๐ณ๐ฑ
Alt255
2026-10-19 21:25:21
(3 days ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 46.183.139.216 - - [19/Oct/2026:23:25:02 +0200] "GET /.env HTTP/1.1" 301 421 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-19 18:13:30
(4 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ณ๐ฟ
Tripwire
2026-10-19 16:47:51
(4 days ago)
Scanning for exploits - /.env
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-19 03:40:54
(4 days ago)
Try to access /.env
Web App Attack
Anonymous
2026-10-19 01:52:35
(4 days ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
๐ฑ๐น
Evag Touf
2026-10-18 20:55:43
(4 days ago)
(apache-empty-useragent) Failed apache-empty-useragent trigger from 46.183.139.216 (DK/Denmark/web16 ...
show more
(apache-empty-useragent) Failed apache-empty-useragent trigger from 46.183.139.216 (DK/Denmark/web16.gigahost.dk)
show less
Hacking
๐ฉ๐ช
findlab
2026-10-17 04:05:01
(6 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
๐ช๐ธ
Gem
2026-10-09 22:08:01
(1 week ago)
Unauthorized web scan.
Web App Attack
๐ซ๐ฎ
YF
2026-09-25 10:00:52
(4 weeks ago)
Environment file probe
Web App Attack
๐ซ๐ท
IRISIO
2026-09-25 07:12:34
(4 weeks ago)
scans/SQL injection/spam posts : 3 queries
Web App Attack
SQL Injection
๐ณ๐ฑ
homeshowdomain.nl
2026-09-23 22:01:46
(4 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-22.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-22 22:05:22
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 46.183.139.216 (web16.gigahost.dk): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 46.183.139.216 (web16.gigahost.dk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:05:18.041952 2026] [security2:error] [pid 4071:tid 4071] [client 46.183.139.216:47329] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brickyardinn.com"] [uri "/wp-config.php.bak"] [unique_id "arL7npJY9o0LblNhUsWaowAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 21:29:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 46.183.139.216 (web16.gigahost.dk): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 46.183.139.216 (web16.gigahost.dk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 17:29:21.237330 2026] [security2:error] [pid 13365:tid 13365] [client 46.183.139.216:37658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidharrisgriffith.com"] [uri "/wp-config.php.bak"] [unique_id "arLzMae5g8XDel7GTWJaQgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 20:45:10
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 46.183.139.216 (web16.gigahost.dk): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 46.183.139.216 (web16.gigahost.dk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:45:04.549452 2026] [security2:error] [pid 16241:tid 16249] [client 46.183.139.216:59772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thecomputergreek.com"] [uri "/wp-config.php.bak"] [unique_id "arLo0L5E2sKr39MO73d8SwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 20:02:15
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 46.183.139.216 (web16.gigahost.dk): 1 in the la ...
show more
(mod_security) mod_security (id:210492) triggered by 46.183.139.216 (web16.gigahost.dk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:02:06.600600 2026] [security2:error] [pid 2724:tid 2724] [client 46.183.139.216:57768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evelynkay.com"] [uri "/wp-config.php.bak"] [unique_id "arLevursNMokhFaVucNXIAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack