|
🇩🇪
Markus Gieringer
|
|
Web app probing: 8 requests to 7 non-existent URLs on trustinger.de, including /trustinger.zip, /kit.zip. Reported by SEO Fury.
|
Web App Attack
Bad Web Bot
Brute-Force
Hacking
SQL Injection
|
|
Anonymous
|
|
Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 188.166.104.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 05:02:22.667637 2026] [security2:error] [pid 23719:tid 23719] [client 188.166.104.246:4876 ...
show more
(mod_security) mod_security (id:210492) triggered by 188.166.104.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 05:02:22.667637 2026] [security2:error] [pid 23719:tid 23719] [client 188.166.104.246:48764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greed.ee"] [uri "/.git/config"] [unique_id "atsinpaHKuyhXDhYAhP1BAAAABI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 188.166.104.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 04:33:15.897388 2026] [security2:error] [pid 4725:tid 4806] [client 188.166.104.246:47198] ...
show more
(mod_security) mod_security (id:210492) triggered by 188.166.104.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 04:33:15.897388 2026] [security2:error] [pid 4725:tid 4806] [client 188.166.104.246:47198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wpe.uk.com"] [uri "/.git/config"] [unique_id "atsbywhRR4DRRWWDBKZEaQAAAck"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇹
nomzamo
|
|
Fail2Ban reported: nginx-badbots
|
Brute-Force
|
|
Anonymous
|
|
[da.kdns.gr] httpd-config-scan: sites=i-pad.gr; logs=/var/log/httpd/domains/i-pad.gr.log; samples=/.git/config | fast_lane=true kernel_at=2026-10-23T07:48:00+00:00 | requests=1
|
Hacking
Web App Attack
|
|
🇸🇪
SkyDancer
|
|
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
|
Hacking
Brute-Force
SSH
|
|
🇬🇧
openstrike.co.uk
|
|
4 attacks on VC URLs, PHP URLs, site downloads:
GET /.git/config HTTP/1.1
GET /next.php HTTP/1.1
GET /marque.zip HTTP/1.1
|
Hacking
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 188.166.104.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 00:56:26.155177 2026] [security2:error] [pid 9936:tid 9944] [client 188.166.104.246:34272] ...
show more
(mod_security) mod_security (id:210492) triggered by 188.166.104.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 00:56:26.155177 2026] [security2:error] [pid 9936:tid 9944] [client 188.166.104.246:34272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oftv.xyz"] [uri "/.git/config"] [unique_id "atro-uUsDz2rBO5OjaDzlgAAAQY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
Markus Gieringer
|
|
Web app probing: 8 requests to 7 non-existent URLs on trustinger.de, including /trustinger.zip, /kit.zip. Reported by SEO Fury.
|
Web App Attack
Bad Web Bot
Brute-Force
Hacking
SQL Injection
|
|
🇮🇹
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-10-22 19:19:15,602 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 180.246.171.232 - 2026-10-22 19:19:15cloudlinux2 fail2ban: 2026-10-22 19:20:29,370 fail2ban.filter [1488]: INFO [plesk-modsecur ...
show more
cloudlinux2 fail2ban: 2026-10-22 19:19:15,602 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 180.246.171.232 - 2026-10-22 19:19:15cloudlinux2 fail2ban: 2026-10-22 19:20:29,370 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 180.246.171.232 - 2026-10-22 19:20:29cloudlinux2 fail2ban: 2026-10-22 19:20:36,943 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 188.166.104.246 - 2026-10-22 19:20:36cloudlinux2 fail2ban: 2026-10-22 19:21:06,960 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 88.235.221.147 - 2026-10-22 19:21:06cloudlinux2 fail2ban: 2026-10-22 19:21:21,694 fail2ban.filter [1488]: INFO [plesk-wordpress] Found 202.148.61.131 - 2026-10-22 19:21:20cloudlinux2 fail2ban: 2026-10-22 19:21:33,087 fail2ban.filter [1488]: INFO [plesk-modsecurity] Found 180.246.171.232 - 2026-10-22 19:21:33cloudlinux2 fail2ban: 2026-10-22 19:21:33,344 fail2ban.filter [1488]: INFO [recidive] Found 180.246.171.232 - 2026-10-22 19
show less
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 188.166.104.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 08:18:55.234573 2026] [security2:error] [pid 2587:tid 2587] [client 188.166.104.246:47658] ...
show more
(mod_security) mod_security (id:210492) triggered by 188.166.104.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 08:18:55.234573 2026] [security2:error] [pid 2587:tid 2587] [client 188.166.104.246:47658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talentguard.net"] [uri "/.git/config"] [unique_id "atitr1nL3l3-tKsKNMjEfwAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host
|
|
🇩🇪
KPS
|
|
PortscanM
|
Port Scan
|
|
🇿🇦
IrisFlower
|
|
Unauthorized connection attempt detected from IP address 188.166.104.246 to port 1790 [J]
|
Port Scan
Hacking
|