🇳🇱
Mangelot Hosting
2026-10-20 02:10:48
(6 days ago)
(web_sensitive_file) srv102 Sensitive file probe (.env/.git/backup) 209.97.164.129 (SG/Singapore/-): ...
show more
(web_sensitive_file) srv102 Sensitive file probe (.env/.git/backup) 209.97.164.129 (SG/Singapore/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
2026-10-19 23:44:51
(6 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇦🇺
Klaverstyn
2026-10-19 22:15:25
(6 days ago)
Excessive HTTP request rate
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 21:09:11
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 209.97.164.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.97.164.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 17:09:06.820843 2026] [security2:error] [pid 28686:tid 28686] [client 209.97.164.129:50324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.vidacellenlaweb.com"] [uri "/.git/config"] [unique_id "ataG8vDqLsBScpCt1idSQAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 18:38:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 209.97.164.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.97.164.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 14:38:15.117572 2026] [security2:error] [pid 12988:tid 12988] [client 209.97.164.129:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.theabstractpress.com"] [uri "/.git/config"] [unique_id "atZjlw5VgakARg1T-Vt6mgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 16:06:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 209.97.164.129 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 209.97.164.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 12:06:16.386858 2026] [security2:error] [pid 5779:tid 5779] [client 209.97.164.129:49498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.sipa.com.hk"] [uri "/.git/config"] [unique_id "atY_-APsKRtcXpGMNISyCQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-10-19 13:20:04
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇧🇷
mateus.vicente
2026-10-19 01:25:53
(1 week ago)
[2026-10-19T01:25:53Z] Requests to sensitive Apache endpoints and path traversal patterns. (srv-app)
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
jack252
2026-10-19 01:22:39
(1 week ago)
2026/10/19 03:22:37 [error] 1306#1306: *13409 open() "/var/www/html/mailer/.env" failed (2: No such ...
show more
2026/10/19 03:22:37 [error] 1306#1306: *13409 open() "/var/www/html/mailer/.env" failed (2: No such file or directory), client: 209.97.164.129, server: _, request: "GET /mailer/.env HTTP/1.1", host: "0xfc.de"
2026/10/19 03:22:37 [error] 1306#1306: *13409 open() "/var/www/html/mail/.env" failed (2: No such file or directory), client: 209.97.164.129, server: _, request: "GET /mail/.env HTTP/1.1", host: "0xfc.de"
2026/10/19 03:22:38 [error] 1306#1306: *13409 open() "/var/www/html/mailing/.env" failed (2: No such file or directory), client: 209.97.164.129, server: _, request: "GET /mailing/.env HTTP/1.1", host: "0xfc.de"
...
show less
Brute-Force
Bad Web Bot
