๐ฌ๐ง
consul.to
2026-09-15 20:35:40
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-15 20:33:34
(2 weeks ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 20:17:30
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:17:26.461054 2026] [security2:error] [pid 11491:tid 11491] [client 34.22.49.55:38476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zabyte.net"] [uri "/.git/config"] [unique_id "aqmn1ti90yRGY0AgHwfzwgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-09-15 20:15:38
(2 weeks ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 17:43:34
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:43:26.994873 2026] [security2:error] [pid 1331834:tid 1331834] [client 34.22.49.55:46972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mytapt.com"] [uri "/.git/config"] [unique_id "aqmDvsN37aUGkMRwcRNEQgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 17:27:25
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:27:16.969698 2026] [security2:error] [pid 18694:tid 18694] [client 34.22.49.55:60640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "my-spec.com"] [uri "/.git/config"] [unique_id "aql_9Iib8dEkRHj4toVWXAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-09-15 17:27:23
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: myspeed.budyn.wtf | URI: /.git/config | UA: Unknown User-Agent | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 17:09:21
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:09:17.789875 2026] [security2:error] [pid 6935:tid 7047] [client 34.22.49.55:35936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "myrasnyder.com"] [uri "/.git/config"] [unique_id "aql7vfO8f5wj5GM_SrPw5wAAAc4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-15 17:05:22
(2 weeks ago)
Abuse Detected (9)
Brute-Force
Web App Attack
Anonymous
2026-09-15 17:00:08
(2 weeks ago)
Web application attack detected.
Web App Attack
๐ฌ๐ง
kie
2026-09-15 16:58:42
(2 weeks ago)
15-09-2026:16:57:38UTC [Nginx Web Server] Suspicious web request: path:/.git (1 request(s)).
Bad Web Bot
Web App Attack
๐ง๐ช
voormedia
2026-09-15 16:52:15
(2 weeks ago)
Accessed trap at '/.git/config'
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 16:44:17
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 12:44:13.653671 2026] [security2:error] [pid 32715:tid 32715] [client 34.22.49.55:47040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mympizzas.com.mx"] [uri "/.git/config"] [unique_id "aql13bdbbrZnioRrCKQTUAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-15 16:30:26
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
Anonymous
2026-09-15 16:24:25
(2 weeks ago)
[ns31.kdns.gr] httpd-config-scan: sites=www.mykonoscastlehouse.com; logs=/var/log/httpd/domains/myko ...
show more
[ns31.kdns.gr] httpd-config-scan: sites=www.mykonoscastlehouse.com; logs=/var/log/httpd/domains/mykonoscastlehouse.com.log; samples=/.git/config
show less
Hacking
Web App Attack