🇩🇪
hchristo
2026-11-07 01:22:53
UTC ·
(14 hours ago)
[Sat Nov 07 02:22:48.286347 2026] [authz_core:error] [pid 49549:tid 49621] [client 150.109.245.45:32960] AH01630: client denied by server configuration: /var/www/kd1151/htdocs/data13/.env.bak
[Sat Nov 07 02:22:48.838643 2026] [authz_core:error] [pid ...
show more
[Sat Nov 07 02:22:48.286347 2026] [authz_core:error] [pid 49549:tid 49621] [client 150.109.245.45:32960] AH01630: client denied by server configuration: /var/www/kd1151/htdocs/data13/.env.bak
[Sat Nov 07 02:22:48.838643 2026] [authz_core:error] [pid 49549:tid 49629] [client 150.109.245.45:32960] AH01630: client denied by server configuration: /var/www/kd1151/htdocs/data13/.env.save
[Sat Nov 07 02:22:49.112723 2026] [authz_core:error] [pid 49549:tid 49634] [client 150.109.245.45:32960] AH01630: client denied by server configuration: /var/www/kd1151/htdocs/data13/.env.old
[Sat Nov 07 02:22:52.396185 2026] [authz_core:error] [pid 49549:tid 49645] [client 150.109.245.45:32960] AH01630: client denied by server configuration: /var/www/kd1151/htdocs/data13/.env.swp
[Sat Nov 07 02:22:52.669209 2026] [authz_core:error] [pid 49549:tid 49640] [client 150.109.245.45:32960] AH01630: client denied by server configuration: /var/www/kd1151/htdocs/data13/.env~
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-11-06 23:25:32
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 150.109.245.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:25:29.550145 2026] [security2:error] [pid 7719:tid 7719] [client 150.109.245.45:58638] M ...
show more
(mod_security) mod_security (id:210492) triggered by 150.109.245.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:25:29.550145 2026] [security2:error] [pid 7719:tid 7719] [client 150.109.245.45:58638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casademunt.com"] [uri "/.git/config"] [unique_id "au5h6VE3e0nyk4srHt5_QwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 23:00:59
UTC ·
(16 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-05.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-06 22:57:42
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 150.109.245.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:57:35.322425 2026] [security2:error] [pid 30642:tid 30642] [client 150.109.245.45:58128] ...
show more
(mod_security) mod_security (id:210492) triggered by 150.109.245.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:57:35.322425 2026] [security2:error] [pid 30642:tid 30642] [client 150.109.245.45:58128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trapper.biz"] [uri "/.git/config"] [unique_id "au5bX5AOcQcXwsOOzu7h3gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-06 21:53:10
UTC ·
(17 hours ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Savvii
2026-11-06 20:29:23
UTC ·
(18 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 20:20:25
UTC ·
(19 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-11-06 20:18:51
UTC ·
(19 hours ago)
2026/11/06 20:18:48 [error] 3197033#3197033: *76037 [client 150.109.245.45] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `10' ) [file "/usr/ ...
show more
2026/11/06 20:18:48 [error] 3197033#3197033: *76037 [client 150.109.245.45] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `10' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "carportgh.com"] [uri "/"] [unique_id "179399632829.737881"] [ref ""], client: 150.109.245.45, server: www.carportgh.com, request: "POST / HTTP/1.1", host: "carportgh.com"
2026/11/06 20:18:48 [error] 3197033#3197033: *76037 [client 150.109.245.45] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `10' ) [file "/usr/local/owasp-modsecurity-cr
...
show less
Brute-Force
🇫🇷
masterguru
2026-11-06 20:15:39
UTC ·
(19 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇬🇧
consul.to
2026-11-06 18:12:24
UTC ·
(21 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
middelkoopcc
2026-11-06 03:43:01
UTC ·
(1 day ago)
2026-11-06 04:40:18 GET /.git/config [301] && 2026-11-06 04:40:19 GET /.env [301] && 2026-11-06 04:40:42 GET /.env.bak [301] && 140 more within 20 minutes
Web App Attack
🇸🇪
vaia.cloud
2026-11-06 00:25:02
UTC ·
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
2026-11-05 14:56:04
UTC ·
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-11-05 14:16:20
UTC ·
(2 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
