Anonymous
2026-09-21 20:37:12
(3 hours ago)
apache vulnerability scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 20:28:51
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:28:43.781033 2026] [security2:error] [pid 25062:tid 25062] [client 34.186.15.6:44076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bhs.michaelpmcgrath.com"] [uri "/.git/config"] [unique_id "arGTe0g2NClixToj0XDH2wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-21 20:16:57
(3 hours ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.186.15.6 - - [21/Sep/2026:22:16:56 +0200] "GET /.git/config HTTP/1.1" 301 5820 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ธ๐ช
SkyDancer
2026-09-21 20:00:53
(4 hours ago)
Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by ...
show more
Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface.
show less
Hacking
Brute-Force
SSH
๐ซ๐ฎ
YF
2026-09-21 20:00:43
(4 hours ago)
Git config exposure probe
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-21 20:00:33
(4 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 19:36:21
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:36:18.024280 2026] [security2:error] [pid 22554:tid 22554] [client 34.186.15.6:46310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bethbornsteindunnington.maunakeavista.com"] [uri "/.git/config"] [unique_id "arGHMhhPHXM_0XnBwBMg5QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ท๐ด
iulianh
2026-09-21 19:29:08
(4 hours ago)
80,443
Brute-Force
SSH
๐ฆ๐บ
2000cn.com.au
2026-09-21 19:14:00
(5 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ง๐ช
cmbplf
2026-09-21 19:13:17
(5 hours ago)
2.219 requests with url.path */.git/config
Brute-Force
Bad Web Bot
Anonymous
2026-09-21 19:09:29
(5 hours ago)
Web scanner: GET /.git/config
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-21 19:05:58
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:05:53.784747 2026] [security2:error] [pid 13982:tid 13982] [client 34.186.15.6:43904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bestnebraskadetective.com"] [uri "/.git/config"] [unique_id "arGAEYAbGJmLDoakH5GIeQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 18:37:24
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:37:17.927426 2026] [security2:error] [pid 6546:tid 6546] [client 34.186.15.6:48818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bernescobar.com"] [uri "/.git/config"] [unique_id "arF5XafQpBk9iCr6Btq23AAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 18:19:02
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.15.6 (6.15.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:18:55.561899 2026] [security2:error] [pid 536225:tid 536225] [client 34.186.15.6:41510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bentechconstruction.com"] [uri "/.git/config"] [unique_id "arF1D1gbJAK5szSlzVIjKwAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-21 18:04:51
(6 hours ago)
cloudlinux2 fail2ban: 2026-09-21 20:00:06,048 fail2ban.filter [1598]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-21 20:00:06,048 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.186.15.6 - 2026-09-21 20:00:06cloudlinux2 fail2ban: 2026-09-21 20:00:48,686 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 35.246.102.18 - 2026-09-21 20:00:48cloudlinux2 fail2ban: 2026-09-21 20:00:49,159 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 35.246.102.18 - 2026-09-21 20:00:49cloudlinux2 fail2ban: 2026-09-21 20:00:49,304 fail2ban.filter [1598]: INFO [recidive] Found 35.246.102.18 - 2026-09-21 20:00:49cloudlinux2 fail2ban: 2026-09-21 20:00:48,736 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 35.246.102.18 - 2026-09-21 20:00:48cloudlinux2 fail2ban: 2026-09-21 20:00:48,891 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 35.246.102.18 - 2026-09-21 20:00:48cloudlinux2 fail2ban: 2026-09-21 20:00:48,842 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 35.246.102.18 - 2026-09-21 20:00:48cloudl
show less
Brute-Force