🇳🇱
Site.eu
2026-11-09 14:03:50
UTC ·
(56 minutes ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
2026-11-09 12:42:44
UTC ·
(2 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 46.101.40.48 (GB/United Kingdom/-)
SQL Injection
🇺🇸
TPI-Abuse
2026-11-09 08:00:29
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 46.101.40.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:00:22.920052 2026] [security2:error] [pid 9550:tid 9550] [client 46.101.40.48:48276] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.40.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:00:22.920052 2026] [security2:error] [pid 9550:tid 9550] [client 46.101.40.48:48276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chooseyourowntrail.com"] [uri "/.git/config"] [unique_id "avF9lmGGwEejiS6wFD_QHAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Adolfo Montaño
2026-11-09 07:51:04
UTC ·
(7 hours ago)
CrowdSec blocked IP for crowdsecurity/http-wordpress_wpconfig on localhost
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:43:45
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 46.101.40.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:43:38.048453 2026] [security2:error] [pid 3780:tid 3847] [client 46.101.40.48:0] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.40.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:43:38.048453 2026] [security2:error] [pid 3780:tid 3847] [client 46.101.40.48:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "raytbrown.com"] [uri "/.git/config"] [unique_id "avF5qjabsdOghvzhzHFHqAAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-09 07:02:09
UTC ·
(7 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
regishoussin
2026-11-09 05:00:13
UTC ·
(9 hours ago)
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-11-09 05:00 UTC.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:02:26
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 46.101.40.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:02:21.938234 2026] [security2:error] [pid 8691:tid 8691] [client 46.101.40.48:0] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 46.101.40.48 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:02:21.938234 2026] [security2:error] [pid 8691:tid 8691] [client 46.101.40.48:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ccamp.dev"] [uri "/.env"] [unique_id "avFFzXM4QvHq38B0LpqV8QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
AutosOnShow
2026-11-09 03:47:05
UTC ·
(11 hours ago)
blocked for webapp attack | path requested: /.env; | seen at 2026-11-09 03:46:27.815 |
Web App Attack
🇩🇪
macrob
2026-11-09 03:46:00
UTC ·
(11 hours ago)
2026/11/09 03:45:59 [error] 782866#782866: *18063766 access forbidden by rule, client: 46.101.40.48, server: finami.ph, request: "GET /.git/config HTTP/2.0", host: "finami.ph"
2026/11/09 03:45:59 [error] 782864#782864: *18159871 access forbidden by r ...
show more
2026/11/09 03:45:59 [error] 782866#782866: *18063766 access forbidden by rule, client: 46.101.40.48, server: finami.ph, request: "GET /.git/config HTTP/2.0", host: "finami.ph"
2026/11/09 03:45:59 [error] 782864#782864: *18159871 access forbidden by rule, client: 46.101.40.48, server: finami.ph, request: "GET /.git/HEAD HTTP/2.0", host: "finami.ph"
2026/11/09 03:45:59 [error] 782864#782864: *18071949 access forbidden by rule, client: 46.101.40.48, server: finami.ph, request: "GET /.svn/entries HTTP/2.0", host: "finami.ph"
...
show less
Web App Attack
2026-11-09 03:38:08
UTC ·
(11 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇰
ScamAware
2026-11-08 21:16:10
UTC ·
(17 hours ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 12. Unique request paths counted internally: 10. Cloudflare acti ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 12. Unique request paths counted internally: 10. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack
🇺🇸
nyt
2026-11-08 19:18:19
UTC ·
(19 hours ago)
Sensitive File Probe
Web App Attack
🇩🇪
klaus_ph
2026-11-08 19:11:12
UTC ·
(19 hours ago)
46.101.40.48 - - [08/Nov/2026:20:11:12 +0100] "GET / HTTP/1.1" 200 1186 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36"
...
Bad Web Bot
🇫🇷
COMAITE
2026-11-08 17:48:09
UTC ·
(21 hours ago)
Suspicious URL access.
Web App Attack
