🇳🇱
homeshowdomain.nl
2026-07-01 22:00:43
(7 hours ago)
Auto-ban: >3000 req/min op 2026-07-01
Web App Attack
SSH
Hacking
2026-07-01 20:47:35
(8 hours ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 17:57:38
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 13:57:33.154646 2026] [security2:error] [pid 2588:tid 2592] [client 206.189.176.219:51336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centurylink-sales.com"] [uri "/.git/config"] [unique_id "akVVDdGHytdbac1yJeEnfQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
Peregrine
2026-07-01 17:28:01
(12 hours ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 206.189.176.219 162.158.154.225 - - [01/Jul/2026:14 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 206.189.176.219 162.158.154.225 - - [01/Jul/2026:14:27:57 -0300] "GET /.git/config HTTP/1.1" 404 18193
show less
Bad Web Bot
🇫🇷
masterguru
2026-07-01 14:01:16
(15 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 13:36:06
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 09:36:00.184118 2026] [security2:error] [pid 858:tid 858] [client 206.189.176.219:53158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gfs-essl.com"] [uri "/.git/config"] [unique_id "akUXwLhLUnGaWcRoihYDoQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-07-01 13:20:41
(16 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-07-01 12:13:37
(17 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-07-01 11:55:29
(17 hours ago)
Automated report (2026-07-01T19:55:29+08:00). Caught probing for exposed Git data.
Hacking
Web App Attack
Open Proxy
2026-07-01 11:42:05
(18 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
kosada.com
2026-07-01 10:49:41
(18 hours ago)
Web vulnerability probing: /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 08:47:42
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 04:47:36.955827 2026] [security2:error] [pid 30387:tid 30387] [client 206.189.176.219:39038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "christineohlman.net"] [uri "/.git/config"] [unique_id "akTUKFLQ-MwMcZT7n_fIsQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 07:52:05
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 03:51:58.611897 2026] [security2:error] [pid 22404:tid 22404] [client 206.189.176.219:53152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emelecsrl.com"] [uri "/.git/config"] [unique_id "akTHHqJDc0G28djTUQEwdAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-01 07:46:31
(21 hours ago)
Automated report (2026-07-01T15:46:31+08:00). Caught probing for exposed Git data.
Hacking
Web App Attack
Open Proxy
🇺🇸
TPI-Abuse
2026-07-01 07:35:27
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 206.189.176.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 03:35:20.899001 2026] [security2:error] [pid 7444:tid 7444] [client 206.189.176.219:49440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "97201.com"] [uri "/.git/config"] [unique_id "akTDOKVo7-zZbbGi7CmBqwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack