๐ซ๐ท
masterguru
2026-09-03 16:50:23
(5 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐ฉ๐ช
dbmwebdesign
2026-09-03 16:30:05
(6 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 15:35:26
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 11:35:22.335889 2026] [security2:error] [pid 8319:tid 8335] [client 34.142.10.207:59916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iguanablue.newleafpro.com"] [uri "/var/www/.git/config"] [unique_id "apmTurye3xm5PnxnHTOOPQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
dave
2026-09-03 13:22:03
(9 hours ago)
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ...
show more
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/vpatch-git-config observed_by=1_hosts hit_count=12 first_seen=2026-09-03T13:22:02Z last_seen=2026-09-03T13:22:03Z
show less
Web App Attack
๐ฉ๐ช
kkeyser
2026-09-03 12:50:10
(9 hours ago)
GET /backend/.git/config HTTP/1.1
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-09-03 12:31:00
(10 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.142.10.207 (GB/United Kingdom/207.10.142.34. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.142.10.207 (GB/United Kingdom/207.10.142.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 09:54:12
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 05:54:08.184520 2026] [security2:error] [pid 30216:tid 30216] [client 34.142.10.207:43678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.novobeads.com"] [uri "/var/www/.git/config"] [unique_id "aplDwKrbtwWbTBRcIbGtqwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฟ๐ฆ
conure.sh
2026-09-03 09:51:43
(12 hours ago)
csagent: score 20.2: secrets grab x2, 404 noise floor x1; 1 domain(s) in 0s
Web App Attack
๐ฉ๐ช
kommunos
2026-09-03 07:31:23
(15 hours ago)
/www/.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 02:15:48
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 22:15:42.813655 2026] [security2:error] [pid 17450:tid 17450] [client 34.142.10.207:51336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.trixieotoole.com"] [uri "/public/.git/config"] [unique_id "apjYToyZlwUnKWSjWJ-s7QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 01:51:22
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:51:14.466524 2026] [security2:error] [pid 30466:tid 30466] [client 34.142.10.207:47332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.srippy.com"] [uri "/site/.git/config"] [unique_id "apjSkrkJbgWBYkosi52oFwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 01:31:45
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.10.207 (207.10.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:31:40.649098 2026] [security2:error] [pid 29717:tid 29717] [client 34.142.10.207:35218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.krugmans.net"] [uri "/src/.git/config"] [unique_id "apjN_Mq2MwaDsb3Ziv-tWAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-02 22:00:26
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01.
show less
Web App Attack
SSH
Hacking
Anonymous
2026-09-02 16:15:19
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ธ๐ช
vaia.cloud
2026-09-02 14:05:02
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack