🇩🇪
altenglaner
2026-11-15 03:54:40
UTC ·
(9 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇳🇱
Roderic
2026-11-14 21:00:48
UTC ·
(16 hours ago)
Insights: 30 probe requests within 24 hours on 1 site, e.g. /.git/config (no normal page views)
Web App Attack
🇩🇪
hchristo
2026-11-14 16:26:01
UTC ·
(21 hours ago)
[Sat Nov 14 17:25:28.165371 2026] [authz_core:error] [pid 63425:tid 63480] [client 170.106.11.89:40254] AH01630: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/.env.bak
[Sat Nov 14 17:25:32.145255 2026] [authz_core:error] [p ...
show more
[Sat Nov 14 17:25:28.165371 2026] [authz_core:error] [pid 63425:tid 63480] [client 170.106.11.89:40254] AH01630: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/.env.bak
[Sat Nov 14 17:25:32.145255 2026] [authz_core:error] [pid 63425:tid 63492] [client 170.106.11.89:40254] AH01630: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/.env.save
[Sat Nov 14 17:25:32.328390 2026] [authz_core:error] [pid 63425:tid 63518] [client 170.106.11.89:40254] AH01630: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/.env.old
[Sat Nov 14 17:26:00.888360 2026] [authz_core:error] [pid 63425:tid 63513] [client 170.106.11.89:40254] AH01630: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/.env.swp
[Sat Nov 14 17:26:01.230327 2026] [authz_core:error] [pid 63425:tid 63483] [client 170.106.11.89:40254] AH01630: client denied by server configuration: /var/www/kd1121/htdocs/ms-concept/.env~
...
show less
Brute-Force
🇩🇪
konseptit
2026-11-14 14:43:35
UTC ·
(23 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 170.106.11.89 (US/United States/-)
SQL Injection
🇵🇱
strefapi_com
2026-11-14 14:22:24
UTC ·
(23 hours ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇩🇪
rh24
2026-11-14 04:16:16
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 170.106.11.89 (US/United States/-)
SQL Injection
🇮🇹
CoreTech srl
2026-11-13 20:33:57
UTC ·
(1 day ago)
cloudlinux2 fail2ban: 2026-11-13 21:28:53,397 fail2ban.filter [1444]: INFO [plesk-modsecurity] Found 170.106.11.89 - 2026-11-13 21:28:53cloudlinux2 fail2ban: 2026-11-13 21:28:54,466 fail2ban.actions [1444]: NOTICE [plesk-modsecurit ...
show more
cloudlinux2 fail2ban: 2026-11-13 21:28:53,397 fail2ban.filter [1444]: INFO [plesk-modsecurity] Found 170.106.11.89 - 2026-11-13 21:28:53cloudlinux2 fail2ban: 2026-11-13 21:28:54,466 fail2ban.actions [1444]: NOTICE [plesk-modsecurity] Ban 170.106.11.89cloudlinux2 fail2ban: 2026-11-13 21:28:54,505 fail2ban.filter [1444]: INFO [plesk-modsecurity] Found 170.106.11.89 - 2026-11-13 21:28:54cloudlinux2 fail2ban: 2026-11-13 21:28:53,790 fail2ban.filter [1444]: INFO [plesk-modsecurity] Found 170.106.11.89 - 2026-11-13 21:28:53cloudlinux2 fail2ban: 2026-11-13 21:28:54,503 fail2ban.filter [1444]: INFO [recidive] Found 170.106.11.89 - 2026-11-13 21:28:54cloudlinux2 fail2ban: 2026-11-13 21:28:52,914 fail2ban.filter [1444]: INFO [plesk-modsecurity] Found 170.106.11.89 - 2026-11-13 21:28:52cloudlinux2 fail2ban: 2026-11-13 21:29:20,780 fail2ban.filter [1444]: INFO [plesk-wordpress] Found 37.114.184.101 - 2026-11-13 21:29:20cloudlinux2 fail2ban: 2026-11
show less
Web App Attack
🇳🇱
Alt255
2026-11-13 10:07:21
UTC ·
(2 days ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 170.106.11.89 - - [13/Nov/2026:11:07:18 +0100] "GET /.git/config HTTP/1.1" 301 639 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 170.106.11.89 - - [13/Nov/2026:11:07:18 +0100] "GET /.git/config HTTP/1.1" 301 639 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-13 06:39:20
UTC ·
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-11-13 05:50:02
UTC ·
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
EGP Abuse Dept
2026-11-13 02:38:52
UTC ·
(2 days ago)
Scanning for web/db/file exploits on www.mostertdewinter.nl
SQL Injection
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-13 01:30:03
UTC ·
(2 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
dot.mg
2026-11-12 23:50:02
UTC ·
(2 days ago)
Scan of vulnerable files
Web App Attack
🇫🇮
oh.mg
2026-11-12 10:56:17
UTC ·
(3 days ago)
[Thu Nov 12 11:56:16.621426 2026] [security2:error] [pid 701657:tid 701666] [client 170.106.11.89:0] [client 170.106.11.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/sh ...
show more
[Thu Nov 12 11:56:16.621426 2026] [security2:error] [pid 701657:tid 701666] [client 170.106.11.89:0] [client 170.106.11.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.mmn.cat"] [uri "/"] [unique_id "avWbUBDTdxS-L9bpzbqKegAAAEc"]
[Thu Nov 12 11:56:16.896758 2026] [security2:error] [pid 701657:tid 701662] [client 170.106.11.89:0] [client 170.106.11.89] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluati
...
show less
Web App Attack
Bad Web Bot
Anonymous
2026-11-12 10:54:14
UTC ·
(3 days ago)
Bot / seems abusive / Apache connections: 22
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack