Anonymous
2026-07-10 16:32:42
(1 week ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ณ๐ฑ
homeshowdomain.nl
2026-07-09 22:02:20
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-08.
show less
Web App Attack
SSH
Hacking
๐ฌ๐ง
openstrike.co.uk
2026-07-09 05:16:25
(1 week ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
Anonymous
2026-07-09 00:00:07
(1 week ago)
File repository snooping:
35.237.150.51 - - [09/Jul/2026:00:54:58 +0100] "GET /.git/config HTTP/1.1 ...
show more
File repository snooping:
35.237.150.51 - - [09/Jul/2026:00:54:58 +0100] "GET /.git/config HTTP/1.1" 404 248 "-" "-"
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-08 23:56:02
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.237.150.51 (51.150.237.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.150.51 (51.150.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 19:55:56.223918 2026] [security2:error] [pid 4507:tid 4507] [client 35.237.150.51:48214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "richardlyne.com.easyweb-publishing.com"] [uri "/.git/config"] [unique_id "ak7jjCjPcuooZ-OwvhlgtgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-08 23:44:53
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐ฉ๐ฐ
RhQM
2026-07-08 23:30:42
(1 week ago)
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-08 23:12:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.237.150.51 (51.150.237.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.150.51 (51.150.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 19:12:53.078325 2026] [security2:error] [pid 28828:tid 28828] [client 35.237.150.51:45040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rgvatvrepair.com.worldchat.global"] [uri "/.git/config"] [unique_id "ak7ZdaG0tuW8cHIfKHBWhQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
Burayot
2026-07-08 23:11:44
(1 week ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.237.150.51 (US/United States/51.1 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.237.150.51 (US/United States/51.150.237.35.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
Anonymous
2026-07-08 23:07:02
(1 week ago)
Automated web scanner. Requested suspicious paths: /.git/config, /.git/config | /.git/config | /.git ...
show more
Automated web scanner. Requested suspicious paths: /.git/config, /.git/config | /.git/config | /.git/config. UTC: 2026-07-08 22:49:02.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-08 22:51:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.237.150.51 (51.150.237.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.150.51 (51.150.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 18:51:55.678396 2026] [security2:error] [pid 1014:tid 1014] [client 35.237.150.51:50394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reyadecostarica.com"] [uri "/.git/config"] [unique_id "ak7Ui9I9qQesIo4g3qBZrwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
ambor
2026-07-08 22:50:16
(1 week ago)
Attack type: wordpress_attack_attempt | Target: /.git/config | Country: US
Web App Attack
Brute-Force
๐ฉ๐ช
ksol-hostmaster
2026-07-08 22:40:14
(1 week ago)
2026/07/09 00:40:14 [error] 84047#145510: *931897 access forbidden by rule, client: 35.237.150.51, s ...
show more
2026/07/09 00:40:14 [error] 84047#145510: *931897 access forbidden by rule, client: 35.237.150.51, server: revolutionbim.com, request: "GET /.git/config HTTP/1.1", host: "revolutionbim.com"
...
show less
Web Spam
๐บ๐ธ
TPI-Abuse
2026-07-08 22:15:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.237.150.51 (51.150.237.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.237.150.51 (51.150.237.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 18:15:23.810277 2026] [security2:error] [pid 15700:tid 15700] [client 35.237.150.51:56694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "revelation-of-truth.galaxyretro.com"] [uri "/.git/config"] [unique_id "ak7L-2jMSHWuiXelWW3n_QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-07-08 22:03:02
(1 week ago)
Auto-ban: >3000 req/min op 2026-07-08
Web App Attack
SSH
Hacking