🇳🇱
debestelapp
2026-11-07 15:30:09
UTC ·
(1 hour ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 11:25:16
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 43.130.76.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 06:25:10.657591 2026] [security2:error] [pid 26932:tid 26932] [client 43.130.76.29:47720] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 43.130.76.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 06:25:10.657591 2026] [security2:error] [pid 26932:tid 26932] [client 43.130.76.29:47720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kinnairdenterprisesllc.com.pages4you.com"] [uri "/.git/config"] [unique_id "au8KlgCTtrWhbjcVrI0siwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-07 09:31:36
UTC ·
(7 hours ago)
255 requests with url.path *.env
Brute-Force
Bad Web Bot
🇬🇧
consul.to
2026-11-07 04:11:28
UTC ·
(13 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 23:00:20
UTC ·
(18 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-05.
Web App Attack
SSH
Hacking
Anonymous
2026-11-06 18:49:02
UTC ·
(22 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.backup HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.old HTTP/1.1
Hacking
Web App Attack
🇳🇱
Site.eu
2026-11-06 15:44:48
UTC ·
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-11-06 14:18:03
UTC ·
(1 day ago)
Blocked by ConnMonitor
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-05 23:00:37
UTC ·
(1 day ago)
Auto-ban: >3000 req/min op 2026-11-05
Web App Attack
SSH
Hacking
🇮🇹
CoreTech srl
2026-11-05 19:53:57
UTC ·
(1 day ago)
cloudlinux2 fail2ban: 2026-11-05 20:50:00,549 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 176.112.110.190 - 2026-11-05 20:49:59cloudlinux2 fail2ban: 2026-11-05 20:49:57,743 fail2ban.filter [1800]: INFO [plesk-modsecurit ...
show more
cloudlinux2 fail2ban: 2026-11-05 20:50:00,549 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 176.112.110.190 - 2026-11-05 20:49:59cloudlinux2 fail2ban: 2026-11-05 20:49:57,743 fail2ban.filter [1800]: INFO [plesk-modsecurity] Found 111.197.2.184 - 2026-11-05 20:49:57cloudlinux2 fail2ban: 2026-11-05 20:50:06,114 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 99.141.128.84 - 2026-11-05 20:50:05cloudlinux2 fail2ban: 2026-11-05 20:50:41,279 fail2ban.filter [1800]: INFO [plesk-modsecurity] Found 95.139.121.41 - 2026-11-05 20:50:41cloudlinux2 fail2ban: 2026-11-05 20:51:03,684 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 188.164.163.149 - 2026-11-05 20:51:03cloudlinux2 fail2ban: 2026-11-05 20:51:23,662 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 185.247.23.74 - 2026-11-05 20:51:23cloudlinux2 fail2ban: 2026-11-05 20:51:41,665 fail2ban.filter [1800]: INFO [plesk-modsecurity] Found 43.130.76.29 - 2026-11-05 20:51:41
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 19:04:01
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 43.130.76.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:03:55.733974 2026] [security2:error] [pid 2429:tid 2429] [client 43.130.76.29:53916] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 43.130.76.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:03:55.733974 2026] [security2:error] [pid 2429:tid 2429] [client 43.130.76.29:53916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nnrentacar.com"] [uri "/.git/config"] [unique_id "auzTG3f2y9kgAFXIQzd_SgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 15:41:33
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 43.130.76.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 10:41:25.828338 2026] [security2:error] [pid 29947:tid 29947] [client 43.130.76.29:47548] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 43.130.76.29 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 10:41:25.828338 2026] [security2:error] [pid 29947:tid 29947] [client 43.130.76.29:47548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.njletr.bknj2.org"] [uri "/.git/config"] [unique_id "auyjpey-QDYYDfsj5k00mgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-05 15:03:17
UTC ·
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇿🇦
conure.sh
2026-11-05 12:50:04
UTC ·
(2 days ago)
csagent: score 19.8: secrets grab x2; 1 domain(s) in 5s
Web App Attack
Anonymous
2026-11-05 12:12:40
UTC ·
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack