🇩🇪
Blexyel
2026-11-07 10:02:04
UTC ·
(1 hour ago)
172.86.119.239 - - [07/Nov/2026:11:02:04 +0100] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15"
...
Brute-Force
Web App Attack
🇫🇷
GoodOldTOS
2026-11-07 09:47:04
UTC ·
(1 hour ago)
Bad keywords detected in request: /.git/config/.git
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 09:15:32
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:15:28.408894 2026] [security2:error] [pid 27996:tid 2799 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:15:28.408894 2026] [security2:error] [pid 27996:tid 27996] [client 172.86.119.239:54354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.eta-mct.com"] [uri "/.git/config"] [unique_id "au7sMLjTlA3UkGun6M1KuwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-11-07 09:07:15
UTC ·
(2 hours ago)
"GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64)"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 09:00:21
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:00:10.180968 2026] [security2:error] [pid 1565:tid 1565] ...
show more
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 04:00:10.180968 2026] [security2:error] [pid 1565:tid 1565] [client 172.86.119.239:47934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oxysulfur.com.mroxygen.org"] [uri "/.git/config"] [unique_id "au7omjKMvuAlBD5yDD3IZwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
srebrakowski.com
2026-11-07 08:52:26
UTC ·
(2 hours ago)
crowdsec/waf-detected-exploits
Brute-Force
🇦🇺
Klaverstyn
2026-11-07 08:44:41
UTC ·
(2 hours ago)
Repeated 403 Forbidden responses
Web App Attack
🇺🇸
SYSMarshal
2026-11-07 08:44:33
UTC ·
(2 hours ago)
SYSMarshal detection: Port Scanning, Web Application Attack, DDoS Attack, DNS Attack, Bad Bot [Port:443, Proto:TCP, EventID:5152]
Port Scan
Web App Attack
Bad Web Bot
🇭🇷
bubausluge
2026-11-07 08:39:24
UTC ·
(2 hours ago)
Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 10 attempts, Period: 2026-11-07 08:07:16 to 2026-11-07 08:07:16
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-07 08:34:06
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 03:34:01.754952 2026] [security2:error] [pid 15172:tid 1517 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 03:34:01.754952 2026] [security2:error] [pid 15172:tid 15172] [client 172.86.119.239:57072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gilmourleigh.vanemby.com"] [uri "/.git/config"] [unique_id "au7ieSmAv2Ux6cMJf91ifAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IVski.com
2026-11-07 08:32:58
UTC ·
(2 hours ago)
IVski WAF | Sensitive file probe - looking for exposed .git/config
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 08:17:19
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 03:17:11.980507 2026] [security2:error] [pid 23504:tid 2350 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 03:17:11.980507 2026] [security2:error] [pid 23504:tid 23504] [client 172.86.119.239:52886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.caleb.calebdavison.com"] [uri "/.git/config"] [unique_id "au7eh6F281uTA0IfBPAw8AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 07:59:03
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 02:58:57.276765 2026] [security2:error] [pid 24473:tid 2447 ...
show more
(mod_security) mod_security (id:210492) triggered by 172.86.119.239 (239.119.86.172.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 02:58:57.276765 2026] [security2:error] [pid 24473:tid 24473] [client 172.86.119.239:58018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "winbayfire.com"] [uri "/.git/config"] [unique_id "au7aQb34fNZneNqCw9sigQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
tsZero
2026-11-07 07:54:51
UTC ·
(3 hours ago)
Scan example: path=/.git/config status=404
Hacking
🇩🇪
rh24
2026-11-07 07:54:40
UTC ·
(3 hours ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 172.86.119.239 (US/United States/239.119.86.172.static.cloudzy.com)
Hacking
