π³π±
Site.eu
2026-10-17 05:12:53
(4 days ago)
Excessive multi-domain requests
Brute-Force
π³π±
Savvii
2026-10-17 04:26:13
(4 days ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
FD-IX
2026-10-17 04:03:04
(4 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
π§πͺ
cmbplf
2026-10-17 03:25:00
(4 days ago)
2.902 requests with url.path *.env
373 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
π©πͺ
kkw
2026-10-16 17:55:37
(4 days ago)
[REDACTED] 35.244.107.141 - - [16/Oct/2026:19:55:36 +0200] "GET /.git/config HTTP/1.1" 301 747 "-" " ...
show more
[REDACTED] 35.244.107.141 - - [16/Oct/2026:19:55:36 +0200] "GET /.git/config HTTP/1.1" 301 747 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-16 17:19:58
(4 days ago)
GET /.git/config HTTP/1.1
...
Web App Attack
π³π±
Site.eu
2026-10-16 16:55:32
(4 days ago)
Excessive 404/403 errors
Brute-Force
πΊπΈ
TPI-Abuse
2026-10-16 13:44:27
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.244.107.141 (141.107.244.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.107.141 (141.107.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:44:22.769417 2026] [security2:error] [pid 16233:tid 16233] [client 35.244.107.141:50524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.syvox.nashes.net"] [uri "/.git/config"] [unique_id "atIqNgmWeJvQpaMsnfQz3AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
altenglaner
2026-10-16 12:10:58
(4 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
π²πΎ
Rizzy
2026-10-16 11:27:11
(4 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
πͺπ¨
CYBER-SECURITY-MM
2026-10-16 11:15:39
(4 days ago)
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-sensitive-files. HTTP 404. Path: /.git ...
show more
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-sensitive-files. HTTP 404. Path: /.git/config. Evidence: 1 matching alerts.
show less
Web App Attack
π©πͺ
cybertailor
2026-10-16 10:24:23
(4 days ago)
35.244.107.141 - - [16/Oct/2026:15:24:20 +0500] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 ...
show more
35.244.107.141 - - [16/Oct/2026:15:24:20 +0500] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.244.107.141 - - [16/Oct/2026:15:24:20 +0500] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.244.107.141 - - [16/Oct/2026:15:24:21 +0500] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.244.107.141 - - [16/Oct/2026:15:24:21 +0500] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.244.107.141 - - [16/Oct/2026:15:24:21 +0500] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-10-16 09:55:02
(5 days ago)
suspicious request in access.log
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 09:44:23
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.244.107.141 (141.107.244.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.107.141 (141.107.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 05:44:18.451867 2026] [security2:error] [pid 27798:tid 27798] [client 35.244.107.141:56358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.syscoxlegends.com.darkcodedesign.net"] [uri "/.git/config"] [unique_id "atHx8lziME0yRUHQEnvzJQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
masterguru
2026-10-16 09:37:16
(5 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack