๐บ๐ธ
TPI-Abuse
2026-07-25 03:02:30
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.240.160.51 (51.160.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.160.51 (51.160.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 23:02:23.039003 2026] [security2:error] [pid 22200:tid 22200] [client 35.240.160.51:51168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeanniemorrislaw.com"] [uri "/.git/config"] [unique_id "amQnP2kIlFzxZSstcmZUCwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
kie
2026-07-25 03:00:31
(4 days ago)
25-07-2026:02:59:56UTC [Nginx Web Server] Suspicious web request: path:/.git (1 request(s)).
Bad Web Bot
Web App Attack
๐ฟ๐ฆ
conure
2026-07-25 02:49:42
(4 days ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-25 02:48:56
(4 days ago)
cloudlinux2 fail2ban: 2026-07-25 04:44:31,354 fail2ban.filter [1816]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-07-25 04:44:31,354 fail2ban.filter [1816]: INFO [plesk-wordpress] Found 45.131.193.171 - 2026-07-25 04:44:30cloudlinux2 fail2ban: 2026-07-25 04:45:04,391 fail2ban.filter [1816]: INFO [plesk-wordpress] Found 136.144.19.187 - 2026-07-25 04:45:03cloudlinux2 fail2ban: 2026-07-25 04:45:35,607 fail2ban.filter [1816]: INFO [plesk-modsecurity] Found 35.240.160.51 - 2026-07-25 04:45:35cloudlinux2 fail2ban: 2026-07-25 04:46:10,334 fail2ban.actions [1816]: NOTICE [plesk-modsecurity] Unban 108.131.171.111cloudlinux2 fail2ban: 2026-07-25 04:47:07,017 fail2ban.actions [1816]: NOTICE [plesk-modsecurity] Unban 34.81.21.15cloudlinux2 fail2ban: 2026-07-25 04:47:12,705 fail2ban.filter [1816]: INFO [plesk-wordpress] Found 216.24.219.251 - 2026-07-25 04:47:10cloudlinux2 fail2ban: 2026-07-25 04:47:13,668 fail2ban.filter [1816]: INFO [plesk-wordpress] Found 216.24.219.249 - 2026-07-25 04:47:11cloudlinux2 fail2ban: 2026-07-25 04:47:48,9
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-25 02:22:03
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.240.160.51 (51.160.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.160.51 (51.160.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 22:21:56.910679 2026] [security2:error] [pid 355691:tid 355691] [client 35.240.160.51:41486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.epk.gmacguffin.com"] [uri "/.git/config"] [unique_id "amQdxODi_Gglm3E6pqfjDAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-25 02:03:03
(4 days ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐ซ๐ท
ELYAZ
2026-07-25 02:00:10
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.240.160.51 (SG/Singapore/51.160.240. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.240.160.51 (SG/Singapore/51.160.240.35.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐ฆ๐บ
2000cn.com.au
2026-07-25 01:57:00
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-25 01:43:57
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.240.160.51 (51.160.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.160.51 (51.160.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 21:43:52.467487 2026] [security2:error] [pid 273630:tid 273776] [client 35.240.160.51:52892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abney.info"] [uri "/.git/config"] [unique_id "amQU2P5Gd8oCTJ_s7Mh2MwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-07-25 01:24:55
(4 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ณ๐ฟ
Antinson
2026-07-25 01:24:44
(4 days ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-07-25 01:08:05
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.240.160.51 (51.160.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.160.51 (51.160.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 21:07:59.858077 2026] [security2:error] [pid 17431:tid 17431] [client 35.240.160.51:37488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sionayra.tracybur.net"] [uri "/.git/config"] [unique_id "amQMb15pT75OGyOE_yNBbgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
Burayot
2026-07-25 01:07:20
(4 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.240.160.51 (SG/Singapore/51.160. ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.240.160.51 (SG/Singapore/51.160.240.35.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
lnklnx
2026-07-24 22:05:14
(4 days ago)
www.lnklnx.com:443 35.240.160.51 - - [24/Jul/2026:17:05:11 -0500] "GET /.git/config HTTP/1.1" 403 53 ...
show more
www.lnklnx.com:443 35.240.160.51 - - [24/Jul/2026:17:05:11 -0500] "GET /.git/config HTTP/1.1" 403 5322 "-" "-"
...
show less
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-07-24 22:03:24
(4 days ago)
Auto-ban: >3000 req/min op 2026-07-24
Web App Attack
SSH
Hacking