2026-08-26 19:46:39
(22 minutes ago)
35.194.201.193 - - [26/Aug/2026:19:46:39 +0000] "GET /.git/config HTTP/1.1" 404 4306 "-" "Mozilla/5. ...
show more
35.194.201.193 - - [26/Aug/2026:19:46:39 +0000] "GET /.git/config HTTP/1.1" 404 4306 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-08-26 19:31:43
(37 minutes ago)
GET /.git/config (Tarpitted for 2m10s, wasted 7.73kB)
Web App Attack
2026-08-26 19:25:25
(44 minutes ago)
35.194.201.193 - - [26/Aug/2026:21:25:25 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ...
show more
35.194.201.193 - - [26/Aug/2026:21:25:25 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Web App Attack
🇩🇪
macrob
2026-08-26 19:24:34
(44 minutes ago)
2026/08/26 19:24:32 [error] 2096801#2096801: *523883917 access forbidden by rule, client: 35.194.201 ...
show more
2026/08/26 19:24:32 [error] 2096801#2096801: *523883917 access forbidden by rule, client: 35.194.201.193, server: binixo.es, request: "GET /.git/config HTTP/1.1", host: "binixo.es"
2026/08/26 19:24:32 [error] 2096799#2096799: *523740988 access forbidden by rule, client: 35.194.201.193, server: binixo.pl, request: "GET /.git/config HTTP/2.0", host: "binixo.pl"
2026/08/26 19:24:32 [error] 2096802#2096802: *523881229 access forbidden by rule, client: 35.194.201.193, server: binixo.com, request: "GET /.git/config HTTP/2.0", host: "binixo.com"
...
show less
Web App Attack
2026-08-26 19:23:30
(45 minutes ago)
35.194.201.193 arduino.ua [26/Aug/2026:22:23:30 +0300] "GET /.git/config HTTP/1.1" 403 146 "-" "Mozi ...
show more
35.194.201.193 arduino.ua [26/Aug/2026:22:23:30 +0300] "GET /.git/config HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 0.000 2369
...
show less
Hacking
Web App Attack
🇫🇮
as211431.net
2026-08-26 19:21:57
(47 minutes ago)
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
ghostwarriors
2026-08-26 19:20:19
(49 minutes ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-26 19:17:51
(51 minutes ago)
Web vulnerability probing: /.git/config
Web App Attack
🇫🇷
pm33
2026-08-26 19:06:39
(1 hour ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 19:00:12
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.194.201.193 (193.201.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.201.193 (193.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 15:00:08.884236 2026] [security2:error] [pid 4542:tid 4542] [client 35.194.201.193:62836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bikiniadvice.com"] [uri "/.git/config"] [unique_id "ao83uHZTlaPac7_z4N3O4QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
pinguin
2026-08-26 18:56:46
(1 hour ago)
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET meth ...
show more
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
Stara
2026-08-26 18:56:02
(1 hour ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ...
show more
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
show less
Hacking
Brute-Force
Web App Attack
🇩🇪
Bedios GmbH
2026-08-26 18:09:48
(1 hour ago)
Login credentials theft attempt
Hacking
🇺🇸
TPI-Abuse
2026-08-26 18:08:23
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.201.193 (193.201.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.201.193 (193.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 14:08:19.613030 2026] [security2:error] [pid 11764:tid 11764] [client 35.194.201.193:22722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brandsmedia.com"] [uri "/.git/config"] [unique_id "ao8rkwVKH-VADnNfgwH31wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-26 18:05:46
(2 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack