🇳🇱
homeshowdomain.nl
2026-10-16 22:01:31
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-15.
show less
Web App Attack
SSH
Hacking
🇧🇪
cmbplf
2026-10-16 20:33:25
(4 days ago)
2.806 requests with url.path *.env
512 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇩🇪
altenglaner
2026-10-16 19:21:08
(4 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇨🇭
flaus
2026-10-16 18:04:18
(4 days ago)
$f2bV_matches
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 16:47:38
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.64.48 (48.64.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.64.48 (48.64.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:47:32.564694 2026] [security2:error] [pid 14831:tid 14831] [client 34.175.64.48:42634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flatchestedmama.com"] [uri "/.git/config"] [unique_id "atJVJGmjVIzAZT0MuVdZ5gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-16 16:30:02
(4 days ago)
suspicious request in access.log
Web App Attack
🇺🇸
Glitched
2026-10-16 14:52:58
(4 days ago)
ECW observed repeated web application probing. Requests: 182. Paths: /redis/.env, /elasticsearch/.en ...
show more
ECW observed repeated web application probing. Requests: 182. Paths: /redis/.env, /elasticsearch/.env, /rabbitmq/.env, /kafka/.env, /queue/.env, /worker/.env, /job/.env, /test/.env, /qa/.env, /preview/.env. GreyNoise: no cached enrichment
show less
Web App Attack
🇧🇾
lns.bz
2026-10-16 14:27:12
(4 days ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 14:18:06
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.64.48 (48.64.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.64.48 (48.64.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 10:17:59.623352 2026] [security2:error] [pid 21885:tid 21885] [client 34.175.64.48:53606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flashbackmusicmemories.com"] [uri "/.git/config"] [unique_id "atIyF7kMjLhoQHjL3uKmzwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-16 12:50:41
(4 days ago)
20 attempts against mh-misbehave-ban on flare
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-10-16 11:50:41
(4 days ago)
Web exploit or injection attempt blocked by ModSecurity WAF.
SQL Injection
Web App Attack
🇬🇧
consul.to
2026-10-16 11:05:20
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Site.eu
2026-10-16 10:45:14
(4 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-10-16 10:00:32
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.64.48 (48.64.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.64.48 (48.64.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:00:27.271661 2026] [security2:error] [pid 10158:tid 10158] [client 34.175.64.48:34746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flamberge.com"] [uri "/.git/config"] [unique_id "atH1u_fH_E9ph7Bo4RBWpAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-10-16 06:52:28
(4 days ago)
URL Probing: /server/.env
Web App Attack
