🇧🇾
lns.bz
2026-11-11 00:59:27
UTC ·
(16 hours ago)
.env scanning [BY]
Web App Attack
🇩🇪
MarkGGN
2026-11-09 08:41:01
UTC ·
(2 days ago)
Web attack. 43.133.110.51 - - [09/Nov/2026:09:41:00 +0100] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 43.133.110.51 - - [09/Nov/2026: ...
show more
Web attack. 43.133.110.51 - - [09/Nov/2026:09:41:00 +0100] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 43.133.110.51 - - [09/Nov/2026:09:41:00 +0100] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
🇧🇪
cmbplf
2026-11-09 07:29:17
UTC ·
(2 days ago)
216 requests with url.path *.env
Brute-Force
Bad Web Bot
🇫🇷
masterguru
2026-11-08 19:57:22
UTC ·
(2 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 19:54:01
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 43.133.110.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:53:56.229961 2026] [security2:error] [pid 1878:tid 1878] [client 43.133.110.51:39786] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 43.133.110.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:53:56.229961 2026] [security2:error] [pid 1878:tid 1878] [client 43.133.110.51:39786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabrielapostres.co"] [uri "/.git/config"] [unique_id "avDTVKof76CuJaIholbmrQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-08 19:40:24
UTC ·
(2 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-07 22:59:11
UTC ·
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-06.
Web App Attack
SSH
Hacking
🇩🇪
Grossmann-Gruppe
2026-11-07 16:08:51
UTC ·
(4 days ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
2026-11-07 15:12:43
UTC ·
(4 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 00:24:54
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 43.133.110.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 19:24:51.364710 2026] [security2:error] [pid 14398:tid 14398] [client 43.133.110.51:49418] M ...
show more
(mod_security) mod_security (id:210492) triggered by 43.133.110.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 19:24:51.364710 2026] [security2:error] [pid 14398:tid 14398] [client 43.133.110.51:49418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galvanizetm.com"] [uri "/.git/config"] [unique_id "au5v0wf6TOkzV7QSEBPcywAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 23:33:32
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 43.133.110.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:33:25.428611 2026] [security2:error] [pid 16285:tid 16285] [client 43.133.110.51:48100] M ...
show more
(mod_security) mod_security (id:210492) triggered by 43.133.110.51 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:33:25.428611 2026] [security2:error] [pid 16285:tid 16285] [client 43.133.110.51:48100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "galeriedorion.com"] [uri "/.git/config"] [unique_id "au5jxYa4P2hd26KWY12zuwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-11-06 23:09:53
UTC ·
(4 days ago)
Multiple WAF Violations
Web App Attack
2026-11-06 22:19:14
UTC ·
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-11-06 22:03:37
UTC ·
(4 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-06 09:43:55
UTC ·
(5 days ago)
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 43.133.110.51 - - \[06/Nov/2026:10:43:36 +0100\] "GET /.git/config HTTP/1.1" 404 2176 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 43.133.110.51 - - \[06/Nov/2026:10:43:36 +0100\] "GET /.git/config HTTP/1.1" 404 2176 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
