🇫🇷
SpaceHost-Server
2026-11-12 23:22:14
UTC ·
(14 hours ago)
Brute-Force
Web App Attack
🇭🇺
miszterx.hu
2026-11-12 07:21:30
UTC ·
(1 day ago)
XORP (haproxy): 2x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
Web App Attack
🇫🇷
service Informatique
2026-11-12 04:00:37
UTC ·
(1 day ago)
GET /.env
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-11 23:20:35
UTC ·
(1 day ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-11-11 16:40:41
UTC ·
(1 day ago)
2026/11/11 16:40:40 [error] 2031556#2031556: *28420592 access forbidden by rule, client: 98.93.41.109, server: binixo.ph, request: "GET /config/.git/config HTTP/1.1", host: "binixo.ph"
2026/11/11 16:40:40 [error] 2031556#2031556: *28420594 access for ...
show more
2026/11/11 16:40:40 [error] 2031556#2031556: *28420592 access forbidden by rule, client: 98.93.41.109, server: binixo.ph, request: "GET /config/.git/config HTTP/1.1", host: "binixo.ph"
2026/11/11 16:40:40 [error] 2031556#2031556: *28420594 access forbidden by rule, client: 98.93.41.109, server: binixo.ph, request: "GET /.env HTTP/1.1", host: "binixo.ph"
2026/11/11 16:40:40 [error] 2031556#2031556: *28420595 access forbidden by rule, client: 98.93.41.109, server: binixo.ph, request: "GET /.git/config.old HTTP/1.1", host: "binixo.ph"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 16:14:09
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 98.93.41.109 (ec2-98-93-41-109.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:14:03.757722 2026] [security2:error] [pid 16252:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 98.93.41.109 (ec2-98-93-41-109.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 11:14:03.757722 2026] [security2:error] [pid 16252:tid 16252] [client 98.93.41.109:10296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twinls.com"] [uri "/config/.git/config"] [unique_id "avSUSysnjsEAU_VH3qJBYwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-11 15:38:22
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 15:27:28
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 98.93.41.109 (ec2-98-93-41-109.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:27:21.431247 2026] [security2:error] [pid 6837:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 98.93.41.109 (ec2-98-93-41-109.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:27:21.431247 2026] [security2:error] [pid 6837:tid 6837] [client 98.93.41.109:18976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gocdt.com"] [uri "/.env"] [unique_id "avSJWVxRLkNoedHYoTuf7wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-11 15:26:56
UTC ·
(1 day ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 98.93.41.109 - - [11/Nov/2026:16:26:39 +0100] "GET /.env HTTP/1.1" 404 6081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_4) AppleWebKit/537.36 ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 98.93.41.109 - - [11/Nov/2026:16:26:39 +0100] "GET /.env HTTP/1.1" 404 6081 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 15:06:44
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 98.93.41.109 (ec2-98-93-41-109.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:06:40.678054 2026] [security2:error] [pid 14985:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 98.93.41.109 (ec2-98-93-41-109.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 10:06:40.678054 2026] [security2:error] [pid 14985:tid 15048] [client 98.93.41.109:65520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trident-environmental.com"] [uri "/.env"] [unique_id "avSEgOPAb6XRAKW_OLgzbwAAAYg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 13:59:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 98.93.41.109 (ec2-98-93-41-109.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:58:59.011792 2026] [security2:error] [pid 26474:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 98.93.41.109 (ec2-98-93-41-109.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 08:58:59.011792 2026] [security2:error] [pid 26474:tid 26474] [client 98.93.41.109:47154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pcmechanic.com"] [uri "/.env"] [unique_id "avR0o_Ym6sJevDxIkVrcWQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
