๐ซ๐ฎ
YF
2026-06-26 03:00:50
(3 days ago)
Git config exposure probe
Web App Attack
๐ช๐ธ
pipeline.es
2026-06-26 01:22:00
(3 days ago)
Web scanning / probing for vulnerable paths | URL: /wordpress/.git/config | Evidence: star.orbishote ...
show more
Web scanning / probing for vulnerable paths | URL: /wordpress/.git/config | Evidence: star.orbishoteles.com 34.142.243.246 - - [26/Jun/2026:03:21:43 +0200] \"GET /wordpress/.git/config HTTP/1.1\" 404 4137 \"-\" \"Opera/9.80 (X11; FreeBSD 8.1-RELEASE i386; Edition Next) Presto/2.12.388 Version/12.10\" GEOIP_COUNTRY_CODE=SG | ASN: GOOGLE-CLOUD-PLATFORM | Country: SG
show less
Port Scan
Web App Attack
๐ซ๐ท
masterguru
2026-06-26 01:16:29
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐บ๐ธ
Mundo Bueno
2026-06-26 00:15:07
(3 days ago)
[ISILIA Protection v2.1] Tentative d'accรจs: /www/.git/config | Pays: SG | UA: Mozilla/5.0 (Macintosh ...
show more
[ISILIA Protection v2.1] Tentative d'accรจs: /www/.git/config | Pays: SG | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3
show less
Hacking
Web App Attack
๐ซ๐ฎ
as211431.net
2026-06-25 23:46:58
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /code/.git/config
UA: Mozilla/5.0 (Linux; Android 9; MI 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
raph
2026-06-25 23:43:53
(3 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-06-25 23:32:40
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-25 23:13:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.142.243.246 (246.243.142.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.243.246 (246.243.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:13:50.877232 2026] [security2:error] [pid 23264:tid 23264] [client 34.142.243.246:35858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.blue-attitude.net"] [uri "/www/.git/config"] [unique_id "aj22Lj2hnvg-cMR2Uhf4BgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-06-25 22:49:41
(3 days ago)
15 attempts against mh-modsecurity-ban on hostbillst3
Brute-Force
Web App Attack
๐ง๐พ
lns.bz
2026-06-25 17:22:07
(3 days ago)
Too many 404 requests [BY]
Web App Attack
๐ฆ๐น
mindrider
2026-06-25 17:06:21
(3 days ago)
34.142.243.246 - - [25/Jun/2026:19:06:19 +0200] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03\x1A\xD ...
show more
34.142.243.246 - - [25/Jun/2026:19:06:19 +0200] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03\x1A\xDF\xABS\x9Ed\xD6\xF7\xB5\x04\xC6\x95\x17<\xF7W\xA0~\xBET\x8C\x7F\xDE\xC1\xD85\x16\xCB\xA9\x07\xDF? \x11*\xEDQ\x18\xFB\xE4\x83\xF6\x85u\x88A\x02\xC7\x00\xAE\xA1@" 400 150 "-" "-" "-"
34.142.243.246 - - [25/Jun/2026:19:06:19 +0200] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x030\xB7\xC8\x00bT\x1D\xE1\x1A\xF3z-`J\xF5\x5C\xEE\x86q{l\x1Fh\xD6\xB0\x14u\xA7T\x98a\xFC \x8D\x90\x1D\x8D\xA8\x02\xF0'\x92\xEB\xAE\xA6\x95\x00vI\x99D\xBE\xED&\xA4\x12\x90\x8C\x80\x07?\xB4\xBC\x9C\x16\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-" "-"
34.142.243.246 - - [25/Jun/2026:19:06:19 +0200] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03\xCEN\xCCy\xAD-\xD6\xD61\xF7E\xB5qW\xC6\xB1\x84\xA2\xA8\x03\xC0\xC7R\xF2\x17\x16\x94DP\x87.\x09 N7\xF53\xA5r#\x83'\xB8c\x1D\x15\xEAT\xBD\x93\x15\x87\xF8\xA1H#\xF6\xCE\x07\x1CE\xDDj\xABv\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 1
...
show less
Web App Attack
Anonymous
2026-06-25 17:00:43
(3 days ago)
34.142.243.246 - - [25/Jun/2026:19:00:42 +0200] "GET /.git/config HTTP/1.1" 400 650 "-" "Mozilla/5.0 ...
show more
34.142.243.246 - - [25/Jun/2026:19:00:42 +0200] "GET /.git/config HTTP/1.1" 400 650 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36"
34.142.243.246 - - [25/Jun/2026:19:00:42 +0200] "GET /app/.git/config HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Linux; Android 9; Mi MIX 2S) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.142.243.246 - - [25/Jun/2026:19:00:42 +0200] "GET /src/.git/config HTTP/1.1" 400 650 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36"
34.142.243.246 - - [25/Jun/2026:19:00:42 +0200] "GET /backend/.git/config HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2924.87 YaBrowser/17.3.0.1785 Yowser/2.5 Safari/537.36"
34.142.243.246 - - [25/Jun/2026:19:00:42 +0200] "GET /frontend/.git/config HTTP/1.1" 400 248 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/extern
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-06-25 15:41:26
(3 days ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-06-25 11:35:10
(3 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host