🇩🇪
FeG Deutschland
2026-11-14 08:55:08
UTC ·
(7 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇫🇷
Steph33FR
2026-11-14 08:18:47
UTC ·
(8 hours ago)
Fail2ban (nginx-sensitive-get): automated web vulnerability scanning (probing for .env, .git and similar sensitive files).
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-14 06:40:04
UTC ·
(10 hours ago)
[cb-01vi] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.135 - - [14/Nov/2026:07:40:02 +0100] "GET /.git/config HTTP/2.0" 404 4607 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleW ...
show more
[cb-01vi] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 162.158.103.135 - - [14/Nov/2026:07:40:02 +0100] "GET /.git/config HTTP/2.0" 404 4607 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-14 02:17:53
UTC ·
(14 hours ago)
[SatNov1403:17:51.1326512026][security2:error][pid1668824:tid1668905][client162.158.103.135:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960 ...
show more
[SatNov1403:17:51.1326512026][security2:error][pid1668824:tid1668905][client162.158.103.135:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"autodiscover.lemox.ch\"][uri\"/.git/config\"][unique_id\"avfEzzkXywnetPu_S9gdDAAAAFc\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 00:55:53
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:55:49.853332 2026] [security2:error] [pid 8292:tid 8436] [client 162.158.103.135:10375] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:55:49.853332 2026] [security2:error] [pid 8292:tid 8436] [client 162.158.103.135:10375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.indigocapital.es"] [uri "/.git/config"] [unique_id "avexlfAMX0bq0hAN_pg0lAAAAMU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-14 00:25:22
UTC ·
(16 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-13T22:25:28.000Z.
Web App Attack
🇸🇪
1337v411
2026-11-13 22:15:39
UTC ·
(18 hours ago)
[2026-11-13T22:15:38+00:00] uri="/.git/config" ua="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-13 21:53:27
UTC ·
(18 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-13T21:51:51.000Z.
Web App Attack
🇩🇪
altenglaner
2026-11-13 21:16:47
UTC ·
(19 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇳🇴
jad-abuse
2026-11-13 21:05:56
UTC ·
(19 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits.
Web App Attack
🇫🇷
Little Iguana
2026-11-13 14:30:48
UTC ·
(1 day ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇺🇸
TPI-Abuse
2026-11-13 09:29:55
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:29:49.307169 2026] [security2:error] [pid 19810:tid 19810] [client 162.158.103.135:1021 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:29:49.307169 2026] [security2:error] [pid 19810:tid 19810] [client 162.158.103.135:10215] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.matchob.utilis.net"] [uri "/.git/config"] [unique_id "avbYjWoUF3efX2kIs9kbGwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 19:27:18
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:27:13.919664 2026] [security2:error] [pid 5000:tid 5029] [client 162.158.103.135:10202] ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 14:27:13.919664 2026] [security2:error] [pid 5000:tid 5029] [client 162.158.103.135:10202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.chilltech.info"] [uri "/.git/config"] [unique_id "avYTEQ4EgPGR7aL2m7QJAQAAAhU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-12 00:29:11
UTC ·
(2 days ago)
Scanning for exposed credentials and private keys.
Hacking
🇺🇸
TPI-Abuse
2026-11-11 20:41:09
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 162.158.103.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:41:05.988424 2026] [security2:error] [pid 29231:tid 29231] [client 162.158.103.135:1407 ...
show more
(mod_security) mod_security (id:210492) triggered by 162.158.103.135 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:41:05.988424 2026] [security2:error] [pid 29231:tid 29231] [client 162.158.103.135:14074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.couturebikini.com"] [uri "/.git/config"] [unique_id "avTS4RuJuZCh5-Et8rG7SAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack