2026-08-23 08:06:52
(4 days ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-22 22:01:37
(4 days ago)
Auto-ban: >3000 req/min op 2026-08-22
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-22 20:57:54
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.185.135.112 (112.135.185.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.135.112 (112.135.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:57:50.781686 2026] [security2:error] [pid 18860:tid 18860] [client 35.185.135.112:52990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kmichaelbabcock.com.vanemby.com"] [uri "/.git/config"] [unique_id "aooNTjZ0nt9ACsGUunFWZAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-08-22 20:54:31
(4 days ago)
-.nl:443 35.185.135.112 - - [22/Aug/2026:22:54:30 +0200] -.nl "GET /.git/config HTTP/1.1" 403 6375 " ...
show more
-.nl:443 35.185.135.112 - - [22/Aug/2026:22:54:30 +0200] -.nl "GET /.git/config HTTP/1.1" 403 6375 "-" "-"
show less
Bad Web Bot
🇳🇿
Antinson
2026-08-22 20:49:43
(4 days ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-22 20:41:18
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.185.135.112 (112.135.185.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.135.112 (112.135.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:41:10.102990 2026] [security2:error] [pid 20852:tid 20852] [client 35.185.135.112:55622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bhempower.com"] [uri "/.git/config"] [unique_id "aooJZhK_NyOK0v8Web4y3QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-08-22 20:27:15
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 20:20:41
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.185.135.112 (112.135.185.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.135.112 (112.135.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 16:20:36.216548 2026] [security2:error] [pid 27906:tid 27906] [client 35.185.135.112:36328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zenithxen.com"] [uri "/.git/config"] [unique_id "aooElLTXGc5EI0QLISjNcwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-22 20:08:50
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇷
conseilgouz
2026-08-22 20:07:29
(4 days ago)
loe-17 : Block hidden directories=>/.git/config(/)
Hacking
🇺🇸
TPI-Abuse
2026-08-22 19:58:27
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.185.135.112 (112.135.185.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.135.112 (112.135.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 15:58:21.363017 2026] [security2:error] [pid 27966:tid 27966] [client 35.185.135.112:55632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drgtek.com"] [uri "/.git/config"] [unique_id "aon_XenSwBH2HXOyPWJktgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
lnklnx
2026-08-22 19:51:04
(4 days ago)
nextcloud.lnklnx.com:443 35.185.135.112 - - [22/Aug/2026:14:51:02 -0500] "GET /.git/config HTTP/1.1" ...
show more
nextcloud.lnklnx.com:443 35.185.135.112 - - [22/Aug/2026:14:51:02 -0500] "GET /.git/config HTTP/1.1" 404 10664 "-" "-"
...
show less
Web App Attack
🇩🇪
ghostwarriors
2026-08-22 19:50:07
(4 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-08-22 19:48:40
(4 days ago)
35.185.135.112 - - [22/Aug/2026:21:48:35 +0200] "GET /.git/config HTTP/1.1" 403 4506 "-" "-"
35.185. ...
show more
35.185.135.112 - - [22/Aug/2026:21:48:35 +0200] "GET /.git/config HTTP/1.1" 403 4506 "-" "-"
35.185.135.112 - - [22/Aug/2026:21:48:36 +0200] "GET /.git/config HTTP/1.1" 403 4510 "-" "-"
35.185.135.112 - - [22/Aug/2026:21:48:36 +0200] "GET /.git/config HTTP/1.1" 403 4519 "-" "-"
show less
Web App Attack
Hacking
🇩🇪
big-cloud.nl
2026-08-22 19:25:32
(4 days ago)
Try to access /.git/config
Web App Attack