๐ซ๐ท
masterguru
2026-10-14 05:44:21
(6 hours ago)
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-201)
Hacking
๐ง๐ช
sid3windr
2026-10-14 05:09:10
(6 hours ago)
GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
๐ง๐ท
Peregrine
2026-10-14 03:12:05
(8 hours ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 64.225.64.245 - - [12/Oct/2026:11:22:00 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 64.225.64.245 - - [12/Oct/2026:11:22:00 -0300] "GET /.git/config HTTP/1.1" 404 414
- 64.225.64.245 - - [12/Oct/2026:11:22:00 -0300] "GET /.git/config HTTP/1.1" 404 414
show less
Bad Web Bot
Anonymous
2026-10-12 20:05:21
(1 day ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
๐ช๐ธ
librebit
2026-10-12 18:30:14
(1 day ago)
Brute force
Brute-Force
๐บ๐ธ
CBJ
2026-10-12 14:42:11
(1 day ago)
fail2ban: apache-filepath-recon
...
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 14:38:38
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 64.225.64.245 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 64.225.64.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 10:38:31.622556 2026] [security2:error] [pid 7317:tid 7317] [client 64.225.64.245:34546] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "192.64.150.240"] [uri "/.git/config"] [unique_id "aszw56JXHMSYWX2Lty31-gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
Juha Jurvanen
2026-10-12 14:33:34
(1 day ago)
Blocked by Scantide Guard on iis-rdweb-protection. Rule: Immediate HTTP block: high-confidence web a ...
show more
Blocked by Scantide Guard on iis-rdweb-protection. Rule: Immediate HTTP block: high-confidence web attack pattern matched '*/.git/config*'..
show less
Brute-Force
๐บ๐ธ
HamSammich
2026-10-12 14:27:55
(1 day ago)
Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-10-12T14:27Z).
Brute-Force
Web App Attack
Anonymous
2026-10-12 14:26:53
(1 day ago)
Probing for exposed sensitive files.
Hacking
๐ธ๐ช
KIDOS
2026-10-12 14:26:07
(1 day ago)
Apache monitor: ssrf_log_spoofing
Brute-Force
SSH
๐บ๐ธ
markawes
2026-10-12 14:22:51
(1 day ago)
[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence:
64.225.64.245 ...
show more
[SynFast] Auto banned by Fail2Ban. Reason: Web vulnerability scan detected. Evidence:
64.225.64.245 - - [12/Oct/2026:14:22:50 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
64.225.64.245 - - [12/Oct/2026:14:22:50 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
show less
Web App Attack
Port Scan
๐ง๐ท
Peregrine
2026-10-12 14:22:04
(1 day ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 64.225.64.245 - - [12/Oct/2026:11:22:00 -0300] "GET ...
show more
Fail2Ban Jail s2: tomcat-honeypot | Evidence: - 64.225.64.245 - - [12/Oct/2026:11:22:00 -0300] "GET /.git/config HTTP/1.1" 404 414
- 64.225.64.245 - - [12/Oct/2026:11:22:00 -0300] "GET /.git/config HTTP/1.1" 404 414
show less
Bad Web Bot
๐จ๐ญ
ALPHANET
2026-10-12 14:21:24
(1 day ago)
web exploits
Hacking
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 14:21:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 64.225.64.245 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 64.225.64.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 10:21:08.921043 2026] [security2:error] [pid 6986:tid 6986] [client 64.225.64.245:35784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.179"] [uri "/.git/config"] [unique_id "aszs1K80KUyznLDLV6cK3AAAADw"]
show less
Brute-Force
Bad Web Bot
Web App Attack