🇳🇱
homeshowdomain.nl
2026-07-02 21:59:07
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-01.
show less
Web App Attack
SSH
Hacking
🇬🇧
openstrike.co.uk
2026-07-02 05:14:41
(4 days ago)
4 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇲🇽
octageeks.com
2026-07-02 04:20:48
(4 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-01 21:59:58
(4 days ago)
Auto-ban: >3000 req/min op 2026-07-01
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-01 16:29:05
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 12:29:02.103182 2026] [security2:error] [pid 8518:tid 8518] [client 146.190.209.157:54194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pinebrookdesign.com"] [uri "/.git/config"] [unique_id "akVATvvGam331QxIl67bfAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-01 15:43:03
(4 days ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
2026-07-01 15:39:51
(4 days ago)
146.190.209.157 - - [01/Jul/2026:15:39:50 +0000] "GET /.git/config HTTP/1.1" 302 509 "-" "Mozilla/5. ...
show more
146.190.209.157 - - [01/Jul/2026:15:39:50 +0000] "GET /.git/config HTTP/1.1" 302 509 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-07-01 13:09:14
(4 days ago)
Web Server Exposed Git Repository Information Disclosure.
Hacking
🇩🇪
joharikop
2026-07-01 11:19:56
(4 days ago)
Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-cred ...
show more
Nginx: credential/secret file probe (/.env, /.git, /.aws etc). Automated ban via fail2ban nginx-credential-probes jail.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 10:49:49
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 06:49:45.030564 2026] [security2:error] [pid 1231:tid 1231] [client 146.190.209.157:41878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocketcityhotwheelers.com"] [uri "/.git/config"] [unique_id "akTwyTwPbrWmrF8qdu1QfAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-01 10:26:48
(4 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇺🇸
Rip
2026-07-01 09:43:46
(5 days ago)
Restricted File Access Attempts
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 09:12:07
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 05:12:04.239288 2026] [security2:error] [pid 5525:tid 5525] [client 146.190.209.157:45690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nypatriotcards.com"] [uri "/.git/config"] [unique_id "akTZ5OdnFXriqdqrywrtewAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 08:44:17
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 04:44:12.455258 2026] [security2:error] [pid 12410:tid 12410] [client 146.190.209.157:57890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northamericantrucking.com"] [uri "/.git/config"] [unique_id "akTTXPjUM3bGzcmlDypFowAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 08:23:21
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 146.190.209.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 04:23:14.238997 2026] [security2:error] [pid 14269:tid 14269] [client 146.190.209.157:52648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mysticbitchsalon.com"] [uri "/.git/config"] [unique_id "akTOcu9f_L34m26lONDYwAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack