🇹🇷
pashait
2026-11-14 22:49:07
UTC ·
(16 seconds ago)
Auto-blocked by Seczar SecureOps — Threat Intel IOC Match (3 events in 5min) at 2026-11-14 22:49
Exploited Host
🇨🇱
Fernando Soto
2026-11-14 22:25:01
UTC ·
(24 minutes ago)
WAF propio vps1 (CL): sensx18 score 20 en 1h. sondeo rutas sensibles.
Web App Attack
🇳🇱
Alt255
2026-11-14 21:56:43
UTC ·
(52 minutes ago)
[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 49.51.188.89 - - [14/Nov/2026:22:56:34 +0100] "GET /.env HTTP/1.1" 301 488 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) A ...
show more
[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 49.51.188.89 - - [14/Nov/2026:22:56:34 +0100] "GET /.env HTTP/1.1" 301 488 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 21:18:04
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 49.51.188.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:17:59.855333 2026] [security2:error] [pid 24139:tid 24139] [client 49.51.188.89:0] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 49.51.188.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:17:59.855333 2026] [security2:error] [pid 24139:tid 24139] [client 49.51.188.89:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ard.global"] [uri "/.env"] [unique_id "avjQBxQD-RcIdxQIu2owWAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇱
spd.co.il
2026-11-14 19:02:00
UTC ·
(3 hours ago)
Web application attack detected
Hacking
Web App Attack
🇺🇸
webmaster-bancariosdf
2026-11-14 16:40:02
UTC ·
(6 hours ago)
Web scanner: 38 requests for sensitive files (/pop.popist.com/.env, /.env, /.aws/credentials, /vendor/.env). Blocked by firewall.
Web App Attack
Hacking
Exploited Host
🇦🇺
nzhost.co.nz
2026-11-14 15:46:51
UTC ·
(7 hours ago)
$f2bV_matches
Hacking
Brute-Force
2026-11-14 15:03:44
UTC ·
(7 hours ago)
Automatically blocked after 1 security event. Observed sensitive configuration-file probes. Source: Cloudflare security controls.
Hacking
Web App Attack
2026-11-14 15:02:48
UTC ·
(7 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 49.51.188.89 (US/United States/-)
SQL Injection
🇩🇪
svr
2026-11-14 14:59:32
UTC ·
(7 hours ago)
Abusive Automated Web Scanner
Web App Attack
🇩🇪
maxpower
2026-11-14 12:59:23
UTC ·
(9 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 49.51.188.89 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 49.51.188.89 - - [14/Nov/2026:13:59:21 +0100] "GET /.aws/credentials ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 49.51.188.89 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 49.51.188.89 - - [14/Nov/2026:13:59:21 +0100] "GET /.aws/credentials HTTP/2.0" 404 8627 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" "49.51.188.89" host=circolotennispescara.it
show less
Port Scan
2026-11-14 11:05:48
UTC ·
(11 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:31:39
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 49.51.188.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:31:34.566151 2026] [security2:error] [pid 16945:tid 16945] [client 49.51.188.89:0] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 49.51.188.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:31:34.566151 2026] [security2:error] [pid 16945:tid 16945] [client 49.51.188.89:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.hollyranch.com"] [uri "/.env"] [unique_id "avgqdvaGHY8sL6B6Y6XrdAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-14 05:24:36
UTC ·
(17 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Kinsei Engineering Inc.
2026-11-14 03:21:54
UTC ·
(19 hours ago)
2026/11/14 12:21:50 [error] 317823#317823: *58129 access forbidden by rule, client: 49.51.188.89, server: www.kinsei.jp, request: "GET /.env HTTP/2.0", host: "www.kinsei.jp"
2026/11/14 12:21:52 [error] 317824#317824: *58126 access forbidden by rule, ...
show more
2026/11/14 12:21:50 [error] 317823#317823: *58129 access forbidden by rule, client: 49.51.188.89, server: www.kinsei.jp, request: "GET /.env HTTP/2.0", host: "www.kinsei.jp"
2026/11/14 12:21:52 [error] 317824#317824: *58126 access forbidden by rule, client: 49.51.188.89, server: www.kinsei.jp, request: "GET /.env HTTP/2.0", host: "www.kinsei.jp"
2026/11/14 12:21:54 [error] 317823#317823: *58135 access forbidden by rule, client: 49.51.188.89, server: www.kinsei.jp, request: "GET /kinsei.jp/.env HTTP/2.0", host: "www.kinsei.jp"
show less
Brute-Force
Web Spam
