🇧🇪
cmbplf
2026-06-15 12:42:46
(7 hours ago)
764 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇫🇷
masterguru
2026-06-15 10:12:42
(10 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 09:53:04
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.197.163.49 (49.163.197.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.163.49 (49.163.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:53:01.341461 2026] [security2:error] [pid 14536:tid 14536] [client 35.197.163.49:59134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lfrmtmorris.encoremtmorris.com"] [uri "/src/.git/config"] [unique_id "ai_Lfd_4c5PG0XEK48UYGwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2026-06-15 08:55:19
(11 hours ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇷🇺
DZBOT
2026-06-15 02:52:10
(17 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇬🇧
consul.to
2026-06-15 02:15:11
(18 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
Steve
2026-06-15 01:25:01
(19 hours ago)
SQL Injection Attempts
Brute-Force
SQL Injection
🇺🇸
TPI-Abuse
2026-06-15 01:21:09
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.197.163.49 (49.163.197.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.163.49 (49.163.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:21:03.049032 2026] [security2:error] [pid 11987:tid 11987] [client 35.197.163.49:33692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stockeai.com.38floorsupply.com"] [uri "/public/.git/config"] [unique_id "ai9Tf9PYcVGay66BtNouuQAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-06-14 22:55:09
(21 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-14 22:03:31
(22 hours ago)
Auto-ban: >3000 req/min op 2026-06-14
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-14 21:17:54
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.197.163.49 (49.163.197.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.163.49 (49.163.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:17:50.546896 2026] [security2:error] [pid 23407:tid 23407] [client 35.197.163.49:47720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tipocambiolatam.com"] [uri "/build/.git/config"] [unique_id "ai8afkGmTsnefaSNv-tDrAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-06-14 14:15:39
(1 day ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇨🇭
Origon
2026-06-14 10:06:02
(1 day ago)
http-sensitive-files - IP: 35.197.163.49 - time="2026-06-14T12:06:01+02:00" level=info msg="(555f66 ...
show more
http-sensitive-files - IP: 35.197.163.49 - time="2026-06-14T12:06:01+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 35.197.163.49 (AU/396982) : 4h ban on Ip 35.197.163.49" module=db
show less
Web App Attack
🇳🇱
e.fierstra
2026-06-14 07:41:55
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 06:34:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.197.163.49 (49.163.197.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.197.163.49 (49.163.197.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:34:20.303851 2026] [security2:error] [pid 14153:tid 14153] [client 35.197.163.49:46650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hawksnestgolfcourse.smilingorc.com"] [uri "/symfony/.git/config"] [unique_id "ai5LbCYzTc6RufeD8QhEaQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack