🇫🇷
masterguru
2026-09-02 08:44:03
(22 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇫🇷
masterguru
2026-09-02 08:28:03
(38 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇩🇪
LRob
2026-09-02 08:09:42
(57 minutes ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.env (+1 more) | 2026-09-02 08:09 UTC
show less
Hacking
Web App Attack
🇿🇦
conure.sh
2026-09-02 07:57:37
(1 hour ago)
csagent: score 19.9: secrets grab x2; 1 domain(s) in 2s
Web App Attack
🇫🇷
masterguru
2026-09-02 07:52:14
(1 hour ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
2026-09-02 07:32:35
(1 hour ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 07:14:29
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.236.85.190 (190.85.236.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.85.190 (190.85.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 03:14:25.981292 2026] [security2:error] [pid 11168:tid 11168] [client 35.236.85.190:38330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.refinery.ic1.biz"] [uri "/.git/config"] [unique_id "apfM0bioIblhwLvy96jj0QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-02 05:02:58
(4 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-02 04:22:49
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.236.85.190 (190.85.236.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.85.190 (190.85.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:22:43.471471 2026] [security2:error] [pid 32219:tid 32219] [client 35.236.85.190:60160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.reelfruits.com.fruitinthedesert.com"] [uri "/.git/config"] [unique_id "apekk_RbSvX09_SHSlMNLgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-02 03:01:02
(6 hours ago)
...
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 02:45:51
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.236.85.190 (190.85.236.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.85.190 (190.85.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:45:46.076967 2026] [security2:error] [pid 13133:tid 13133] [client 35.236.85.190:59182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.redwingboot.com.cajunfriedturkey.com"] [uri "/.git/config"] [unique_id "apeN2i-ADJL-tfWw523CmAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-09-02 02:14:50
(6 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-02 02:11:03
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.236.85.190 (190.85.236.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.85.190 (190.85.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:10:58.031108 2026] [security2:error] [pid 1963:tid 1963] [client 35.236.85.190:49618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.redtowndesign.nathanburd.com"] [uri "/.git/config"] [unique_id "apeFsgJXPK4wf29jXjexSQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-02 00:10:20
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
dynamix
2026-09-01 23:52:39
(9 hours ago)
Multiple WAF Violations
Web App Attack