🇳🇱
WeCloudit-Anti-Abuse
2026-09-02 05:34:49
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-02 05:19:03
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:18:56.718351 2026] [security2:error] [pid 24609:tid 24609] [client 207.175.186.89:36040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.owldreamllc.com"] [uri "/wordpress/.git/config"] [unique_id "apexwLx_rJo30bveLfnpAQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kommunos
2026-09-02 05:03:29
(4 hours ago)
/var/www/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 04:57:12
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:57:04.777496 2026] [security2:error] [pid 17437:tid 17437] [client 207.175.186.89:37452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.hisadvocates.org"] [uri "/www/.git/config"] [unique_id "apesoA9qx3Xg_l5ui1mCngAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 04:38:29
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:38:24.912499 2026] [security2:error] [pid 24512:tid 24541] [client 207.175.186.89:46876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail3.absurdotron.com"] [uri "/backend/.git/config"] [unique_id "apeoQCJLgOw3a-jzIvzzPgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-02 04:26:33
(4 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
2026-09-02 04:21:04
(5 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-02 03:09:12
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:09:03.632183 2026] [security2:error] [pid 5173:tid 5173] [client 207.175.186.89:46958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djcommodore.com"] [uri "/www/.git/config"] [unique_id "apeTT7R6ovd7HU_QmTGWUQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-02 02:35:04
(6 hours ago)
suspicious request in access.log
Web App Attack
🇫🇷
masterguru
2026-09-02 00:52:53
(8 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇫🇷
masterguru
2026-09-02 00:03:44
(9 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇩🇪
webanyone
2026-09-01 23:17:33
(10 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇬🇧
poundawebsiteltd
2026-09-01 19:46:53
(13 hours ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 207.175.18 ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 207.175.186.89 (BE/Belgium/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 207.175.186.89 (BE/Belgium/89.186.175.207.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 19:12:41
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 207.175.186.89 (89.186.175.207.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 15:12:38.161347 2026] [security2:error] [pid 29881:tid 29881] [client 207.175.186.89:41726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "niximperial.biz"] [uri "/var/www/.git/config"] [unique_id "apcjpmTdjxElxTijcXMS5wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 18:53:03
(14 hours ago)
Web scanner: GET /backend/.git/config
Web App Attack
Hacking