🇩🇪
tentwentyfour
2026-09-06 00:56:48
(6 hours ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
🇩🇪
paissangroup
2026-09-05 22:04:23
(9 hours ago)
Multiple WAF Violations
Web App Attack
🇨🇭
4server
2026-09-05 21:19:32
(10 hours ago)
[SatSep0523:19:28.7712992026][security2:error][pid1830214:tid1830240][client34.65.10.13:0]ModSecurit ...
show more
[SatSep0523:19:28.7712992026][security2:error][pid1830214:tid1830240][client34.65.10.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"giuristifriburgo.ch.81-17-25-250.cpanel.site\"][uri\"/api/.git/config\"][unique_id\"apyHYFGEZfxKkkA8aYPPsQAAAIg\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 02:00:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 22:00:10.443266 2026] [security2:error] [pid 8298:tid 8406] [client 34.65.10.13:47254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jevan.jp.jevan1.com"] [uri "/api/.git/config"] [unique_id "apt3qidJYu0S8RePPKmv9wAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-09-05 01:59:25
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, scanner_ua. Observed by 1 sensor(s); 12 hits.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 21:55:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 17:55:35.253542 2026] [security2:error] [pid 4904:tid 4904] [client 34.65.10.13:52606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.marijuanajoint.com"] [uri "/html/.git/config"] [unique_id "aps-V8S2KA3KVZl-LbAB1gAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:24:02
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:23:58.240661 2026] [security2:error] [pid 13423:tid 13423] [client 34.65.10.13:59308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tucsonareamarinemoms.com"] [uri "/src/.git/config"] [unique_id "aprUfgZSF9TbKtrB99gkFQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-04 13:45:05
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:41:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:41:05.983439 2026] [security2:error] [pid 10291:tid 10291] [client 34.65.10.13:44194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title48.com"] [uri "/www/.git/config"] [unique_id "apquUXDMkLBmvpZyxqYk4AAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-04 10:43:57
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 09:08:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.10.13 (13.10.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 05:08:24.328990 2026] [security2:error] [pid 7828:tid 7828] [client 34.65.10.13:55034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goodideagirl.com"] [uri "/site/.git/config"] [unique_id "apqKiDJjxjp0fEokRs8GRQAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-04 06:45:01
(2 days ago)
suspicious request in access.log
Web App Attack
🇩🇪
ghostwarriors
2026-09-04 05:50:11
(2 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
ddobko
2026-09-04 05:04:20
(2 days ago)
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-04 04:53:46
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
