Anonymous
2026-08-24 23:40:41
(22 hours ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
๐ซ๐ฎ
payincog
2026-08-24 16:00:35
(1 day ago)
Date: Aug 24 18:25:25 2026 EAT | Reported IP: 35.194.149.35 mod_security | id: 930130 949110 | TW/pa ...
show more
Date: Aug 24 18:25:25 2026 EAT | Reported IP: 35.194.149.35 mod_security | id: 930130 949110 | TW/pay.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | Logs: ; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 5)
show less
SQL Injection
Brute-Force
Bad Web Bot
๐ซ๐ท
ELYAZ
2026-08-24 15:34:58
(1 day ago)
(y3) Failed access -byebye- from 35.194.149.35 (TW/Taiwan/35.149.194.35.bc.googleusercontent.com): ...
show more
(y3) Failed access -byebye- from 35.194.149.35 (TW/Taiwan/35.149.194.35.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
๐บ๐ธ
CBJ
2026-08-24 15:34:51
(1 day ago)
fail2ban: apache-filepath-recon
...
Web App Attack
Anonymous
2026-08-24 15:30:13
(1 day ago)
[server.techsupportltd.gr] httpd-config-scan: sites=www.athanasopoulos.tax; logs=/var/log/httpd/doma ...
show more
[server.techsupportltd.gr] httpd-config-scan: sites=www.athanasopoulos.tax; logs=/var/log/httpd/domains/athanasopoulos.tax.log; samples=/.git/config
show less
Hacking
Web App Attack
๐ต๐ฑ
Budyn
2026-08-24 15:29:11
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.wtf | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-08-24 15:28:43
(1 day ago)
35.194.149.35 - - [24/Aug/2026:17:28:43 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 ...
show more
35.194.149.35 - - [24/Aug/2026:17:28:43 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-08-24 15:25:58
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ธ๐ช
EmK530
2026-08-24 15:24:38
(1 day ago)
URL flagged by RegEx: /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 15:24:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.194.149.35 (35.149.194.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.149.35 (35.149.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 11:24:07.973936 2026] [security2:error] [pid 4112656:tid 4112779] [client 35.194.149.35:16504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nopictures.productions"] [uri "/.git/config"] [unique_id "aoxiF7pbcnNyy8Byb3SV9QAAAVY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-08-24 14:56:42
(1 day ago)
[Tue Aug 25 00:56:41.523275 2026] [security2:error] [pid 123072] [client 35.194.149.35:24616] [clien ...
show more
[Tue Aug 25 00:56:41.523275 2026] [security2:error] [pid 123072] [client 35.194.149.35:24616] [client 35.194.149.35] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.info"] [uri "/.git/config"] [unique_id "aoxbqbWB86I8dvAZCQZbrgAAAAU"]
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 14:53:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.194.149.35 (35.149.194.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.149.35 (35.149.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 10:53:22.191698 2026] [security2:error] [pid 7111:tid 7111] [client 35.194.149.35:7538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "londongroup.info"] [uri "/.git/config"] [unique_id "aoxa4qmq6W3RbmsZB_lDpwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 13:02:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.194.149.35 (35.149.194.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.149.35 (35.149.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 09:02:43.864289 2026] [security2:error] [pid 4204:tid 4220] [client 35.194.149.35:25438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bronnimann.org"] [uri "/.git/config"] [unique_id "aoxA88CImr_KvAhFy_qbJgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-24 12:42:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.194.149.35 (35.149.194.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.149.35 (35.149.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 08:42:41.672381 2026] [security2:error] [pid 25862:tid 25862] [client 35.194.149.35:40482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brauerfamily.org"] [uri "/.git/config"] [unique_id "aow8QQ2EIqlIeiivZKFY3QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack