๐ซ๐ท
SpaceHost-Server
2026-09-16 22:18:11
(5 days ago)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 01:24:30
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 207.175.202.50 (50.202.175.207.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 207.175.202.50 (50.202.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:24:24.034632 2026] [security2:error] [pid 13673:tid 13673] [client 207.175.202.50:50646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laurendritz.net"] [uri "/.git/config"] [unique_id "aqnvyK9MWpMVYRLiWGf6yAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-16 01:05:15
(5 days ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+11 more) | 2026-09-16 01:05 UTC
show less
Hacking
Web App Attack
๐ท๐ด
clauss
2026-09-15 23:43:32
(5 days ago)
207.175.202.50 - - [16/Sep/2026:02:43:31 +0300] "GET /phpinfo.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 ( ...
show more
207.175.202.50 - - [16/Sep/2026:02:43:31 +0300] "GET /phpinfo.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
207.175.202.50 - - [16/Sep/2026:02:43:32 +0300] "GET /phpinfo.php HTTP/2.0" 404 46953 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-09-15 22:17:56
(6 days ago)
Brute-Force
Web App Attack
Anonymous
2026-09-15 21:08:15
(6 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-15 14:38:35
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 207.175.202.50 (50.202.175.207.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 207.175.202.50 (50.202.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 10:38:31.649851 2026] [security2:error] [pid 26601:tid 26613] [client 207.175.202.50:42712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lead-sleds.com"] [uri "/.git/config"] [unique_id "aqlYZ3eVYDf7B_sEkW786QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-15 10:56:50
(6 days ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-09-15 10:55:55
(6 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 05:29:00
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 207.175.202.50 (50.202.175.207.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 207.175.202.50 (50.202.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 01:28:56.188776 2026] [security2:error] [pid 15544:tid 15544] [client 207.175.202.50:35482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadinglogan.com"] [uri "/.git/config"] [unique_id "aqjXmMwfmU2k5CvEN5BMCgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-15 05:15:04
(6 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
macrob
2026-09-15 04:56:49
(6 days ago)
2026/09/15 04:56:48 [error] 2192494#2192494: *13567287 access forbidden by rule, client: 207.175.202 ...
show more
2026/09/15 04:56:48 [error] 2192494#2192494: *13567287 access forbidden by rule, client: 207.175.202.50, server: infinsa.com, request: "GET /.git/config HTTP/2.0", host: "infinsa.com"
2026/09/15 04:56:48 [error] 2192494#2192494: *13567295 access forbidden by rule, client: 207.175.202.50, server: infinsa.com, request: "GET /.env HTTP/2.0", host: "infinsa.com"
2026/09/15 04:56:48 [error] 2192494#2192494: *13567299 access forbidden by rule, client: 207.175.202.50, server: infinsa.com, request: "GET /.env.local HTTP/2.0", host: "infinsa.com"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 03:17:26
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 207.175.202.50 (50.202.175.207.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 207.175.202.50 (50.202.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 23:17:20.160226 2026] [security2:error] [pid 1490:tid 1490] [client 207.175.202.50:55478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infinityartistsgroup.com"] [uri "/.git/config"] [unique_id "aqi4wOM8Fw5jeOzvrKbXRQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-15 02:30:02
(6 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack