๐ณ๐ฑ
homeshowdomain.nl
2026-06-26 22:01:11
(3 weeks ago)
Auto-ban: >3000 req/min op 2026-06-26
Web App Attack
SSH
Hacking
๐ฌ๐ง
consul.to
2026-06-26 01:47:56
(4 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
masterguru
2026-06-26 01:47:39
(4 weeks ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐ง๐ช
cmbplf
2026-06-26 01:38:04
(4 weeks ago)
797 requests with url.path */.git/config
Brute-Force
Bad Web Bot
๐ฉ๐ช
Live Home Cams
2026-06-26 01:12:28
(4 weeks ago)
WebApp brute force attack detected. Multiple file scanning attempts from 35.194.191.34. Detected by ...
show more
WebApp brute force attack detected. Multiple file scanning attempts from 35.194.191.34. Detected by fail2ban.
show less
Web App Attack
Brute-Force
๐ฒ๐พ
Rizzy
2026-06-26 00:50:03
(4 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-06-26 00:46:43
(4 weeks ago)
35.194.191.34 - - [26/Jun/2026:02:46:42 +0200] "GET /backend/.git/config HTTP/1.1" 403 183 "-" "Mozi ...
show more
35.194.191.34 - - [26/Jun/2026:02:46:42 +0200] "GET /backend/.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Linux; Android 8.1.0; SM-G610M) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
35.194.191.34 - - [26/Jun/2026:02:46:42 +0200] "GET /.git/config HTTP/1.1" 403 124 "-" "W3C_Validator/1.305.2.12 libwww-perl/5.64"
35.194.191.34 - - [26/Jun/2026:02:46:42 +0200] "GET /api/.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Linux; Android 9; SM-N950F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
35.194.191.34 - - [26/Jun/2026:02:46:42 +0200] "GET /frontend/.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Linux; Android 9; SM-N950U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36"
35.194.191.34 - - [26/Jun/2026:02:46:42 +0200] "GET /v1/.git/config HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Konqueror/4.2; Linux) KHTML/4.2.4 (like Gecko) Slackware/13.0"
35.194.191.34 - - [26/Jun/2026:02
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
itsnixk
2026-06-25 23:09:16
(4 weeks ago)
(mod_security) mod_security (id:930130) triggered by 35.194.191.34 (TW/Taiwan/34.191.194.35.bc.googl ...
show more
(mod_security) mod_security (id:930130) triggered by 35.194.191.34 (TW/Taiwan/34.191.194.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 19:09:11.776327 2026] [security2:error] [pid 872213:tid 872324] [client 35.194.191.34:51748] ModSecurity: Access denied with code 406 (phase 1). Matched phrase ".git/" at REQUEST_FILENAME. [file "/etc/modsecurity.d/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "150"] [id "930130"] [msg "Restricted File Access Attempt"] [redacted] [severity "CRITICAL"] [ver "OWASP_CRS/4.26.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/ATTACK-LFI"] [tag "capec/1000/255/153/126"] [redacted] [uri "/.git/config"] [unique_id "aj21F0UKx3XrFXpJaXWy-wAAAFw"]
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-06-25 22:39:53
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.194.191.34 (34.191.194.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.191.34 (34.191.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 18:39:46.184081 2026] [security2:error] [pid 17199:tid 17199] [client 35.194.191.34:46026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mitchellamazing.com"] [uri "/build/.git/config"] [unique_id "aj2uMvr5NL-uo-uqDKDvkAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
TaKeN
2026-06-25 17:04:10
(4 weeks ago)
Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ...
show more
Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 2 matching blocked event(s) between 2026-06-25T19:04:10+02:00 and 2026-06-25T19:04:10+02:00. Sample requested paths: /v1/.git/config, /dist/.git/config.
show less
Web App Attack
Hacking
๐ณ๐ฑ
sernate
2026-06-25 16:08:16
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.194.191.34 (TW/Taiwan/34.191.194.35.bc.googl ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.191.34 (TW/Taiwan/34.191.194.35.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC
show less
Brute-Force
๐ง๐พ
lns.bz
2026-06-25 15:38:40
(4 weeks ago)
Too many 404 requests [BY]
Web App Attack
๐บ๐ธ
kosada.com
2026-06-25 14:14:45
(4 weeks ago)
Web vulnerability probing: /app/.git/config (bogus vhost/SNI)
Web App Attack
๐ฎ๐น
Inartis
2026-06-25 14:01:07
(4 weeks ago)
35.194.191.34 - - [25/Jun/2026:16:01:06 +0200] "GET /.git/config HTTP/1.1" 404 3652 "-" "Mozilla/5.0 ...
show more
35.194.191.34 - - [25/Jun/2026:16:01:06 +0200] "GET /.git/config HTTP/1.1" 404 3652 "-" "Mozilla/5.0 (Linux; Android 9; SM-G950F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-06-25 13:03:59
(4 weeks ago)
Multiple WAF Violations
Web App Attack