Anonymous
2026-10-18 16:32:30
(10 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ง๐ช
sid3windr
2026-10-17 04:04:43
(1 day ago)
GET /.git/config (Tarpitted for 1d11h10m58s, wasted 7.25MB)
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-10-16 05:15:25
(2 days ago)
3 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
๐ฒ๐ฝ
octageeks.com
2026-10-16 04:33:41
(2 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack
๐บ๐ธ
mnsf
2026-10-16 00:05:30
(3 days ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-10-15 20:42:36
(3 days ago)
1.540 requests with url.path */.git/config
521 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-15 19:19:15
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.72.67 (67.72.185.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.72.67 (67.72.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 15:19:11.028139 2026] [security2:error] [pid 8500:tid 8500] [client 34.185.72.67:50494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrccertification.com"] [uri "/.git/config"] [unique_id "atEnLyHFH2YrvZ6k0dRSvgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 18:39:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.72.67 (67.72.185.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.72.67 (67.72.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:39:52.585232 2026] [security2:error] [pid 1337:tid 1337] [client 34.185.72.67:47644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "movil.mpservice.com.sv"] [uri "/.git/config"] [unique_id "atEd-Mkw-1FqoACEc58mRwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
as211431.net
2026-10-15 18:38:08
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-15 18:24:24
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.72.67 (67.72.185.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.72.67 (67.72.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:24:21.224611 2026] [security2:error] [pid 26665:tid 26736] [client 34.185.72.67:39710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mouawadarchitects.com"] [uri "/.git/config"] [unique_id "atEaVdObsFsCgqenk2XaowAAAcQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-15 18:20:34
(3 days ago)
Web App Attack
๐ฏ๐ต
ki3
2026-10-15 18:17:03
(3 days ago)
Fail2Ban: Web App Attacks and Forum Spam 34.185.72.67 1792088222.0(JST)
Web Spam
Bad Web Bot
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-10-15 18:13:12
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-15 18:03:10
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.185.72.67 (67.72.185.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.72.67 (67.72.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 14:03:07.228543 2026] [security2:error] [pid 7451:tid 7451] [client 34.185.72.67:55956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mosheimlib.org"] [uri "/.git/config"] [unique_id "atEVWy7DiD6EO7rBeLycuQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
SkyDancer
2026-10-15 17:53:58
(3 days ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH