🇫🇷
masterguru
2026-09-02 13:21:37
(16 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇬🇧
consul.to
2026-09-02 11:37:06
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-09-02 10:20:05
(3 hours ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01,wa02]
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 09:28:39
(4 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:949110) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 05:28:31.929877 2026] [security2:error] [pid 17973:tid 17973] [client 35.246.138.114:52378] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.submissions.freedrm.org"] [uri "/.git/config"] [unique_id "apfsPyzlGjYoJlmlyJQwFgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 09:03:15
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 05:03:09.833280 2026] [security2:error] [pid 24076:tid 24076] [client 35.246.138.114:40252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sublimationconsultants.ipostsocialmedia.com"] [uri "/.git/config"] [unique_id "apfmTcRrwwkZP-ary0VqJAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-02 09:01:34
(4 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
2026-09-02 08:17:03
(5 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.s ...
show more
Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.remote HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 06:23:58
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:23:53.317589 2026] [security2:error] [pid 15876:tid 15876] [client 35.246.138.114:48232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.styxfreeworld.grayhost.net"] [uri "/.git/config"] [unique_id "apfA-cqZSz5_PGq8GSbDNQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Stylottica
2026-09-02 06:04:49
(7 hours ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
🇮🇹
paoloartone
2026-09-02 05:00:29
(8 hours ago)
Reverse proxy TCO: 247 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 01/09/202 ...
show more
Reverse proxy TCO: 247 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 01/09/2026.
show less
Web App Attack
Hacking
Port Scan
🇺🇸
TPI-Abuse
2026-09-02 03:54:44
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:54:37.083681 2026] [security2:error] [pid 11939:tid 11939] [client 35.246.138.114:51882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stygianpassage.com.greighhouse.com"] [uri "/.git/config"] [unique_id "aped_fT0ethOPe_NdQCXawAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-02 03:22:51
(10 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-02 03:22:01
(10 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 02:47:45
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.246.138.114 (114.138.246.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:47:38.210549 2026] [security2:error] [pid 24512:tid 24530] [client 35.246.138.114:60010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stupidlikeyou.ceol.us"] [uri "/.git/config"] [unique_id "apeOSiJLgOw3a-jzIvzqPwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-09-02 02:22:56
(11 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup, server_status, wp_admin. Observed by 1 sensor(s); 213 hits.
show less
Brute-Force
Web App Attack