinect
2026-11-14 19:01:05
UTC ·
(23 hours ago)
Gets ban for 4h for triggering tinect/http-sensitive-file-probe at root1.
Web App Attack
🇮🇹
CoreTech srl
2026-11-14 18:58:56
UTC ·
(23 hours ago)
cloudlinux2 fail2ban: 2026-11-14 19:54:46,021 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 172.64.200.62 - 2026-11-14 19:54:46cloudlinux2 fail2ban: 2026-11-14 19:54:46,231 fail2ban.filter [1443]: INFO [plesk-modsecurit ...
show more
cloudlinux2 fail2ban: 2026-11-14 19:54:46,021 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 172.64.200.62 - 2026-11-14 19:54:46cloudlinux2 fail2ban: 2026-11-14 19:54:46,231 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 172.64.200.226 - 2026-11-14 19:54:46cloudlinux2 fail2ban: 2026-11-14 19:55:05,485 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 82.86.139.84 - 2026-11-14 19:55:04cloudlinux2 fail2ban: 2026-11-14 19:56:01,979 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 172.64.200.8 - 2026-11-14 19:56:01cloudlinux2 fail2ban: 2026-11-14 19:56:10,381 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 142.93.151.206 - 2026-11-14 19:56:10cloudlinux2 fail2ban: 2026-11-14 19:56:10,484 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 142.93.151.206 - 2026-11-14 19:56:10cloudlinux2 fail2ban: 2026-11-14 19:56:35,100 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 91.90.11.211 - 2026-11-14 19:56:3
show less
Web App Attack
🇬🇧
consul.to
2026-11-14 18:34:30
UTC ·
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 17:31:38
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 142.93.151.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:31:32.737803 2026] [security2:error] [pid 30346:tid 30346] [client 142.93.151.206:35390] ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.151.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 12:31:32.737803 2026] [security2:error] [pid 30346:tid 30346] [client 142.93.151.206:35390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thruthelens.org"] [uri "/.git/config"] [unique_id "avia9IyuLa45k4n3jrg2agAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 16:38:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 142.93.151.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:38:16.691677 2026] [security2:error] [pid 3339:tid 3339] [client 142.93.151.206:58844] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.151.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 11:38:16.691677 2026] [security2:error] [pid 3339:tid 3339] [client 142.93.151.206:58844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theroyalhouseofelohim.org"] [uri "/.git/config"] [unique_id "aviOeFs-evAgXTnQm8DqcQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
security.rdmc.fr
2026-11-14 16:29:44
UTC ·
(1 day ago)
Activity from blacklisted IP
Hacking
2026-11-14 14:07:31
UTC ·
(1 day ago)
142.93.151.206 - - [14/Nov/2026:14:07:31 +0000] "GET /.git/config HTTP/1.1" 503 5350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
🇺🇸
brightenfield
2026-11-14 13:37:34
UTC ·
(1 day ago)
Web App Attack
Web App Attack
2026-11-14 13:34:44
UTC ·
(1 day ago)
jails=404-burst,sensitive-probe; categories=14,21; events=2; first=2026-11-14T13:34:44Z; last=2026-11-14T13:34:44Z
Port Scan
Web App Attack
🇬🇧
andypiper
2026-11-14 02:03:31
UTC ·
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 01:56:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 142.93.151.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:56:49.889146 2026] [security2:error] [pid 25576:tid 25576] [client 142.93.151.206:45090] ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.151.206 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:56:49.889146 2026] [security2:error] [pid 25576:tid 25576] [client 142.93.151.206:45090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeremy-olson.com.mngop47.org"] [uri "/.git/config"] [unique_id "ave_4f7ObJpcNi0sEnU5vAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
