๐ฟ๐ฆ
conure.sh
2026-10-27 14:45:32
(12 minutes ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in 0s
Web App Attack
๐ฎ๐ฉ
Burayot
2026-10-27 14:45:08
(13 minutes ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.226.164.88 (US/United States/88. ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.226.164.88 (US/United States/88.164.226.35.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
๐ฉ๐ช
Interceptor_HQ
2026-10-27 14:43:17
(14 minutes ago)
request_uri: /.git/config -- automatic report --
Brute-Force
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-27 14:42:12
(16 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.226.164.88 (88.164.226.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.226.164.88 (88.164.226.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 10:42:08.100342 2026] [security2:error] [pid 29459:tid 29459] [client 35.226.164.88:14976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whitecranemanagement.com"] [uri "/.git/config"] [unique_id "auC4QMsCCEOHqzfQ3N8P5gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hagen Schoebel
2026-10-27 14:41:57
(16 minutes ago)
Blocked by CrowdSec - anomaly score block: lfi: 5, anomaly: 5, (US)
Port Scan
Brute-Force
Web App Attack
SSH
Anonymous
2026-10-27 14:41:02
(17 minutes ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐ฆ๐บ
aranguren.org
2026-10-27 14:38:49
(19 minutes ago)
35.226.164.88 - - [28/Oct/2026:01:38:47 +1100] "GET /.git/config HTTP/1.1" 301 281 "-" "Mozilla/5.0 ...
show more
35.226.164.88 - - [28/Oct/2026:01:38:47 +1100] "GET /.git/config HTTP/1.1" 301 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0" TLSv1.3 TLS_AES_128_GCM_SHA256
35.226.164.88 - - [28/Oct/2026:01:38:48 +1100] "GET /.git/config HTTP/1.1" 404 1144 "https://luisaranguren.com/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:136.0) Gecko/20100101 Firefox/136.0" TLSv1.3 TLS_AES_128_GCM_SHA256
...
show less
Web App Attack
๐จ๐ญ
YF
2026-10-27 14:37:19
(20 minutes ago)
Git config exposure probe
Web App Attack
๐ฌ๐ง
kie
2026-10-27 14:36:04
(22 minutes ago)
27-10-2026:14:35:37UTC [Nginx Web Server] Suspicious web request: path:/.git (1 request(s)).
Bad Web Bot
Web App Attack
๐บ๐ธ
francelink.fr
2026-10-27 14:35:30
(22 minutes ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-27T13:38:26.000Z.
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-27 14:33:59
(24 minutes ago)
cloudlinux2 fail2ban: 2026-10-27 15:28:54,909 fail2ban.filter [1596]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-10-27 15:28:54,909 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 45.138.12.21 - 2026-10-27 15:28:54cloudlinux2 fail2ban: 2026-10-27 15:29:16,853 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 117.241.49.39 - 2026-10-27 15:29:15cloudlinux2 fail2ban: 2026-10-27 15:29:28,563 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 35.226.164.88 - 2026-10-27 15:29:28cloudlinux2 fail2ban: 2026-10-27 15:29:40,891 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 34.73.124.217 - 2026-10-27 15:29:40cloudlinux2 fail2ban: 2026-10-27 15:29:57,894 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 103.132.221.20 - 2026-10-27 15:29:55cloudlinux2 fail2ban: 2026-10-27 15:30:26,051 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 170.64.198.139 - 2026-10-27 15:30:25cloudlinux2 fail2ban: 2026-10-27 15:30:46,955 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 150.251.225.106 - 2026-10-27 15:30:
show less
Web App Attack
๐ซ๐ฎ
paissangroup
2026-10-27 14:33:46
(24 minutes ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-27 14:31:35
(26 minutes ago)
Web application attack detected.
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-27 14:26:32
(31 minutes ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-27 14:26:04
(32 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.226.164.88 (88.164.226.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.226.164.88 (88.164.226.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 10:25:57.844461 2026] [security2:error] [pid 1810:tid 1810] [client 35.226.164.88:15952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jimlawless.net"] [uri "/.git/config"] [unique_id "auC0daX1XFSG0f_6FcE-jAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack