🇨🇿
ddw
2026-09-16 02:56:24
(4 hours ago)
ModSecurity detection - Rules: 930130(Restricted File Access Attempt)
Web App Attack
2026-09-16 02:20:04
(4 hours ago)
suspicious request in access.log
Web App Attack
🇫🇷
masterguru
2026-09-16 02:07:06
(4 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇫🇷
dynamix
2026-09-15 22:53:00
(8 hours ago)
Multiple WAF Violations
Web App Attack
🇪🇸
robotstxt
2026-09-15 21:30:49
(9 hours ago)
35.231.95.179 - - [15/Sep/2026:21:30:23 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linu ...
show more
35.231.95.179 - - [15/Sep/2026:21:30:23 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.231.95.179"
35.231.95.179 - - [15/Sep/2026:21:30:23 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.231.95.179"
35.231.95.179 - - [15/Sep/2026:21:30:23 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.231.95.179"
35.231.95.179 - - [15/Sep/2026:21:30:24 +0000] "GET /.git/config HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.231.95.179"
35.231.95.179 - - [15/Sep/2026:21:30:24 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0
...
show less
Web App Attack
2026-09-15 21:11:42
(9 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 20:28:28
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.95.179 (179.95.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.95.179 (179.95.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:28:25.059740 2026] [security2:error] [pid 1533598:tid 1533598] [client 35.231.95.179:58336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notrucking.nodepot.com"] [uri "/.git/config"] [unique_id "aqmqafck4Pz8a8rR8LLgvwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-09-15 20:03:47
(10 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇬🇧
gurnip
2026-09-15 19:31:50
(11 hours ago)
Vulnerability probe of page /.git/config, not found on server.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 18:57:48
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.95.179 (179.95.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.95.179 (179.95.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:57:44.983155 2026] [security2:error] [pid 19799:tid 19799] [client 35.231.95.179:54202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notify.ev.alitcogroup.com"] [uri "/.git/config"] [unique_id "aqmVKCIecSuucZdD8AXTxAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-15 18:55:03
(12 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
WellSpring
2026-09-15 17:44:57
(13 hours ago)
env leak on wellspr.ing/public/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 17:40:16
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.231.95.179 (179.95.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.95.179 (179.95.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:40:11.869921 2026] [security2:error] [pid 7280:tid 7280] [client 35.231.95.179:36008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notforhirellc.scottwithers.xyz"] [uri "/.git/config"] [unique_id "aqmC-3uFJwZzFm70FQLYngAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Not Fake
2026-09-15 17:33:48
(13 hours ago)
$f2bV_matches
Web App Attack