๐ฎ๐ณ
evicky2002
2026-07-31 06:00:00
(14 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐บ๐ธ
SodaAudit.app
2026-07-31 02:24:37
(18 hours ago)
[sodaaudit.app] Web app attack. Timestamp: 2026-07-30T23:12:45.000Z. 1 probe events, 1 distinct path ...
show more
[sodaaudit.app] Web app attack. Timestamp: 2026-07-30T23:12:45.000Z. 1 probe events, 1 distinct path(s). Paths (payload): /.git/config
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-30 23:21:59
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 19:21:53.295909 2026] [security2:error] [pid 1461417:tid 1461417] [client 136.109.237.179:39352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sof.aarce.me"] [uri "/.git/config"] [unique_id "amvckV5cP1ESl1hD96hdrQAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-07-30 23:00:42
(21 hours ago)
136.109.237.179 - - [31/Jul/2026:02:00:38 +0300] "GET /.git/config HTTP/1.1" 404 4723 "-" "-"
136.10 ...
show more
136.109.237.179 - - [31/Jul/2026:02:00:38 +0300] "GET /.git/config HTTP/1.1" 404 4723 "-" "-"
136.109.237.179 - - [31/Jul/2026:02:00:40 +0300] "GET /.git/config HTTP/1.1" 404 4723 "-" "-"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-30 22:54:13
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 18:54:07.202020 2026] [security2:error] [pid 2057216:tid 2057216] [client 136.109.237.179:58048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/.git/config"] [unique_id "amvWDyBBdVr_CZ8ndNzemwAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
1gz
2026-07-30 22:49:41
(22 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET m ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ซ๐ท
Eldeberen
2026-07-30 22:48:18
(22 hours ago)
Vulnerability scan attempt through HTTP protocol
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-30 22:21:55
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 18:21:49.442047 2026] [security2:error] [pid 2698312:tid 2698312] [client 136.109.237.179:58026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sobhrach.com"] [uri "/.git/config"] [unique_id "amvOfdXd_hda8ZmyM5UGpgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-07-30 21:59:38
(22 hours ago)
Auto-ban: >3000 req/min op 2026-07-30
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-30 21:53:49
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 17:53:42.810748 2026] [security2:error] [pid 1763714:tid 1763714] [client 136.109.237.179:50430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "snowfection.com"] [uri "/.git/config"] [unique_id "amvH5rwfGcF5r39a9CMx6AAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ด
jad-abuse
2026-07-30 21:42:20
(23 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 2 sensor(s); 2 hits.
show less
Web App Attack
๐ต๐ฑ
sefinek.net
2026-07-30 21:36:22
(23 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.git/config | UA: Empty string โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-07-30 21:35:51
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.237.179 (179.237.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 17:35:46.418103 2026] [security2:error] [pid 16971:tid 16971] [client 136.109.237.179:47456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "snickerifabrik.com"] [uri "/.git/config"] [unique_id "amvDss5BrW3K2D9kr9gSFwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
sid3windr
2026-07-30 21:21:05
(23 hours ago)
GET /.git/config (Tarpitted for , wasted 120B)
Web App Attack
๐บ๐ธ
Rip
2026-07-30 21:02:40
(23 hours ago)
Restricted File Access Attempts
Port Scan
Web App Attack