๐ฆ๐บ
paulshipley.com.au
2026-10-18 06:11:34
(1 hour ago)
[Sun Oct 18 17:11:33.408678 2026] [security2:error] [pid 892555] [client 144.172.98.114:45946] [clie ...
show more
[Sun Oct 18 17:11:33.408678 2026] [security2:error] [pid 892555] [client 144.172.98.114:45946] [client 144.172.98.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/.git/config"] [unique_id "atRjFW0iYx25kGmR6bTX3gAAAAg"], referer: http://www.dance4fitness.com.au/.git/config
...
show less
Web App Attack
Anonymous
2026-10-18 06:02:10
(1 hour ago)
144.172.98.114 - - [18/Oct/2026:06:02:09 +0000] "GET /.git/config HTTP/1.1" 404 2947 "-" "Mozilla/5. ...
show more
144.172.98.114 - - [18/Oct/2026:06:02:09 +0000] "GET /.git/config HTTP/1.1" 404 2947 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
ut-addicted.com
2026-10-18 05:57:05
(1 hour ago)
\[Sun Oct 18 07:57:04.325280 2026\] \[:error\] \[pid 4819:tid 140352472160000\] \[client 144.172.98. ...
show more
\[Sun Oct 18 07:57:04.325280 2026\] \[:error\] \[pid 4819:tid 140352472160000\] \[client 144.172.98.114:50864\] \[client 144.172.98.114\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.crx.it"\] \[uri "/.git/config"\] \[unique_id "atRfsN2q-WtHKVfzV6UsBAAAAM8"\]
show less
Brute-Force
Web App Attack
๐ท๐ด
iulianh
2026-10-18 05:34:47
(1 hour ago)
80,443
Brute-Force
SSH
๐จ๐ณ
Zhengka.net
2026-10-18 05:02:18
(2 hours ago)
zhengka.net security honeypot hit; jail=zhengka.net_honeypot; ip=144.172.98.114
Port Scan
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-10-18 04:48:03
(2 hours ago)
[Sun Oct 18 15:48:02.153926 2026] [security2:error] [pid 884544] [client 144.172.98.114:55896] [clie ...
show more
[Sun Oct 18 15:48:02.153926 2026] [security2:error] [pid 884544] [client 144.172.98.114:55896] [client 144.172.98.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ccideas.com.au"] [uri "/.git/config"] [unique_id "atRPgjmqbRhYSobp8Nf0WwAAABU"], referer: http://www.ccideas.com.au/.git/config
...
show less
Web App Attack
Anonymous
2026-10-18 04:06:43
(3 hours ago)
git/env leak probe
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-10-18 03:27:37
(3 hours ago)
[Sun Oct 18 14:27:36.746031 2026] [security2:error] [pid 817339] [client 144.172.98.114:58838] [clie ...
show more
[Sun Oct 18 14:27:36.746031 2026] [security2:error] [pid 817339] [client 144.172.98.114:58838] [client 144.172.98.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.bermanfamily.com.au"] [uri "/.git/config"] [unique_id "atQ8qDiNy7fOA1sizhju5AAAAAQ"]
...
show less
Web App Attack
๐บ๐ธ
wbsouza
2026-10-18 03:24:16
(3 hours ago)
CrowdSec: infra/bad-path-probe โ automated firewall drops on self-hosted IDS sensor
Hacking
๐ฆ๐บ
paulshipley.com.au
2026-10-18 03:07:17
(4 hours ago)
[Sun Oct 18 14:07:17.464855 2026] [security2:error] [pid 880251] [client 144.172.98.114:43092] [clie ...
show more
[Sun Oct 18 14:07:17.464855 2026] [security2:error] [pid 880251] [client 144.172.98.114:43092] [client 144.172.98.114] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "balcomberetreat.com.au"] [uri "/.git/config"] [unique_id "atQ35fnoWs2J1ptFgODDPwAAAAY"], referer: https://balcomberetreatmornington.com.au//.git/config
...
show less
Web App Attack
๐ณ๐ฑ
ParaBug
2026-10-18 02:07:52
(5 hours ago)
144.172.98.114 - - [18/Oct/2026:04:07:51 +0200] "GET /.git/config HTTP/1.1" 404 5651 "http://www.ant ...
show more
144.172.98.114 - - [18/Oct/2026:04:07:51 +0200] "GET /.git/config HTTP/1.1" 404 5651 "http://www.antik-wagon.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
Phishing
Brute-Force
Web App Attack
Anonymous
2026-10-18 01:44:05
(5 hours ago)
144.172.98.114 - - [18/Oct/2026:01:44:04 +0000] "GET /.git/config HTTP/1.1" 302 468 "-" "Mozilla/5.0 ...
show more
144.172.98.114 - - [18/Oct/2026:01:44:04 +0000] "GET /.git/config HTTP/1.1" 302 468 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
alpha
2026-10-18 01:41:05
(5 hours ago)
Automated honeypot: scanner probed decoy URL on cdn.aldorand.fr (/.git/config)
Bad Web Bot
Web App Attack
๐ฉ๐ช
sternwart
2026-10-18 01:06:20
(6 hours ago)
Automatisch erkannt: Zugriff auf /.git/config (absofort.ch)
Web App Attack
Bad Web Bot
๐จ๐ญ
lufi
2026-10-18 00:41:24
(6 hours ago)
2026-10-18T02:41:24+02:00 lufischer04 ids442 2026-10-18 02:41:24 144.172.98.114: blacklisted Pattern ...
show more
2026-10-18T02:41:24+02:00 lufischer04 ids442 2026-10-18 02:41:24 144.172.98.114: blacklisted Pattern: /.git|.svn|.hg/
...
show less
Web Spam
Brute-Force
Hacking
Web App Attack