๐บ๐ธ
OceanTreasure
2026-06-10 04:45:40
(2 months ago)
tcp/443; Git configuration exposure attempt: "GET /.git/config" @ 2026-06-09T08:53:38Z [proxy]
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:01:35
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 15:46:45
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:46:38.276345 2026] [security2:error] [pid 8968:tid 8968] [client 35.195.74.3:39238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cedricleejones.com"] [uri "/.git/config"] [unique_id "aig1XkQZiDTo-767tml6GAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 14:31:45
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:31:41.055520 2026] [security2:error] [pid 3626:tid 3626] [client 35.195.74.3:49270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "koswerks.net"] [uri "/.git/config"] [unique_id "aigjzTlWCE8xvq_n_qdt4AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
Burayot
2026-06-09 14:20:34
(2 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.195.74.3 (BE/Belgium/3.74.195.35 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.195.74.3 (BE/Belgium/3.74.195.35.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 13:08:05
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:08:02.607708 2026] [security2:error] [pid 28306:tid 28306] [client 35.195.74.3:43882] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scoutmountaindistrict.org.bonefrog.com"] [uri "/.git/config"] [unique_id "aigQMkNzUwgudahSlW7iKAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
dklueh79
2026-06-09 12:37:58
(2 months ago)
Probe for vulnerabilities. Path attempted: /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 10:02:18
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:02:11.922024 2026] [security2:error] [pid 25424:tid 25424] [client 35.195.74.3:56708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ez1productions.thinksite.net"] [uri "/.git/config"] [unique_id "aifkoy6DXvsa1Q3MMXqXIgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 09:40:01
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:39:58.015857 2026] [security2:error] [pid 24403:tid 24403] [client 35.195.74.3:58138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benshermanguitar.com"] [uri "/.git/config"] [unique_id "aiffbo5Ew979_aIN-qAZvwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
Burayot
2026-06-09 07:36:41
(2 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.195.74.3 (BE/Belgium/3.74.195.35 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.195.74.3 (BE/Belgium/3.74.195.35.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-09 07:11:20
(2 months ago)
Try to access /.git/config
Web App Attack
Anonymous
2026-06-09 06:57:01
(2 months ago)
35.195.74.3 - - [09/Jun/2026:06:57:00 +0000] "GET /.git/config HTTP/1.1" 302 4688 "-" "Mozilla/5.0 ( ...
show more
35.195.74.3 - - [09/Jun/2026:06:57:00 +0000] "GET /.git/config HTTP/1.1" 302 4688 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 MicroMessenger/7.0.5(0x17000523) NetType/WIFI Language/zh_CN"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:24:07
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:24:01.172056 2026] [security2:error] [pid 22315:tid 22315] [client 35.195.74.3:33468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.niksautobodyandsales.com"] [uri "/.git/config"] [unique_id "aiejcTlREUlJRCCaVgHY2AAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 04:53:24
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.195.74.3 (3.74.195.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:53:17.816019 2026] [security2:error] [pid 12840:tid 12840] [client 35.195.74.3:60568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "igpcloud.biz"] [uri "/.git/config"] [unique_id "aiecPXBuaD4m9U5sjsze1QAAAE4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
OceanTreasure
2026-06-09 04:35:44
(2 months ago)
tcp/443; Git configuration exposure attempt: "GET /.git/config" @ 2026-06-09T04:32:52Z [proxy]
Web App Attack