🇺🇸
francelink.fr
2026-11-15 00:33:28
UTC ·
(11 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-15T00:13:22.000Z.
Web App Attack
🇬🇧
bensmithurst
2026-11-14 22:41:02
UTC ·
(13 hours ago)
172.69.155.220 - - [14/Nov/2026:22:41:01 +0000] "GET /.git/HEAD HTTP/1.1" 404 414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
172.69.155.220 - - [14/Nov/2026:22:41:01 +0000] "GET /.git/config HTTP/1.1" 404 4 ...
show more
172.69.155.220 - - [14/Nov/2026:22:41:01 +0000] "GET /.git/HEAD HTTP/1.1" 404 414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
172.69.155.220 - - [14/Nov/2026:22:41:01 +0000] "GET /.git/config HTTP/1.1" 404 414 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
... [host=LAN***]
show less
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-14 18:32:24
UTC ·
(17 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-14T18:30:01.000Z.
Web App Attack
🇺🇸
craudiovizai
2026-11-14 18:30:35
UTC ·
(17 hours ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked at the edge.
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-14 09:59:28
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:59:22.914567 2026] [security2:error] [pid 29508:tid 29508] [client 172.69.155.220:11392] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:59:22.914567 2026] [security2:error] [pid 29508:tid 29508] [client 172.69.155.220:11392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magicalgirlcrafts.com.ketsuri.com"] [uri "/.git/config"] [unique_id "avgw-oJNVq8yeJERFEHuBwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-14 08:26:52
UTC ·
(1 day ago)
Web scanner: GET /.git/config
Web App Attack
Hacking
🇮🇹
CoreTech srl
2026-11-14 06:33:58
UTC ·
(1 day ago)
cloudlinux2 fail2ban: 2026-11-14 07:29:28,095 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 88.164.239.55 - 2026-11-14 07:29:27cloudlinux2 fail2ban: 2026-11-14 07:29:37,719 fail2ban.filter [1443]: INFO [plesk-wordpress] F ...
show more
cloudlinux2 fail2ban: 2026-11-14 07:29:28,095 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 88.164.239.55 - 2026-11-14 07:29:27cloudlinux2 fail2ban: 2026-11-14 07:29:37,719 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 103.179.15.151 - 2026-11-14 07:29:36cloudlinux2 fail2ban: 2026-11-14 07:30:34,202 fail2ban.actions [1443]: NOTICE [recidive] Unban 34.88.131.90cloudlinux2 fail2ban: 2026-11-14 07:31:03,366 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 188.239.203.232 - 2026-11-14 07:31:02cloudlinux2 fail2ban: 2026-11-14 07:31:06,642 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 103.166.193.3 - 2026-11-14 07:31:05cloudlinux2 fail2ban: 2026-11-14 07:31:48,872 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 71.201.170.72 - 2026-11-14 07:31:47cloudlinux2 fail2ban: 2026-11-14 07:31:48,102 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 185.212.251.59 - 2026-11-14 07:31:47cloudlinux2 fail2ban: 2026-11-14 07
show less
Web App Attack
🇺🇸
technojoe99
2026-11-14 06:25:26
UTC ·
(1 day ago)
Exploit scan from 172.69.155.220. GET /.git/config HTTP/2.0.
Web App Attack
Anonymous
2026-11-14 06:08:06
UTC ·
(1 day ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 04:42:19
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:42:14.007944 2026] [security2:error] [pid 10895:tid 10895] [client 172.69.155.220:13621] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 23:42:14.007944 2026] [security2:error] [pid 10895:tid 10895] [client 172.69.155.220:13621] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kenmalone.com"] [uri "/.git/config"] [unique_id "avfmppCDmUhy_ZowJ-LGxwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-13 22:53:05
UTC ·
(1 day ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇩🇪
altenglaner
2026-11-13 20:58:20
UTC ·
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-11-13 14:50:25
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇱🇹
NotACaptcha
2026-11-13 10:09:33
UTC ·
(2 days ago)
webserver:443 [13/Nov/2026] "GET /.git/HEAD HTTP/1.1" 403 6517 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
webserver:443 [13/Nov/2026] "GET /.git/config HTTP/1.1" 403 6517 "-" "Mozilla/5.0 (Macintosh; ...
show more
webserver:443 [13/Nov/2026] "GET /.git/HEAD HTTP/1.1" 403 6517 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
webserver:443 [13/Nov/2026] "GET /.git/config HTTP/1.1" 403 6517 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:07:07
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 172.69.155.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:07:03.323859 2026] [security2:error] [pid 699527:tid 699527] [client 172.69.155.220:1042 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.69.155.220 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:07:03.323859 2026] [security2:error] [pid 699527:tid 699527] [client 172.69.155.220:10428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.flutetroupeofyakima.org"] [uri "/.git/HEAD"] [unique_id "avbhR8Q7zl7tKfmFM8sgvQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack