|
🇧🇪
cmbplf
|
|
211 requests with url.path */.git/config
|
Brute-Force
Bad Web Bot
|
|
|
🇩🇪
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
|
Exploited Host
Web App Attack
|
|
|
🇩🇪
Vegascosmetics
|
|
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git)
show less
|
Hacking
Brute-Force
Web App Attack
|
|
|
🇫🇷
service Informatique
|
|
/.git
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.27.49.24 (24.49.27.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.27.49.24 (24.49.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 22:48:46.033730 2026] [security2:error] [pid 13067:tid 13067] [client 34.27.49.24:65420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "towermedia.net"] [uri "/.git/config"] [unique_id "aqdgjsTjxXxnbVN3qKU1fAAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇧🇪
voormedia
|
|
Accessed trap at '/.git/config'
|
Web App Attack
|
|
|
🇧🇪
cmbplf
|
|
430 requests with url.path */.git/config
162 requests with url.path *.git/*
|
Brute-Force
Bad Web Bot
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.27.49.24 (24.49.27.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.27.49.24 (24.49.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 21:00:08.714099 2026] [security2:error] [pid 11363:tid 11363] [client 34.27.49.24:41418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.renomarsh.com"] [uri "/.git/config"] [unique_id "aqX1mB-vTGqr1_XlsdT8VgAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.27.49.24 (24.49.27.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.27.49.24 (24.49.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 20:35:50.693534 2026] [security2:error] [pid 13448:tid 13448] [client 34.27.49.24:58124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidnevue.com"] [uri "/.git/config"] [unique_id "aqXv5rXZPjkscxUOqPELPQAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇳🇱
Alt255
|
|
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.27.49.24 - - [13/Sep/2026:02:29:47 +0200] "GET /.git/config HTTP/1.1" 301 6296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Arc/1.88.0"
...
show less
|
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
Admins@FBN
|
|
FW-PortScan: Traffic Blocked srcport=53716 dstport=443
|
Port Scan
|
|
|
Anonymous
|
|
GET /.git/config HTTP/1.1
...
|
Web App Attack
|
|
|
🇦🇺
2000cn.com.au
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.27.49.24 (24.49.27.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.27.49.24 (24.49.27.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 20:00:25.503793 2026] [security2:error] [pid 22771:tid 22771] [client 34.27.49.24:49914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twinls.com"] [uri "/.git/config"] [unique_id "aqXnmenQdI_ZT-rh7YMJhgAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇱🇺
conseilgouz
|
|
are-17 : Block hidden directories=>/.git/config(/)
|
Hacking
|
|