🇳🇱
homeshowdomain.nl
2026-10-16 21:59:22
(2 hours ago)
Auto-ban: >3000 req/min op 2026-10-16
Web App Attack
SSH
Hacking
🇺🇸
abuse-opdc
2026-10-16 19:41:34
(4 hours ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force
🇩🇪
wpadm4
2026-10-16 19:22:09
(4 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-16 18:29:53
(5 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 17:27:48
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.120.73 (73.120.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.120.73 (73.120.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 13:27:43.341575 2026] [security2:error] [pid 20172:tid 20192] [client 35.231.120.73:38406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.opccentralcoast.oconnorpest.biz"] [uri "/.git/config"] [unique_id "atJej7r3HKP3l5Ekffs_XAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-10-16 16:32:12
(7 hours ago)
Bad_requests
Bad Web Bot
🇩🇪
big-cloud.nl
2026-10-16 15:51:09
(8 hours ago)
Try to access /.git/config
Web App Attack
🇳🇱
Alt255
2026-10-16 15:39:03
(8 hours ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.231.120.73 - - [16/Oct/2026:17:38:58 +0200] "GET /.git/config HTTP/1.1" 404 2126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-16 14:29:44
(9 hours ago)
6.704 requests with url.path *.env
1.119 requests with url.path *phpinfo.php
226 requests with ur ...
show more
6.704 requests with url.path *.env
1.119 requests with url.path *phpinfo.php
226 requests with url.path *.php.bak
189 requests with url.path */.git/config
show less
Brute-Force
Bad Web Bot
🇫🇷
masterguru
2026-10-16 14:19:55
(9 hours ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
🇳🇱
Mangelot Hosting
2026-10-16 13:37:54
(10 hours ago)
(modsec_attack) srv104 ModSecurity attack 35.231.120.73 (US/United States/73.120.231.35.bc.googleuse ...
show more
(modsec_attack) srv104 ModSecurity attack 35.231.120.73 (US/United States/73.120.231.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 12:35:40
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.120.73 (73.120.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.120.73 (73.120.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:35:34.273706 2026] [security2:error] [pid 1243:tid 1243] [client 35.231.120.73:49976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.onward.bahamascruisersguide.com"] [uri "/.git/config"] [unique_id "atIaFk8lfaW5ViHeXqit8wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-16 12:27:33
(11 hours ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇩🇪
hidemail.app
2026-10-16 11:28:17
(12 hours ago)
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto ...
show more
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
show less
Web App Attack
Hacking
🇳🇱
Alt255
2026-10-16 10:39:42
(13 hours ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.231.120.73 - - \[16/Oct/2026:12:39:22 +0200\] "GET /.git/config HTTP/1.1" 301 673 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack