🇩🇪
SCHAPPY
2026-09-24 08:24:32
(7 hours ago)
Malicious activity from IP detected: crowdsecurity/http-sensitive-files.
Web App Attack
Hacking
🇫🇷
masterguru
2026-09-24 07:54:14
(7 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
2026-09-24 07:01:15
(8 hours ago)
Scanner hitting /site/.git/config on dalon.ara-oman.com (GOOGL-2) — aaguard
Brute-Force
Port Scan
🇺🇸
TPI-Abuse
2026-09-24 04:22:36
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:22:33.438447 2026] [security2:error] [pid 27257:tid 27257] [client 34.76.99.167:55742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "craftcare.net"] [uri "/app/.git/config"] [unique_id "arSliYZoD2MLRldZY6bx9gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 02:13:30
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 22:13:27.017307 2026] [security2:error] [pid 9369:tid 9369] [client 34.76.99.167:56914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.l3l4.com"] [uri "/app/.git/config"] [unique_id "arSHR0MUm0kQPwHpatv1EAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 00:18:49
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 20:18:44.859049 2026] [security2:error] [pid 22861:tid 22861] [client 34.76.99.167:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.distro.media"] [uri "/html/.git/config"] [unique_id "arRsZN-YwkIYgG-9ClXQcQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-23 23:25:02
(16 hours ago)
suspicious request in access.log
Web App Attack
🇩🇪
sternwart
2026-09-23 22:02:42
(17 hours ago)
Automatisch erkannt: Zugriff auf /wordpress/.git/config (3d.alpasana.ch)
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-23 20:39:51
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 16:39:45.133553 2026] [security2:error] [pid 27800:tid 27800] [client 34.76.99.167:41358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clayton.cpking.com"] [uri "/.git/config"] [unique_id "arQ5EbzIjoSdZPIDKvgGPQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-23 14:16:00
(1 day ago)
Banned by Fail2Ban on server
Web App Attack
🇩🇪
FeG Deutschland
2026-09-23 11:20:01
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
Gabriel Camargo
2026-09-23 11:09:06
(1 day ago)
34.76.99.167 - - [23/Sep/2026:06:09:05 -0500] "GET /var/www/.git/config HTTP/1.1" 301 178 "-" "crusa ...
show more
34.76.99.167 - - [23/Sep/2026:06:09:05 -0500] "GET /var/www/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
34.76.99.167 - - [23/Sep/2026:06:09:05 -0500] "GET /site/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
34.76.99.167 - - [23/Sep/2026:06:09:05 -0500] "GET /src/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
...
show less
Brute-Force
SSH
🇳🇱
Alt255
2026-09-23 10:45:02
(1 day ago)
[ti-03ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-03ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.76.99.167 - - [23/Sep/2026:12:44:43 +0200] "GET /app/.git/config HTTP/1.1" 403 6264 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
🇳🇴
Abuse Buster
2026-09-23 09:55:27
(1 day ago)
34.76.99.167 - - [23/Sep/2026:11:55:25 +0200] "GET /app/.git/config HTTP/1.1" 404 22 "-" "crusader-w ...
show more
34.76.99.167 - - [23/Sep/2026:11:55:25 +0200] "GET /app/.git/config HTTP/1.1" 404 22 "-" "crusader-worker/1.0"
34.76.99.167 - - [23/Sep/2026:11:55:25 +0200] "GET /api/.git/config HTTP/1.1" 404 22 "-" "crusader-worker/1.0"
34.76.99.167 - - [23/Sep/2026:11:55:25 +0200] "GET /www/.git/config HTTP/1.1" 404 22 "-" "crusader-worker/1.0"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 08:06:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.99.167 (167.99.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 04:06:22.602059 2026] [security2:error] [pid 28015:tid 28015] [client 34.76.99.167:42078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avalonestates.org"] [uri "/var/www/.git/config"] [unique_id "arOIfomu0SqCLj5Hh94a3QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack