๐ธ๐ช
vaia.cloud
2026-09-18 14:05:01
(10 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-18 13:25:26
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.230.115.33 (33.115.230.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.230.115.33 (33.115.230.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 09:25:19.012151 2026] [security2:error] [pid 25421:tid 25421] [client 8.230.115.33:38520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xmlprotocol.com"] [uri "/.git/config"] [unique_id "aq07v1Vg9ZIrpz8sFg75KgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-09-18 13:07:27
(11 hours ago)
Login credentials theft attempt
Hacking
๐ณ๐ฑ
Alt255
2026-09-18 09:26:23
(15 hours ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 8.230.115.33 - - [18/Sep/2026:11:26:14 +0200] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-18 09:07:03
(15 hours ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-09-18 09:03:30.
Web App Attack
๐ฉ๐ช
Live Home Cams
2026-09-17 20:35:11
(1 day ago)
WebApp brute force attack detected. Multiple file scanning attempts from 8.230.115.33. Detected by f ...
show more
WebApp brute force attack detected. Multiple file scanning attempts from 8.230.115.33. Detected by fail2ban.
show less
Web App Attack
Brute-Force
๐ฆ๐บ
2000cn.com.au
2026-09-17 18:58:35
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ซ๐ท
suble.org
2026-09-17 18:02:35
(1 day ago)
[Thu Sep 17 20:02:35.138514 2026] [access_compat:error] [pid 1698208:tid 1698208] [client 8.230.115. ...
show more
[Thu Sep 17 20:02:35.138514 2026] [access_compat:error] [pid 1698208:tid 1698208] [client 8.230.115.33:59662] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/xbkupx/
[Thu Sep 17 20:02:35.261507 2026] [access_compat:error] [pid 1698208:tid 1698208] [client 8.230.115.33:59662] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/xbkupx/
[Thu Sep 17 20:02:35.391980 2026] [access_compat:error] [pid 1698208:tid 1698208] [client 8.230.115.33:59662] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/xbkupx/
[Thu Sep 17 20:02:35.514355 2026] [access_compat:error] [pid 1698208:tid 1698208] [client 8.230.115.33:59662] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/xbkupx/
...
show less
Web App Attack
๐บ๐ธ
mccsoft.io
2026-09-17 16:56:35
(1 day ago)
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). So ...
show more
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received).
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-17 16:17:23
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-17 14:30:13
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-17 13:13:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 8.230.115.33 (33.115.230.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.230.115.33 (33.115.230.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:13:21.987054 2026] [security2:error] [pid 31525:tid 31525] [client 8.230.115.33:59510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xarq.es"] [uri "/.git/config"] [unique_id "aqvncQsRSZAjAEQqZUjdgAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-17 11:55:31
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-17 11:37:42
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
Anonymous
2026-09-17 11:00:44
(1 day ago)
[da.kdns.gr] httpd-config-scan: sites=www.xamogelo.edu.gr; logs=/var/log/httpd/domains/xamogelo.edu. ...
show more
[da.kdns.gr] httpd-config-scan: sites=www.xamogelo.edu.gr; logs=/var/log/httpd/domains/xamogelo.edu.gr.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack