Anonymous
2026-09-11 10:52:31
(12 hours ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
🇬🇧
openstrike.co.uk
2026-09-11 05:13:46
(18 hours ago)
5 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇨🇿
akac
2026-09-11 05:02:03
(18 hours ago)
Web vulnerability scanning: HTTP/1.1 GET /.git/config
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Lea
2026-09-11 01:46:01
(21 hours ago)
Malicious web probe detected on bearstool.com: 34.106.237.106 - - [10/Sep/2026:21:46:00 -0400] "GET ...
show more
Malicious web probe detected on bearstool.com: 34.106.237.106 - - [10/Sep/2026:21:46:00 -0400] "GET /.git/config HTTP/2.0" 404 207 "" "-"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 01:44:53
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.237.106 (106.237.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.237.106 (106.237.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 21:44:45.526329 2026] [security2:error] [pid 16645:tid 16645] [client 34.106.237.106:60068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "verification.pazzidipizza.com"] [uri "/.git/config"] [unique_id "aqNdDWK1QWpIiuASytXCKAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
billfor
2026-09-11 01:41:34
(21 hours ago)
34.106.237.106 - - [10/Sep/2026:21:41:30 -0400] "GET /.git/config HTTP/1.1" 404 0 "-" "-"
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 01:15:11
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.237.106 (106.237.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.237.106 (106.237.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 21:15:04.483317 2026] [security2:error] [pid 10808:tid 10808] [client 34.106.237.106:44798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vendor21.com"] [uri "/.git/config"] [unique_id "aqNWGLbPqhgzszJUoX5l4gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-11 00:52:52
(22 hours ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
René Hickersberger
2026-09-11 00:40:43
(22 hours ago)
malicious bot detected: violations="hit-honeypot"; user_agent=""
Web App Attack
Anonymous
2026-09-11 00:37:33
(22 hours ago)
34.106.237.106 - - [10/Sep/2026:21:37:32 -0300] "GET /.git/config HTTP/1.1" 500 170 "-" "-"
...
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-09-11 00:19:27
(23 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.106.237.106 (106.237.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:949110) triggered by 34.106.237.106 (106.237.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 20:19:20.650994 2026] [security2:error] [pid 12276:tid 12276] [client 34.106.237.106:40236] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "vdeweese.com"] [uri "/.git/config"] [unique_id "aqNJCHpRWKPIw3ofIAZBLgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Bay13
2026-09-10 23:56:18
(23 hours ago)
CrowdSec:custom/http-sensitive-files
Web App Attack
🇺🇸
k3rn3l109
2026-09-10 23:45:27
(23 hours ago)
Sentinel honeypot: cf-waf-auto hit on vault.emby-media.com
Hacking
🇳🇱
MM-bot
2026-09-10 23:19:49
(23 hours ago)
URL-probe: HTTP/1.1 GET request on /.git/config (2026-09-11 01:19:49 UTC+2)
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-10 23:08:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.106.237.106 (106.237.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.237.106 (106.237.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 19:08:13.429951 2026] [security2:error] [pid 6079:tid 6079] [client 34.106.237.106:48252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vandromme.net"] [uri "/.git/config"] [unique_id "aqM4Xfo7_bN5U3oN9AqEaQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack