2026-11-03 12:18:14
UTC ·
(4 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-02 23:17:42
UTC ·
(4 days ago)
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 8.211.121.170 - - [03/Nov/2026:00:17:40 +0100] "GET /blazecrawl-18e45d9867bb9eba HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (Windows NT 10.0 ...
show more
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 8.211.121.170 - - [03/Nov/2026:00:17:40 +0100] "GET /blazecrawl-18e45d9867bb9eba HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
8.211.121.170 - - [03/Nov/2026:00:17:41 +0100] "GET /login HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
8.211.121.170 - - [03/Nov/2026:00:17:41 +0100] "GET /.env.production HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
8.211.121.170 - - [03/Nov/2026:00:17:41 +0100] "GET /%2f.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK
...
show less
Bad Web Bot
Web App Attack
2026-11-02 22:54:41
UTC ·
(4 days ago)
Scenarios: http-sensitive-files
Total requests: 25
Web App Attack
🇵🇱
Woytass
2026-11-02 21:59:38
UTC ·
(4 days ago)
CSF permanent block; ports=*; (mod_security) mod_security (id:210492) triggered by 8.211.121.170 (DE/Germany/-): 5 in the last 3600 secs
Web App Attack
🇹🇷
Jova
2026-11-02 17:43:56
UTC ·
(5 days ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
🇳🇱
Alt255
2026-11-02 12:45:06
UTC ·
(5 days ago)
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 8.211.121.170 - - [02/Nov/2026:13:44:47 +0100] "GET /.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K ...
show more
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 8.211.121.170 - - [02/Nov/2026:13:44:47 +0100] "GET /.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-11-02 09:54:10
UTC ·
(5 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
2026-11-02 04:05:14
UTC ·
(5 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
MatCat
2026-11-02 04:05:12
UTC ·
(5 days ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
🇩🇪
netclix.gr
2026-11-02 03:53:24
UTC ·
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 8.211.121.170 (DE/Germany/-): (CF_ENABLE)
SQL Injection
🇫🇷
SpaceHost-Server
2026-11-01 23:25:18
UTC ·
(5 days ago)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-01 22:59:35
UTC ·
(5 days ago)
Auto-ban: >3000 req/min op 2026-11-01
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-01 20:59:14
UTC ·
(5 days ago)
(mod_security) mod_security (id:949110) triggered by 8.211.121.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:59:08.705287 2026] [security2:error] [pid 20742:tid 20742] [client 8.211.121.170:52604] M ...
show more
(mod_security) mod_security (id:949110) triggered by 8.211.121.170 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 15:59:08.705287 2026] [security2:error] [pid 20742:tid 20742] [client 8.211.121.170:52604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "21oaksfarm.com"] [uri "/.env"] [unique_id "aueoHHuyKJhqFqdsieXr2wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-11-01 16:53:04
UTC ·
(6 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇻🇮
Axel
2026-11-01 15:58:56
UTC ·
(6 days ago)
WAF/ModSecurity blocked 51 malicious request(s) (HTTP 403) from this IP. Activity: request_uri: .ENV Files x34; blocked sensitive path x5; Block /env.* x3; request_uri: .git config x2; Block *.env x2; request_uri: read wordpress configuration file x1 ...
show more
WAF/ModSecurity blocked 51 malicious request(s) (HTTP 403) from this IP. Activity: request_uri: .ENV Files x34; blocked sensitive path x5; Block /env.* x3; request_uri: .git config x2; Block *.env x2; request_uri: read wordpress configuration file x1; request_uri: hidden .php execute x1; request_uri: .PHP backup files x1; Wordpress - xmlrpc.php accept only POST requests x1; Wordpress - Protect uploads diretory listing files x1. Latest: 2026-11-01T15:58:56Z.
show less
Hacking
Brute-Force
Web App Attack
