🇳🇱
Alt255
2026-10-27 08:25:32
(51 minutes ago)
[ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 8.2 ...
show more
[ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 8.228.68.17 - - \[26/Oct/2026:08:15:39 +0100\] "GET /.git/config HTTP/1.1" 404 7217 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 15_3\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/18.3 Safari/605.1.15"
8.228.68.17 - - \[26/Oct/2026:08:15:39 +0100\] "GET /.git/config HTTP/1.1" 404 7217 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 15_3\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/18.3 Safari/605.1.15"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
WizardsToolkit
2026-10-27 07:51:52
(1 hour ago)
tried to access forbidden files; attempted to access /app/.env
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 07:18:59
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 8.228.68.17 (17.68.228.8.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 8.228.68.17 (17.68.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 03:18:52.158275 2026] [security2:error] [pid 13606:tid 13606] [client 8.228.68.17:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindmaterial.io"] [uri "/.env"] [unique_id "auBQXOknyf2A6ZjwZ6EM5AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
MatCat
2026-10-27 07:05:16
(2 hours ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
🇩🇪
Grossmann-Gruppe
2026-10-27 06:57:29
(2 hours ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
2026-10-27 06:12:10
(3 hours ago)
[Tue Oct 27 07:12:05.204799 2026] [access_compat:error] [pid 2461518:tid 2461518] [client 8.228.68.1 ...
show more
[Tue Oct 27 07:12:05.204799 2026] [access_compat:error] [pid 2461518:tid 2461518] [client 8.228.68.17:0] AH01797: client denied by server configuration: /var/www/wordpress/aucoff_re/.netrc
[Tue Oct 27 07:12:06.155240 2026] [access_compat:error] [pid 2464079:tid 2464079] [client 8.228.68.17:0] AH01797: client denied by server configuration: /var/www/wordpress/aucoff_re/.npmrc
[Tue Oct 27 07:12:06.555199 2026] [access_compat:error] [pid 2464056:tid 2464056] [client 8.228.68.17:0] AH01797: client denied by server configuration: /var/www/wordpress/aucoff_re/.pypirc
[Tue Oct 27 07:12:07.005697 2026] [access_compat:error] [pid 2467314:tid 2467314] [client 8.228.68.17:0] AH01797: client denied by server configuration: /var/www/wordpress/aucoff_re/.yarnrc
[Tue Oct 27 07:12:08.401348 2026] [access_compat:error] [pid 2464053:tid 2464053] [client 8.228.68.17:0] AH01797: client denied by server configuration: /var/www/wordpress/aucoff_re/.gem
...
show less
Web Spam
Web App Attack
🇨🇭
blinx
2026-10-27 05:36:32
(3 hours ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇩🇪
bescared
2026-10-27 05:25:16
(3 hours ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-10-27 05:23:11
(3 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇩🇪
todix
2026-10-27 05:22:37
(3 hours ago)
"GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ...
show more
"GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 OPR/121.0.0.0"
show less
Web App Attack
🇺🇸
creechy
2026-10-27 05:05:34
(4 hours ago)
8.228.68.17 - - [26/Oct/2026:22:05:27 -0700] "GET /.git/config HTTP/1.1" 403 689 "-" "Mozilla/5.0 (W ...
show more
8.228.68.17 - - [26/Oct/2026:22:05:27 -0700] "GET /.git/config HTTP/1.1" 403 689 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Hacking
Bad Web Bot
🇮🇹
VHosting
2026-10-27 05:05:04
(4 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇿🇦
conure.sh
2026-10-27 04:59:18
(4 hours ago)
csagent: score 19.9: secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇺🇸
Major Hostility
2026-10-27 04:56:41
(4 hours ago)
"GET /.git/config HTTP/1.1" 404
"GET /.git/credentials HTTP/1.1" 404
"GET /.git-credentials HTTP/1.1 ...
show more
"GET /.git/config HTTP/1.1" 404
"GET /.git/credentials HTTP/1.1" 404
"GET /.git-credentials HTTP/1.1" 404
show less
Web App Attack
🇫🇷
masterguru
2026-10-27 04:47:00
(4 hours ago)
Multiple/Conflicting Connection Header Data Found. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(? ...
show more
Multiple/Conflicting Connection Header Data Found. Pattern match "\\\\b(?:keep-alive|close),\\\\s?(?:keep-alive|close)\\\\b" at REQUEST_HEADERS:Connection. (920210-201)
show less
Hacking