🇳🇴
jad-abuse
2026-09-12 17:16:55
(11 minutes ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 17:15:44
(12 minutes ago)
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 13:15:36.427220 2026] [security2:error] [pid 7223:tid 7223] [client 8.234.237.23:42074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stufflebeam.name"] [uri "/.git/config"] [unique_id "aqWIuEpGjRtsSXu6knivvwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-12 17:00:06
(28 minutes ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-09-12 16:58:56
(29 minutes ago)
cloudlinux2 fail2ban: 2026-09-12 18:53:54,135 fail2ban.actions [1606]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-12 18:53:54,135 fail2ban.actions [1606]: NOTICE [plesk-modsecurity] Unban 102.220.223.246cloudlinux2 fail2ban: 2026-09-12 18:54:46,213 fail2ban.actions [1606]: NOTICE [plesk-modsecurity] Unban 45.138.12.16cloudlinux2 fail2ban: 2026-09-12 18:55:05,438 fail2ban.actions [1606]: NOTICE [plesk-proftpd] Unban 51.4.106.39cloudlinux2 fail2ban: 2026-09-12 18:56:01,518 fail2ban.actions [1606]: NOTICE [plesk-modsecurity] Unban 34.64.104.229cloudlinux2 fail2ban: 2026-09-12 18:56:50,815 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 193.228.134.216 - 2026-09-12 18:56:50cloudlinux2 fail2ban: 2026-09-12 18:56:57,121 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 185.176.113.5 - 2026-09-12 18:56:57cloudlinux2 fail2ban: 2026-09-12 18:57:24,366 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 185.176.113.5 - 2026-09-12 18:57:24cloudlinux2 fail2ban: 2026-09-12 18:57:25,982 fail2ban.filter [1606]: INFO
show less
FTP Brute-Force
🇩🇪
BlueWire Hosting
2026-09-12 16:57:42
(30 minutes ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇩🇪
paissangroup
2026-09-12 16:50:20
(37 minutes ago)
Multiple WAF Violations
Web App Attack
🇩🇪
pltcldvlpr
2026-09-12 16:35:14
(52 minutes ago)
CMS/framework probe: 8.234.237.23 - - [12/Sep/2026:18:35:13 +0200] "GET /.git/config HTTP/1.1" 301 1 ...
show more
CMS/framework probe: 8.234.237.23 - - [12/Sep/2026:18:35:13 +0200] "GET /.git/config HTTP/1.1" 301 178 "-" "-" asn=396982 org="Google LLC" country=US
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 16:24:11
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 12:24:06.199606 2026] [security2:error] [pid 5258:tid 5258] [client 8.234.237.23:37404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "struver.net"] [uri "/.git/config"] [unique_id "aqV8ppUdUM36JMT4St645QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-09-12 16:13:58
(1 hour ago)
cloudlinux2 fail2ban: 2026-09-12 18:10:10,515 fail2ban.filter [1606]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-12 18:10:10,515 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 41.109.54.14 - 2026-09-12 18:10:10cloudlinux2 fail2ban: 2026-09-12 18:10:20,188 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 8.234.237.23 - 2026-09-12 18:10:20cloudlinux2 fail2ban: 2026-09-12 18:10:41,382 fail2ban.actions [1606]: NOTICE [plesk-modsecurity] Unban 34.40.195.31cloudlinux2 fail2ban: 2026-09-12 18:10:49,329 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.16.232.204 - 2026-09-12 18:10:49cloudlinux2 fail2ban: 2026-09-12 18:10:49,307 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.16.232.204 - 2026-09-12 18:10:49cloudlinux2 fail2ban: 2026-09-12 18:10:49,319 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.16.232.204 - 2026-09-12 18:10:49cloudlinux2 fail2ban: 2026-09-12 18:10:49,336 fail2ban.filter [1606]: INFO [plesk-modsecurity] Found 34.16.232.204 - 2026-09-12 18:10:49cloudlinux2 fail2ban
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-09-12 16:07:53
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 12:07:45.266784 2026] [security2:error] [pid 26701:tid 26701] [client 8.234.237.23:40548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stricklinranch.com"] [uri "/.git/config"] [unique_id "aqV40e6JrexJPSw1fJX9ywAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Epimetheus
2026-09-12 15:54:05
(1 hour ago)
Unauthorized access attempts:
[GET] /.git/config
UA: Unknown
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 15:49:12
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 11:49:08.207418 2026] [security2:error] [pid 14368:tid 14368] [client 8.234.237.23:50980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "strawberryhillchristmas.com"] [uri "/.git/config"] [unique_id "aqV0dP0slmTN_0UNrChpAQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-12 15:40:03
(1 hour ago)
suspicious request in access.log
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-12 15:31:41
(1 hour ago)
[12/Sep/2026:18:31:41 +0300] -- 8.234.237.23 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/ ...
show more
[12/Sep/2026:18:31:41 +0300] -- 8.234.237.23 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 15:21:17
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 8.234.237.23 (23.237.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 11:21:11.469371 2026] [security2:error] [pid 23302:tid 23302] [client 8.234.237.23:46324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stormstrips.info"] [uri "/.git/config"] [unique_id "aqVt5_tdnOgSZPu4IH0PiAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack