🇬🇧
consul.to
2026-09-19 15:11:27
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 14:00:44
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terap ...
show more
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terapeer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 10:00:38.174015 2026] [security2:error] [pid 13966:tid 13966] [client 49.50.96.38:44276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fales.org"] [uri "/.git/config"] [unique_id "aq6VhnODDOoTSZ3PlbKNWAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-18 22:01:29
(19 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-17.
show less
Web App Attack
SSH
Hacking
🇫🇷
masterguru
2026-09-18 19:39:33
(21 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇨🇳
Zhengka.net
2026-09-18 18:41:43
(22 hours ago)
zhengka.net security honeypot hit; jail=zhengka.net_honeypot; ip=49.50.96.38
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 18:41:03
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terap ...
show more
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terapeer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 14:40:56.039391 2026] [security2:error] [pid 14273:tid 14273] [client 49.50.96.38:54142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benlbrown.com"] [uri "/.git/config"] [unique_id "aq2FuEmqp5y944Lfx16TkgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
miszterx.hu
2026-09-18 08:06:15
(1 day ago)
XORP (haproxy): 4x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ipt ...
show more
XORP (haproxy): 4x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 07:57:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terap ...
show more
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terapeer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 03:57:47.995746 2026] [security2:error] [pid 30930:tid 31038] [client 49.50.96.38:43602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/composer.lock" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "killasgarage.bike"] [uri "/composer.lock"] [unique_id "aqzu-94l1qQSSnIWM1XKnwAAAdA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
initsol
2026-09-18 07:36:28
(1 day ago)
[Fri Sep 18 09:35:59.982161 2026] [authz_core:error] [pid 4182697:tid 4182697] [client 49.50.96.38:4 ...
show more
[Fri Sep 18 09:35:59.982161 2026] [authz_core:error] [pid 4182697:tid 4182697] [client 49.50.96.38:47594] AH01630: client denied by server configuration: /var/www/api
[Fri Sep 18 09:36:17.957254 2026] [authz_core:error] [pid 4182613:tid 4182613] [client 49.50.96.38:44962] AH01630: client denied by server configuration: /var/www/api
[Fri Sep 18 09:36:28.383194 2026] [authz_core:error] [pid 4162957:tid 4162957] [client 49.50.96.38:47280] AH01630: client denied by server configuration: /var/www/api
...
show less
Brute-Force
🇳🇱
homeshowdomain.nl
2026-09-17 21:59:58
(1 day ago)
Auto-ban: >3000 req/min op 2026-09-17
Web App Attack
SSH
Hacking
🇺🇸
mnsf
2026-09-17 14:05:16
(2 days ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-17 11:53:25
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-17 07:48:18
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terap ...
show more
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terapeer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 03:48:14.534310 2026] [security2:error] [pid 17593:tid 17593] [client 49.50.96.38:43734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adlc18.org"] [uri "/wp-config.php.bak"] [unique_id "aqubPgIlihn72FPrYIiLHAAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 05:26:46
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terap ...
show more
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terapeer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 01:26:42.408031 2026] [security2:error] [pid 25031:tid 25031] [client 49.50.96.38:43790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "escapegeorgesrouquier.williamgilcher.com"] [uri "/.git/config"] [unique_id "aqt6EkaIo-DJXiQg3q1DwwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 04:40:25
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terap ...
show more
(mod_security) mod_security (id:210492) triggered by 49.50.96.38 (49-50-96-38.noida.datacenter.terapeer.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 00:40:21.469103 2026] [security2:error] [pid 12464:tid 12513] [client 49.50.96.38:43200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visionforandfromchildren.org"] [uri "/wp-config.php.txt"] [unique_id "aqtvNdEWWWt5vu4hNBw_xgAAAc8"]
show less
Brute-Force
Bad Web Bot
Web App Attack