🇧🇪
boxed-it
2026-11-04 03:42:35
UTC ·
(3 days ago)
GET /.git/config (Tarpitted for 1d15h8m29s, wasted 8.06MB)
Web App Attack
🇭🇷
bubausluge
2026-11-02 13:37:44
UTC ·
(5 days ago)
Blocked by https://aegis.hr — WAF: Dot-Env / Config Exposure - (MITRE T1552.001), 5 attempts, Period: 2026-11-02 13:12:56 to 2026-11-02 13:12:57
Web App Attack
Hacking
🇸🇪
EmK530
2026-11-02 13:31:26
UTC ·
(5 days ago)
[v3] Credential/config file leak probe: /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 13:22:30
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 209.97.186.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:22:26.131280 2026] [security2:error] [pid 5523:tid 5523] [client 209.97.186.124:60954] M ...
show more
(mod_security) mod_security (id:210492) triggered by 209.97.186.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:22:26.131280 2026] [security2:error] [pid 5523:tid 5523] [client 209.97.186.124:60954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.160"] [uri "/.git/config"] [unique_id "auiOkot94gTzA1IlN0B4OAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-11-02 13:20:58
UTC ·
(5 days ago)
web exploits
Hacking
Exploited Host
Web App Attack
2026-11-02 13:17:21
UTC ·
(5 days ago)
Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
Web App Attack
🇳🇱
Alt255
2026-11-02 13:14:35
UTC ·
(5 days ago)
[testbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 209.97.186.124 - - [02/Nov/2026:14:14:19 +0100] "GET /.git/config HTTP/1.1" 404 7897 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM ...
show more
[testbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 209.97.186.124 - - [02/Nov/2026:14:14:19 +0100] "GET /.git/config HTTP/1.1" 404 7897 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
sarphim
2026-11-02 13:12:15
UTC ·
(5 days ago)
[Blackhive Honeypot] Web attack probe on port 80: GET /.git/config HTTP/1.1
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-02 13:02:55
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 209.97.186.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:02:51.514714 2026] [security2:error] [pid 13811:tid 13811] [client 209.97.186.124:41896] ...
show more
(mod_security) mod_security (id:210492) triggered by 209.97.186.124 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 08:02:51.514714 2026] [security2:error] [pid 13811:tid 13811] [client 209.97.186.124:41896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.217"] [uri "/.git/config"] [unique_id "auiJ-1V8XdmTpKJLWLzY7gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mcp-log-sentinel
2026-11-02 13:01:10
UTC ·
(5 days ago)
Log Sentinel automated defense: blocked HIGH threat (Unauthorized reconnaissance scan probing for exposed sensitive files or configuration). Attack vector / Path: GET /.git/config. [Target server IP, domain names, and internal infrastructure redacted ...
show more
Log Sentinel automated defense: blocked HIGH threat (Unauthorized reconnaissance scan probing for exposed sensitive files or configuration). Attack vector / Path: GET /.git/config. [Target server IP, domain names, and internal infrastructure redacted for privacy]
show less
Port Scan
Hacking
Web App Attack
🇳🇴
jad-abuse
2026-11-02 12:58:12
UTC ·
(5 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits.
Web App Attack
🇫🇷
Eldeberen
2026-11-02 12:57:05
UTC ·
(5 days ago)
Vulnerability scan attempt through HTTP protocol
Web App Attack
🇫🇷
ingroscart.it
2026-11-02 12:57:03
UTC ·
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇲🇽
mcabanas
2026-11-02 12:50:36
UTC ·
(5 days ago)
[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Target: IP Directo. Reason: Acceso directo a IP no autorizado (Escaneo perimetral sin FQDN). User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537 ...
show more
[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Target: IP Directo. Reason: Acceso directo a IP no autorizado (Escaneo perimetral sin FQDN). User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36. TLS JA3: f80d3d09f61892c5846c854dd84ac403. Path: GET /.git/config HTTP/1.1.
show less
Port Scan
Hacking
Web App Attack
🇺🇸
jcbriar
2026-11-02 12:49:36
UTC ·
(5 days ago)
Searching for vulnerable scripts
Hacking
Web App Attack
