🇺🇸
jormaster3k
2026-11-10 10:21:21
UTC ·
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
altenglaner
2026-11-10 02:42:54
UTC ·
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇿🇦
conure.sh
2026-11-10 01:14:39
UTC ·
(2 days ago)
csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 2s
Web App Attack
🇺🇸
Lee Daniel
2026-11-09 15:11:27
UTC ·
(2 days ago)
170.106.141.114 - - [09/Nov/2026:10:11:27 -0500] "GET /.env HTTP/1.1" 403 6293 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-09 10:15:06
UTC ·
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
e.fierstra
2026-11-09 08:53:44
UTC ·
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 11:53:27
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 170.106.141.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:53:21.950755 2026] [security2:error] [pid 14873:tid 14873] [client 170.106.141.114:3980 ...
show more
(mod_security) mod_security (id:210492) triggered by 170.106.141.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:53:21.950755 2026] [security2:error] [pid 14873:tid 14873] [client 170.106.141.114:39800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "liveloopers.com"] [uri "/.git/config"] [unique_id "avBisfebk_BAkl0g5AS6yQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-07 23:01:06
UTC ·
(4 days ago)
Auto-ban: >3000 req/min op 2026-11-07
Web App Attack
SSH
Hacking
🇩🇪
BlueWire Hosting
2026-11-07 20:13:18
UTC ·
(4 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack
Anonymous
2026-11-07 19:42:22
UTC ·
(4 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Alt255
2026-11-07 19:14:01
UTC ·
(4 days ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 170.106.141.114 - - [07/Nov/2026:20:13:43 +0100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KH ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 170.106.141.114 - - [07/Nov/2026:20:13:43 +0100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-07 17:50:41
UTC ·
(4 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
thedreamer.nl
2026-11-07 15:30:22
UTC ·
(4 days ago)
170.106.141.114 - - [07/Nov/2026:16:27:11 +0100] "GET /.git/config HTTP/1.1" 200 296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "US" "Santa Clara" "37.35300" "-121.95440"
170. ...
show more
170.106.141.114 - - [07/Nov/2026:16:27:11 +0100] "GET /.git/config HTTP/1.1" 200 296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "US" "Santa Clara" "37.35300" "-121.95440"
170.106.141.114 - - [07/Nov/2026:16:27:12 +0100] "GET /.env HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "US" "Santa Clara" "37.35300" "-121.95440"
170.106.141.114 - - [07/Nov/2026:16:27:12 +0100] "GET /.env.local HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "US" "Santa Clara" "37.35300" "-121.95440"
170.106.141.114 - - [07/Nov/2026:16:27:13 +0100] "GET /.env.production HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "US" "Santa Clara" "37.35300" "-121.95440"
170.106.141.114 - - [07/No
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
snhosting
2026-11-07 15:11:16
UTC ·
(4 days ago)
170.106.141.114 - - [07/Nov/2026:16:11:05 +0100] "GET /.git/config HTTP/1.1" 404 837 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
170.106.141.114 - - [07/Nov/2026:16:11:05 +0100] "GET /.e ...
show more
170.106.141.114 - - [07/Nov/2026:16:11:05 +0100] "GET /.git/config HTTP/1.1" 404 837 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
170.106.141.114 - - [07/Nov/2026:16:11:05 +0100] "GET /.env HTTP/1.1" 404 837 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
170.106.141.114 - - [07/Nov/2026:16:11:05 +0100] "GET /.env.local HTTP/1.1" 404 837 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
170.106.141.114 - - [07/Nov/2026:16:11:06 +0100] "GET /.env.production HTTP/1.1" 404 837 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
170.106.141.114 - - [07/Nov/2026:16:11:06 +0100] "GET /.env.staging HTTP/1.1" 404 837 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
🇺🇸
TPI-Abuse
2026-11-07 01:14:12
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 170.106.141.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 20:14:05.287232 2026] [security2:error] [pid 20877:tid 20877] [client 170.106.141.114:5623 ...
show more
(mod_security) mod_security (id:210492) triggered by 170.106.141.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 20:14:05.287232 2026] [security2:error] [pid 20877:tid 20877] [client 170.106.141.114:56238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lietzau.net"] [uri "/.git/config"] [unique_id "au57XUeMsYQYf8VwbFCpnQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack