๐ง๐ช
cmbplf
2026-06-26 03:39:34
(8 hours ago)
1.108 requests with url.path */.git/config
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-26 02:11:00
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.200.94.148 (148.94.200.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.94.148 (148.94.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 22:10:56.180212 2026] [security2:error] [pid 30375:tid 30375] [client 35.200.94.148:58124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tools.alitcogroup.com"] [uri "/v3/.git/config"] [unique_id "aj3fsOT6uwcg28xfQZWe8QAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
paissangroup
2026-06-26 01:50:52
(10 hours ago)
Multiple WAF Violations
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-06-26 01:30:37
(10 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.200.94.148 (JP/Japan/148.94.200.35.bc.google ...
show more
(mod_security) mod_security (id:949110) triggered by 35.200.94.148 (JP/Japan/148.94.200.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
Anonymous
2026-06-26 01:30:02
(10 hours ago)
CrowdSec decision: crowdsecurity/http-probing (origin: crowdsec)
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-06-26 01:16:35
(11 hours ago)
(modsecurity) srv101 ModSecurity 35.200.94.148 (JP/Japan/148.94.200.35.bc.googleusercontent.com): 10 ...
show more
(modsecurity) srv101 ModSecurity 35.200.94.148 (JP/Japan/148.94.200.35.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 00:48:03
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.200.94.148 (148.94.200.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.94.148 (148.94.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:47:58.097676 2026] [security2:error] [pid 20840:tid 20840] [client 35.200.94.148:45324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wordpress.ianmagarzo.com"] [uri "/.git/config"] [unique_id "aj3MPlZFc7qhXZNS_ALJSAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
gadix
2026-06-25 23:33:24
(12 hours ago)
[26/Jun/2026:01:33:23.512599 +0200] aj26w2nKNdzP6u95Kii_4gAAAAA 35.200.94.148 51426 127.0.0.1 7081
[ ...
show more
[26/Jun/2026:01:33:23.512599 +0200] aj26w2nKNdzP6u95Kii_4gAAAAA 35.200.94.148 51426 127.0.0.1 7081
[26/Jun/2026:01:33:23.565906 +0200] aj26w7WugaONKsoC6KrkagAAAAc 35.200.94.148 51442 127.0.0.1 7081
[26/Jun/2026:01:33:23.574500 +0200] aj26w0-OdF6jpQVJfPB3FAAAAAU 35.200.94.148 51446 127.0.0.1 7081
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-25 23:07:51
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.200.94.148 (148.94.200.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.200.94.148 (148.94.200.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:07:43.162277 2026] [security2:error] [pid 30704:tid 30704] [client 35.200.94.148:42292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mbox.adamsclothiers.com"] [uri "/blog/.git/config"] [unique_id "aj20v5iGEcmxpd8W5OFryQAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ท๐บ
sms.ru
2026-06-25 23:07:05
(13 hours ago)
/v1/.git/config
Web App Attack
๐ซ๐ท
dynamix
2026-06-25 22:42:45
(13 hours ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
Savvii
2026-06-25 15:09:58
(21 hours ago)
20 attempts against mh-misbehave-ban on iron
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-25 14:52:44
(21 hours ago)
35.200.94.148 - - [25/Jun/2026:11:52:43 -0300] "GET /v2/.git/config HTTP/1.1" 403 874 "-" "Mozilla/5 ...
show more
35.200.94.148 - - [25/Jun/2026:11:52:43 -0300] "GET /v2/.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 (Linux; U; Android 2.2; en-us; SCH-I800 Build/FROYO) AppleWebKit/533.1 (KHTML, like Gecko) Version/4.0 Mobile Safari/533.1"
35.200.94.148 - - [25/Jun/2026:11:52:43 -0300] "GET /site/.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; es-us; Redmi Note 5 Build/OPM1.171019.011) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/71.0.3578.141 Mobile Safari/537.36 XiaoMi/MiuiBrowser/10.9.7-g"
35.200.94.148 - - [25/Jun/2026:11:52:43 -0300] "GET /public/.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
35.200.94.148 - - [25/Jun/2026:11:52:43 -0300] "GET /www/.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 (compatible; alexa site audit/1.0; +http://www.alexa.com/help/webmasters; )"
35.200.94.148 - - [25/Jun/2026:11:52:43 -0300] "GET /blog/.git/config HTTP/1.1
...
show less
Port Scan
๐ฎ๐ช
AutosOnShow
2026-06-25 14:52:04
(21 hours ago)
blocked for webapp attack | path requested: /.git/config | seen at 2026-06-25 14:51:42.524 |
Web App Attack
๐ณ๐ฑ
Savvii
2026-06-25 13:23:07
(23 hours ago)
20 attempts against mh-misbehave-ban on staging
Brute-Force
Bad Web Bot
Web App Attack