2026-07-06 16:33:48
(6 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇬🇧
openstrike.co.uk
2026-07-04 05:14:40
(1 week ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇳🇱
homeshowdomain.nl
2026-07-03 21:59:18
(1 week ago)
Auto-ban: >3000 req/min op 2026-07-03
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-03 18:37:38
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 209.38.95.182 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.38.95.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:37:30.573448 2026] [security2:error] [pid 12661:tid 12661] [client 209.38.95.182:52722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "osmanbozkurt.com"] [uri "/.git/config"] [unique_id "akgBavH6d5ZRW-VYmXLUZAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
AutosOnShow
2026-07-03 18:10:07
(1 week ago)
blocked for webapp attack | path requested: /.git/config | seen at 2026-07-03 18:09:18.497 |
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 18:02:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 209.38.95.182 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.38.95.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 14:02:05.116059 2026] [security2:error] [pid 11748:tid 11748] [client 209.38.95.182:53294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horizontravelgroup.com"] [uri "/.git/config"] [unique_id "akf5HeiIGv7Bi5fNN6u7ZQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
AutosOnShow
2026-07-03 15:38:05
(1 week ago)
blocked for webapp attack | path requested: /.git/config | seen at 2026-07-03 15:37:13.673 |
Web App Attack
🇮🇪
AutosOnShow
2026-07-03 15:23:05
(1 week ago)
blocked for webapp attack | path requested: /.git/config | seen at 2026-07-03 15:22:52.992 |
Web App Attack
🇩🇪
Interceptor_HQ
2026-07-03 15:03:16
(1 week ago)
request_uri: /.git/config -- automatic report --
Brute-Force
Hacking
🇬🇧
gurnip
2026-07-03 13:27:06
(1 week ago)
Vulnerability probe of page /.git/config, not found on server.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 12:56:17
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 209.38.95.182 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.38.95.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 08:56:10.899149 2026] [security2:error] [pid 30606:tid 30606] [client 209.38.95.182:38596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "circleinthesquare.org"] [uri "/.git/config"] [unique_id "akexarP0W7f_yU2KWUCANwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 12:18:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 209.38.95.182 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 209.38.95.182 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 08:18:45.192487 2026] [security2:error] [pid 19004:tid 19004] [client 209.38.95.182:56660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bennefeld.net"] [uri "/.git/config"] [unique_id "akeopT03xUZgqT5ic4nThQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
PENJAGA.AUM
2026-07-03 12:09:39
(1 week ago)
209.38.95.182 - Attack: Possible XSS attack, js event handler
Web App Attack
SQL Injection
Spoofing
🇩🇪
ghostwarriors
2026-07-03 11:50:51
(1 week ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-03 09:59:57
(1 week ago)
[Fri Jul 03 19:59:56.898107 2026] [security2:error] [pid 599963] [client 209.38.95.182:49148] [clien ...
show more
[Fri Jul 03 19:59:56.898107 2026] [security2:error] [pid 599963] [client 209.38.95.182:49148] [client 209.38.95.182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bermanfamily.com.au"] [uri "/.git/config"] [unique_id "akeIHJgosAj79HSZkEmHGQAAAAc"]
...
show less
Web App Attack