๐ฎ๐ณ
evicky2002
2026-07-24 06:00:00
(14 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ฒ๐ฝ
octageeks.com
2026-07-24 04:29:28
(15 hours ago)
Wordpress malicious attack:[octablocked]
Web App Attack
๐บ๐ธ
jkhorvath.com
2026-07-23 22:49:58
(21 hours ago)
Request for URL /.git/config
Phishing
Brute-Force
Web App Attack
Anonymous
2026-07-23 22:27:53
(21 hours ago)
Web App Attack
๐ซ๐ท
Little Iguana
2026-07-23 22:25:48
(21 hours ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-07-23 21:59:15
(22 hours ago)
Auto-ban: >3000 req/min op 2026-07-23
Web App Attack
SSH
Hacking
๐ณ๐ด
jad-abuse
2026-07-23 21:48:33
(22 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
show less
Web App Attack
๐ฎ๐ฉ
Burayot
2026-07-23 21:33:21
(22 hours ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.185.4.255 (US/United States/255. ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.185.4.255 (US/United States/255.4.185.35.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-23 21:25:20
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.185.4.255 (255.4.185.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.4.255 (255.4.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 17:25:14.317139 2026] [security2:error] [pid 3132517:tid 3132517] [client 35.185.4.255:44002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.allworld.csennews.com"] [uri "/.git/config"] [unique_id "amKGutwRJVcmi9dhLI_GjwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-23 20:55:38
(23 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.185.4.255 (255.4.185.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 35.185.4.255 (255.4.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 16:55:33.927188 2026] [security2:error] [pid 3557782:tid 3557782] [client 35.185.4.255:44608] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.alliancegroupga.com"] [uri "/.git/config"] [unique_id "amJ_xZy7QP9J6JPWjN9GSQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-23 20:23:44
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.185.4.255 (255.4.185.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.4.255 (255.4.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 16:23:36.279195 2026] [security2:error] [pid 2891144:tid 2891156] [client 35.185.4.255:50548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alisalholdings.oconnorpest.biz"] [uri "/.git/config"] [unique_id "amJ4SIQKOjE3o95Cg0UkhwAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-23 20:14:19
(23 hours ago)
35.185.4.255 - - [23/Jul/2026:20:14:17 +0000] "GET /.git/config HTTP/1.1" 404 3030 "-" "-"
...
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-07-23 20:13:44
(23 hours ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-23 20:06:22
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.185.4.255 (255.4.185.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.185.4.255 (255.4.185.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 16:06:14.125455 2026] [security2:error] [pid 332769:tid 332769] [client 35.185.4.255:53208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alhill.com"] [uri "/.git/config"] [unique_id "amJ0Nvomxy1LNUgFuZRakAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-07-23 20:01:09
(1 day ago)
[redacted] 35.185.4.255 - - [23/Jul/2026:20:57:26 +0100] "GET /.git/config HTTP/1.1" 302 6783 0/6445 ...
show more
[redacted] 35.185.4.255 - - [23/Jul/2026:20:57:26 +0100] "GET /.git/config HTTP/1.1" 302 6783 0/64455 "-" "-" [redacted] 35.185.4.255 - - [23/Jul/2026:21:01:08 +0100] "GET /.git/config HTTP/1.1" 302 6773 0/76911 "-" "-"
show less
Bad Web Bot
Web App Attack