🇮🇹
zenmorro
2026-09-10 23:00:57
(4 minutes ago)
Honeypot hit (proxmox:8006) — scanner-path: /.git/config. Automated report from honeypot infrastruct ...
show more
Honeypot hit (proxmox:8006) — scanner-path: /.git/config. Automated report from honeypot infrastructure
show less
Port Scan
Web App Attack
🇩🇪
MSC IT for Business GmbH
2026-09-10 23:00:06
(5 minutes ago)
GASTO/CrowdSec: gasto/modsec-critical triggered (via crowdsec-agent, categories 15,21)
Hacking
Web App Attack
🇬🇧
AvonleaConsulting
2026-09-10 22:58:18
(7 minutes ago)
Attempts to probe web pages for vulnerable PHP or other applications
Web App Attack
🇺🇸
agaesteves
2026-09-10 22:58:13
(7 minutes ago)
[SISHIPISMO 360] TipoAtaque.PATH_PROBE | Acesso a path suspeito: /.git/config | Paths: /.git/config ...
show more
[SISHIPISMO 360] TipoAtaque.PATH_PROBE | Acesso a path suspeito: /.git/config | Paths: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64)
show less
Web App Attack
🇳🇱
wlt-blocker
2026-09-10 22:55:42
(9 minutes ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
Epimetheus
2026-09-10 22:52:33
(12 minutes ago)
Unauthorized access attempts:
[GET] /.git/config
UA: Mozilla/5.0 (X11; Linux x86_64)
Web App Attack
🇩🇪
hackthetime
2026-09-10 22:52:02
(13 minutes ago)
Tried to access .git/config file (`/.git/config`)
Web App Attack
🇵🇱
Budyn
2026-09-10 22:51:29
(13 minutes ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: h.budyn.wtf | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 22:46:54
(18 minutes ago)
(mod_security) mod_security (id:210492) triggered by 172.86.81.45 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 172.86.81.45 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 18:46:46.520088 2026] [security2:error] [pid 8768:tid 8768] [client 172.86.81.45:54246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gpahomeinspections.com"] [uri "/.git/config"] [unique_id "aqMzVrOBNcJwX2npKXDRwAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-10 22:45:15
(20 minutes ago)
172.86.81.45 - - [11/Sep/2026:00:44:00 +0200] "GET /.git/config HTTP/1.1" 403 117 "-" "Mozilla/5.0 ( ...
show more
172.86.81.45 - - [11/Sep/2026:00:44:00 +0200] "GET /.git/config HTTP/1.1" 403 117 "-" "Mozilla/5.0 (X11; Linux x86_64)"
172.86.81.45 - - [11/Sep/2026:00:44:00 +0200] "GET /.git/config HTTP/1.1" 403 117 "-" "Mozilla/5.0 (X11; Linux x86_64)"
172.86.81.45 - - [11/Sep/2026:00:44:41 +0200] "GET /.git/config HTTP/1.1" 403 117 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
Web App Attack
Anonymous
2026-09-10 22:44:20
(21 minutes ago)
5 hits, proto=tcp, ports=443
Port Scan
Hacking
🇮🇹
CoreTech srl
2026-09-10 22:43:57
(21 minutes ago)
cloudlinux2 fail2ban: 2026-09-11 00:39:27,149 fail2ban.actions [1892]: NOTICE [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-11 00:39:27,149 fail2ban.actions [1892]: NOTICE [plesk-wordpress] Ban 185.194.178.26cloudlinux2 fail2ban: 2026-09-11 00:39:27,023 fail2ban.filter [1892]: INFO [plesk-wordpress] Found 185.194.178.26 - 2026-09-11 00:39:26cloudlinux2 fail2ban: 2026-09-11 00:39:27,156 fail2ban.filter [1892]: INFO [recidive] Found 185.194.178.26 - 2026-09-11 00:39:27cloudlinux2 fail2ban: 2026-09-11 00:40:39,882 fail2ban.filter [1892]: INFO [plesk-modsecurity] Found 172.86.81.45 - 2026-09-11 00:40:39cloudlinux2 fail2ban: 2026-09-11 00:41:45,569 fail2ban.filter [1892]: INFO [plesk-modsecurity] Found 34.106.237.106 - 2026-09-11 00:41:45cloudlinux2 fail2ban: 2026-09-11 00:41:48,491 fail2ban.filter [1892]: INFO [plesk-modsecurity] Found 35.243.83.239 - 2026-09-11 00:41:48cloudlinux2 fail2ban: 2026-09-11 00:41:48,529 fail2ban.actions [1892]: NOTICE [plesk-modsecurity] Ban 35.243.83.239cloudlinux2 fail2ban: 2026-09-11 00:41:48,452 fail2ba
show less
Web App Attack
🇩🇪
Grossmann-Gruppe
2026-09-10 22:41:29
(23 minutes ago)
Plesk Fail2Ban: plesk-modsecurity
Hacking
Brute-Force
Anonymous
2026-09-10 22:38:01
(27 minutes ago)
172.86.81.45 - - [10/Sep/2026:22:37:59 +0000] "GET /.git/config HTTP/1.1" 302 4733 "-" "Mozilla/5.0 ...
show more
172.86.81.45 - - [10/Sep/2026:22:37:59 +0000] "GET /.git/config HTTP/1.1" 302 4733 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-09-10 22:31:09
(34 minutes ago)
Honeypot access: Git configuration file access attempt. Path: /.git/config
Web App Attack