🇬🇧
[email protected]
2026-03-25 00:30:01
UTC ·
(7 months ago)
...
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2026-03-24 22:59:02
UTC ·
(7 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-03-23.
Web App Attack
SSH
Hacking
Anonymous
2026-03-23 04:32:05
UTC ·
(7 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-03-23 04:16:41
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 00:16:37.447388 2026] [security2:error] [pid 32204:t ...
show more
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 23 00:16:37.447388 2026] [security2:error] [pid 32204:tid 32204] [client 100.24.32.162:47104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "orlihnizdozlin.cz"] [uri "/.git/config"] [unique_id "acC-pZyL76I6m_2uHTCrpQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-23 03:51:00
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 23:50:56.710457 2026] [security2:error] [pid 14249:t ...
show more
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 23:50:56.710457 2026] [security2:error] [pid 14249:tid 14249] [client 100.24.32.162:35050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timberwolf-construction.com"] [uri "/.git/config"] [unique_id "acC4oNygvg-N2zpSBvcGxAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-03-23 03:33:02
UTC ·
(7 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
lnklnx
2026-03-23 03:28:57
UTC ·
(7 months ago)
nextcloud.lnklnx.com:443 100.24.32.162 - - [22/Mar/2026:22:28:55 -0500] "GET /.git/config HTTP/1.1" 404 10456 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-03-23 03:27:20
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 23:27:15.050140 2026] [security2:error] [pid 23413:t ...
show more
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 23:27:15.050140 2026] [security2:error] [pid 23413:tid 23413] [client 100.24.32.162:45718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amgstone.38floorsupply.com"] [uri "/.git/config"] [unique_id "acCzE6LDst-Aw6Dimv-87QAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
dwmp
2026-03-23 03:25:14
UTC ·
(7 months ago)
Url probing: /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-03-23 02:27:59
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 22:27:53.727312 2026] [security2:error] [pid 1781:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 22:27:53.727312 2026] [security2:error] [pid 1781:tid 1781] [client 100.24.32.162:58514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dinsbach.net"] [uri "/.git/config"] [unique_id "acClKdvTvb3X53SZfaR4wgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
LotPhantom
2026-03-23 02:24:09
UTC ·
(7 months ago)
2026/03/23 02:24:08 [error] 15184#15184: *7091 access forbidden by rule, client: 100.24.32.162, server: api.bridginggaps.tech, request: "GET /.git/config HTTP/1.1", host: "api.bridginggaps.tech"
...
Web App Attack
🇺🇸
oralunal
2026-03-23 02:23:27
UTC ·
(7 months ago)
IP banned by Fail2Ban in jail suss access.log ah-app-1
...
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-03-23 02:10:06
UTC ·
(7 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 100.24.32.162 (US/United States/ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 3600 secs
Web App Attack
🇺🇸
TPI-Abuse
2026-03-23 02:07:42
UTC ·
(7 months ago)
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 22:07:38.172009 2026] [security2:error] [pid 2722952 ...
show more
(mod_security) mod_security (id:210492) triggered by 100.24.32.162 (ec2-100-24-32-162.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 22:07:38.172009 2026] [security2:error] [pid 2722952:tid 2722952] [client 100.24.32.162:41508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mena365.gulftelecom.com"] [uri "/.git/config"] [unique_id "acCgavFp0sZaIl2lyCWxKwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-03-23 02:05:36
UTC ·
(7 months ago)
Too many Status 40X (16)
Scanning/Probing (16)
Brute-Force
Web App Attack