๐บ๐ธ
mnsf
2026-08-28 03:05:17
(4 hours ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
Anonymous
2026-08-27 23:52:09
(7 hours ago)
[web.zebs.ch] httpd-config-scan: sites=www.zebs.ch; logs=/var/log/httpd/domains/zebs.ch.log; samples ...
show more
[web.zebs.ch] httpd-config-scan: sites=www.zebs.ch; logs=/var/log/httpd/domains/zebs.ch.log; samples=/wordpress/.git/config | /.git/config | /var/www/.git/config
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 15:08:51
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.26.163 (163.26.48.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.26.163 (163.26.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:08:45.944127 2026] [security2:error] [pid 27426:tid 27426] [client 34.48.26.163:53204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cortona.ws.montepulciano.org"] [uri "/.git/config"] [unique_id "apBS_fixW5r_aa5WIfHaVwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-08-27 15:08:42
(16 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
Anonymous
2026-08-27 14:22:40
(17 hours ago)
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /var/www/.git/config HTTP/1.1" 403 12583 "-" "cru ...
show more
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /var/www/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /api/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /public/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /www/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /htdocs/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /app/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /html/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.48.26.163 - - [27/Aug/2026:16:22:40 +0200] "GET /site/.git/config HTTP/1.1" 40
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ด
jad-abuse
2026-08-27 12:29:07
(19 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, scanner_ua. Observed by 1 sensor(s); 12 hits.
show less
Web App Attack
๐ซ๐ท
dynamix
2026-08-27 11:32:41
(20 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 09:07:39
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.26.163 (163.26.48.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.26.163 (163.26.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 05:07:31.114504 2026] [security2:error] [pid 4382:tid 4382] [client 34.48.26.163:45046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tienda.aguasolar.com"] [uri "/var/www/.git/config"] [unique_id "ao_-U6j0mAwQ94J8mUyGzAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-08-27 07:21:19
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐ญ๐บ
miszterx.hu
2026-08-27 06:02:10
(1 day ago)
XORP (haproxy): 11x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show more
XORP (haproxy): 11x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
๐ฌ๐ง
consul.to
2026-08-27 04:10:23
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
dbmwebdesign
2026-08-27 03:15:05
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐ธ๐ช
vaia.cloud
2026-08-27 03:15:02
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐บ๐ธ
infra-monitor
2026-08-27 03:00:05
(1 day ago)
Automated ban via infra-monitor: mgmt-path-probe, suspicious-probe
Port Scan
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-27 02:50:56
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack