๐ต๐ฑ
Budyn
2026-10-22 09:04:56
(2 minutes ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: backup.dont-eat-the-pudding.top | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"144.172.118.107","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e7565ef8895d95-DFW","Connection":"Keep-Alive","Referer":"http:\/\/backup.dont-eat-the-pudding.top\/.git\/config","Accept-Encoding":"gzip, br","X-Forwarded-For":"144.172.118.107"}
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
librebit
2026-10-22 08:51:01
(16 minutes ago)
Brute force
Brute-Force
๐ฎ๐น
Inartis
2026-10-22 07:49:57
(1 hour ago)
144.172.118.107 - - [22/Oct/2026:09:49:56 +0200] "GET /.git/config HTTP/1.1" 301 450 "-" "Mozilla/5. ...
show more
144.172.118.107 - - [22/Oct/2026:09:49:56 +0200] "GET /.git/config HTTP/1.1" 301 450 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-22 07:27:08
(1 hour ago)
[redacted] 144.172.118.107 - - [22/Oct/2026:08:27:07 +0100] "GET /.git/config HTTP/1.1" 302 6761 0/5 ...
show more
[redacted] 144.172.118.107 - - [22/Oct/2026:08:27:07 +0100] "GET /.git/config HTTP/1.1" 302 6761 0/55403 "http://[redacted]/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" 443 [redacted] 144.172.118.107 - - [22/Oct/2026:08:27:07 +0100] "GET / HTTP/1.1" 200 13590 0/70481 "https://[redacted]/.git/config" "Mozilla/5.0 (X11; Linux x86_64)" 443
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-22 07:02:33
(2 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dev.goblinpot.online | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"144.172.118.107","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4e6a31b599f2d45-DFW","Connection":"Keep-Alive","Referer":"http:\/\/dev.goblinpot.online\/.git\/config","Accept-Encoding":"gzip, br","X-Forwarded-For":"144.172.118.107"}
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
foxxelabs
2026-10-22 06:57:49
(2 hours ago)
Automated report from FoxxeLabs Sentinel. Path probed: /.git/config | Project: anseo | Reason(s): Kn ...
show more
Automated report from FoxxeLabs Sentinel. Path probed: /.git/config | Project: anseo | Reason(s): Known exploit path: /.git/config; AbuseIPDB score: 100/100 | User-Agent: Mozilla/5.0 (X11; Linux x86_64)
show less
Web App Attack
๐ฉ๐ช
gadix
2026-10-22 06:39:21
(2 hours ago)
[22/Oct/2026:07:38:24.048137 +0200] atmhUC2iT0QvBmywuW4ukgAAAAg 144.172.118.107 48768 127.0.0.1 7081 ...
show more
[22/Oct/2026:07:38:24.048137 +0200] atmhUC2iT0QvBmywuW4ukgAAAAg 144.172.118.107 48768 127.0.0.1 7081
[22/Oct/2026:07:59:09.636158 +0200] atmmLY9SOTKCttvTFx-zaQAAAAY 144.172.118.107 53714 127.0.0.1 7081
[22/Oct/2026:08:39:19.110017 +0200] atmvl3u9hpsDfbl2af9afQAAAAQ 144.172.118.107 51494 127.0.0.1 7081
...
show less
Web App Attack
๐ฌ๐ง
pinguin
2026-10-22 06:37:35
(2 hours ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (X11; Linux x86_64)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐จ๐ฆ
AEITS
2026-10-22 06:21:04
(2 hours ago)
Fail2Ban www
Bad Web Bot
Web App Attack
Anonymous
2026-10-22 06:19:10
(2 hours ago)
Scan for .git Files at 2026-10-22T06:19:10+00:00
Web App Attack
๐ฉ๐ช
McClay
2026-10-22 06:08:04
(2 hours ago)
Illegal access attempt:144.172.118.107 - - [22/Oct/2026:08:08:03 +0200] "GET /.git/config HTTP/1.1" ...
show more
Illegal access attempt:144.172.118.107 - - [22/Oct/2026:08:08:03 +0200] "GET /.git/config HTTP/1.1" 301 617 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 05:51:08
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 144.172.118.107 (107.118.172.144.static.cloudzy ...
show more
(mod_security) mod_security (id:210492) triggered by 144.172.118.107 (107.118.172.144.static.cloudzy.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 01:51:03.227026 2026] [security2:error] [pid 11255:tid 11255] [client 144.172.118.107:46060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ornirwellness.com"] [uri "/.git/config"] [unique_id "atmkR0VGmhbMjfxpdmQYnwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Rip
2026-10-22 05:37:12
(3 hours ago)
Restricted File Access Attempts
Port Scan
Web App Attack
๐ฒ๐ฝ
mcabanas
2026-10-22 05:33:02
(3 hours ago)
[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Ta ...
show more
[ARKAND Sentinel Security Engine] Hostile activity detected & blocked at Linux kernel (iptables). Target: IP Directo. Reason: Acceso directo a IP no autorizado (Escaneo perimetral sin FQDN) [RBL: Barracuda Central]. User-Agent: Mozilla/5.0 (X11; Linux x86_64). TLS JA3: 9b7dcdf3f997f1fb7b4409c94cb7ef36. Path: GET /.git/config HTTP/1.1.
show less
Port Scan
Hacking
Web App Attack
๐ฉ๐ช
hackthetime
2026-10-22 05:32:51
(3 hours ago)
Tried to access .git/config file (`/.git/config`)
Web App Attack