🇫🇷
masterguru
2026-10-22 10:08:34
(32 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 07:47:42
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.198.13.92 (92.13.198.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.13.92 (92.13.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 03:47:35.261317 2026] [security2:error] [pid 663:tid 663] [client 35.198.13.92:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.earscript.net"] [uri "/.git/config"] [unique_id "atm_lwB5JaI7Q9biE2eq6QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-22 04:12:53
(6 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
mnsf
2026-10-22 04:05:30
(6 hours ago)
Abuse Detected (13)
Brute-Force
Web App Attack
2026-10-22 03:53:24
(6 hours ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇩🇪
altenglaner
2026-10-22 01:48:06
(8 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇪🇨
CYBER-SECURITY-MM
2026-10-22 01:00:08
(9 hours ago)
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-sensitive-files. HTTP 404. Path: /.git ...
show more
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-sensitive-files. HTTP 404. Path: /.git/config. Evidence: 1 matching alerts.
show less
Web App Attack
🇳🇱
Site.eu
2026-10-22 00:19:53
(10 hours ago)
Excessive multi-domain requests
Brute-Force
🇸🇪
vaia.cloud
2026-10-21 23:50:02
(10 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-21 22:50:38
(11 hours ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.198.13.92 - - [22/Oct/2026:00:50:26 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-10-20 23:27:17
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇵🇱
lns.bz
2026-10-20 20:11:19
(1 day ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇧🇷
dominioz
2026-10-20 20:06:01
(1 day ago)
2026-10-20 20:05:45 GET /.env.local - - 35.198.13.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x ...
show more
2026-10-20 20:05:45 GET /.env.local - - 35.198.13.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 77031
2026-10-20 20:05:45 GET /.env.production - - 35.198.13.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 77031
2026-10-20 20:05:46 GET /.env.staging - - 35.198.13.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 77031
2026-10-20 20:05:46 GET /.env.development - - 35.198.13.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 77031
2026-10-20 20:05:46 GET /.env.test - - 35.198.13.92 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 77031
...
show less
Bad Web Bot
Web App Attack
🇧🇪
FrankNeirynck
2026-10-20 19:27:54
(1 day ago)
www.insink.be 35.198.13.92 - - [20/Oct/2026:21:27:53 +0200] "GET /.git/config HTTP/1.1" 404 184 "-" ...
show more
www.insink.be 35.198.13.92 - - [20/Oct/2026:21:27:53 +0200] "GET /.git/config HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000
...
show less
Hacking
Brute-Force
🇩🇪
LRob
2026-10-20 19:15:40
(1 day ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebK ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | src_port: 57966
show less
Hacking
Web App Attack