๐ซ๐ฎ
kumiko
2026-08-26 23:54:28
(4 hours ago)
[2026-08-27 02:54:28] Probing for dotfiles
"GET /.git/config HTTP/1.1" 301
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-08-26 21:43:56
(6 hours ago)
cloudlinux2 fail2ban: 2026-08-26 23:38:53,449 fail2ban.filter [1775]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-08-26 23:38:53,449 fail2ban.filter [1775]: INFO [plesk-wordpress] Found 69.4.73.242 - 2026-08-26 23:38:52cloudlinux2 fail2ban: 2026-08-26 23:39:43,906 fail2ban.filter [1775]: INFO [plesk-wordpress] Found 45.10.163.135 - 2026-08-26 23:39:43cloudlinux2 fail2ban: 2026-08-26 23:39:36,959 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 157.245.138.135 - 2026-08-26 23:39:36cloudlinux2 fail2ban: 2026-08-26 23:39:41,535 fail2ban.filter [1775]: INFO [plesk-wordpress] Found 170.168.172.100 - 2026-08-26 23:39:41cloudlinux2 fail2ban: 2026-08-26 23:39:35,346 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 157.245.138.135 - 2026-08-26 23:39:35cloudlinux2 fail2ban: 2026-08-26 23:41:27,057 fail2ban.actions [1775]: NOTICE [plesk-modsecurity] Unban 34.106.28.159cloudlinux2 fail2ban: 2026-08-26 23:41:52,641 fail2ban.filter [1775]: INFO [plesk-wordpress] Found 173.212.234.196 - 2026-08-26 23:41:50cloudlinux2 fail2ba
show less
Web App Attack
๐ง๐ช
voormedia
2026-08-26 20:09:24
(8 hours ago)
Accessed trap at '/.git/config'
Web App Attack
๐ฉ๐ช
4server
2026-08-26 18:09:16
(10 hours ago)
[WedAug2620:09:11.7219162026][security2:error][pid59226:tid59323][client157.245.138.135:0]ModSecurit ...
show more
[WedAug2620:09:11.7219162026][security2:error][pid59226:tid59323][client157.245.138.135:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"modularss.com\"][uri\"/.git/config\"][unique_id\"ao8rx0FmUYzAa_QKqRuReAAAAQA\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-08-26 14:44:21
(13 hours ago)
.git/config scan
Web App Attack
๐ช๐ธ
librebit
2026-08-26 12:37:14
(15 hours ago)
Brute force
Brute-Force
๐ซ๐ฎ
cleverest.eu
2026-08-26 10:52:26
(17 hours ago)
MimirWAF has 1 incident from 1 distinct domain => {"bad_request_uri / vcs_probe"}
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-08-26 09:08:01
(19 hours ago)
Fail2Ban - [WEB]Exploit attempts (SQLi, RCE, path traversal) on webexploits ... [ice01,ice02,wa01,wa ...
show more
Fail2Ban - [WEB]Exploit attempts (SQLi, RCE, path traversal) on webexploits ... [ice01,ice02,wa01,wa02]
show less
Hacking
SQL Injection
Web App Attack
Anonymous
2026-08-26 07:10:05
(21 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-08-26 07:08:58
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.245.138.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 157.245.138.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 03:08:50.540049 2026] [security2:error] [pid 22092:tid 22092] [client 157.245.138.135:33422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manichri.com"] [uri "/.git/config"] [unique_id "ao6RArj51EOT7H-Oq-QuzwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-08-26 07:08:56
(21 hours ago)
cloudlinux2 fail2ban: 2026-08-26 09:04:30,517 fail2ban.actions [1775]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-26 09:04:30,517 fail2ban.actions [1775]: NOTICE [plesk-modsecurity] Ban 59.178.197.106cloudlinux2 fail2ban: 2026-08-26 09:04:30,407 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 59.178.197.106 - 2026-08-26 09:04:30cloudlinux2 fail2ban: 2026-08-26 09:04:30,519 fail2ban.filter [1775]: INFO [recidive] Found 59.178.197.106 - 2026-08-26 09:04:30cloudlinux2 fail2ban: 2026-08-26 09:05:08,082 fail2ban.filter [1775]: INFO [plesk-wordpress] Found 153.76.10.173 - 2026-08-26 09:05:07cloudlinux2 fail2ban: 2026-08-26 09:05:18,690 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 92.142.170.214 - 2026-08-26 09:05:18cloudlinux2 fail2ban: 2026-08-26 09:05:29,208 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 157.245.138.135 - 2026-08-26 09:05:29cloudlinux2 fail2ban: 2026-08-26 09:05:31,118 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 157.245.138.135 - 2026-08-26 09:05:31cloudlinux2 fail2ban:
show less
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-08-26 05:15:42
(23 hours ago)
4 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
๐ฆ๐บ
2000cn.com.au
2026-08-26 04:44:14
(23 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ฉ๐ช
ghostwarriors
2026-08-26 00:50:19
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-26 00:43:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 157.245.138.135 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 157.245.138.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 20:42:58.988502 2026] [security2:error] [pid 8893:tid 8893] [client 157.245.138.135:56464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twccsolutions.com"] [uri "/.git/config"] [unique_id "ao42kgaVbS0wtfCmMsbFrwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack