🇫🇷
service Informatique
2026-07-10 04:00:37
(18 hours ago)
/.git
Web App Attack
🇨🇭
Peter-Johann Sarbach
2026-07-10 03:40:33
(18 hours ago)
Hacking website
Hacking
🇺🇸
EvilTurkey
2026-07-09 12:14:25
(1 day ago)
Web app attack against financial institution website.
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-07-09 08:31:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 216.81.245.141 (ig141.igreat.com): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 216.81.245.141 (ig141.igreat.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:31:05.702086 2026] [security2:error] [pid 23312:tid 23312] [client 216.81.245.141:43384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.the.dental"] [uri "/.git/config"] [unique_id "ak9cSQ8cerSGTULyP47KwwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
YF
2026-07-09 08:20:13
(1 day ago)
Git config exposure probe
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 08:14:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 216.81.245.141 (ig141.igreat.com): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 216.81.245.141 (ig141.igreat.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 04:14:45.217851 2026] [security2:error] [pid 8932:tid 8932] [client 216.81.245.141:50164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alltecmachine.com"] [uri "/.git/config"] [unique_id "ak9YdT4YAvFrlhUqE0H9FQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 07:59:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 216.81.245.141 (ig141.igreat.com): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 216.81.245.141 (ig141.igreat.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 03:59:40.316738 2026] [security2:error] [pid 20495:tid 20495] [client 216.81.245.141:50788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.k2servicesinc.net"] [uri "/.git/config"] [unique_id "ak9U7OwFGCb6Q-Q56cESLAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 06:50:42
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 216.81.245.141 (ig141.igreat.com): 1 in the las ...
show more
(mod_security) mod_security (id:949110) triggered by 216.81.245.141 (ig141.igreat.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 02:50:38.638016 2026] [security2:error] [pid 32580:tid 32580] [client 216.81.245.141:40604] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.ironmountainsports.com"] [uri "/.git/config"] [unique_id "ak9EvrQZEt0dsKh3FcdX1wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
technojoe99
2026-07-09 06:26:11
(1 day ago)
Exploit scan from 216.81.245.141. GET /.git/config HTTP/1.1.
Web App Attack
🇸🇪
SkyDancer
2026-07-09 06:10:06
(1 day ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
2026-07-09 06:09:30
(1 day ago)
scanning for potential vulnerable apps (wordpress etc.) and database accesses (ISR). Requested URI: ...
show more
scanning for potential vulnerable apps (wordpress etc.) and database accesses (ISR). Requested URI: /.git/config
show less
Web App Attack
2026-07-09 06:07:30
(1 day ago)
Web Server Exposed Git Repository Information Disclosure.
Hacking
🇺🇸
jkhorvath.com
2026-07-09 06:05:13
(1 day ago)
Request for URL /.git/config
Phishing
Brute-Force
Web App Attack
🇳🇴
jad-abuse
2026-07-09 05:57:38
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
show less
Web App Attack
2026-07-09 05:49:54
(1 day ago)
Web App Attack