๐ฉ๐ช
mravb
2026-10-06 18:05:17
(8 minutes ago)
35.201.196.175 - - [06/Oct/2026:21:05:17 +0300] "GET /.git/config HTTP/1.1" 444 0 "-" "-"
...
Web App Attack
Hacking
๐ณ๐ฑ
Mangelot Hosting
2026-10-06 18:01:35
(12 minutes ago)
(web_sensitive_file) srv103 Sensitive file probe (.env/.git/backup) 35.201.196.175 (TW/Taiwan/175.19 ...
show more
(web_sensitive_file) srv103 Sensitive file probe (.env/.git/backup) 35.201.196.175 (TW/Taiwan/175.196.201.35.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐บ๐ธ
rsa
2026-10-06 17:56:00
(17 minutes ago)
GET /.git/config HTTP/1.1
DDoS Attack
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-06 17:49:58
(23 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.201.196.175 (175.196.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.196.175 (175.196.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 13:49:54.648341 2026] [security2:error] [pid 18537:tid 18537] [client 35.201.196.175:36916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.magento.fritsknuf.com"] [uri "/.git/config"] [unique_id "asU0wqGwUjwElOGDicpu2AAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-06 17:40:05
(33 minutes ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐ฆ๐บ
A.i.D.A.N.N
2026-10-06 17:38:40
(34 minutes ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-10-06 17:36:20
(37 minutes ago)
[Wed Oct 07 04:36:19.467179 2026] [security2:error] [pid 262964] [client 35.201.196.175:55158] [clie ...
show more
[Wed Oct 07 04:36:19.467179 2026] [security2:error] [pid 262964] [client 35.201.196.175:55158] [client 35.201.196.175] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.levellapromotions.co.nz"] [uri "/.git/config"] [unique_id "asUxkxVdnKPDakAedyCGOAAAAAI"]
...
show less
Web App Attack
๐ฉ๐ช
paissangroup
2026-10-06 17:35:23
(38 minutes ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-06 17:32:34
(41 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.201.196.175 (175.196.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.196.175 (175.196.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 13:32:30.525457 2026] [security2:error] [pid 5341:tid 5341] [client 35.201.196.175:34060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laydox.com"] [uri "/.git/config"] [unique_id "asUwriqGOg-x17VoD6DVpgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
Klaverstyn
2026-10-06 17:22:25
(51 minutes ago)
Cross-vhost secrets/RCE probing campaign
Web App Attack
Hacking
๐ฌ๐ง
pinguin
2026-10-06 17:21:09
(52 minutes ago)
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: LOG
Protocol: HTTP/1.1 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: LOG
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
Anonymous
2026-10-06 17:02:30
(1 hour ago)
Web scanner: GET /.git/config
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-06 17:01:28
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.201.196.175 (175.196.201.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.196.175 (175.196.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 13:01:22.440744 2026] [security2:error] [pid 7740:tid 7740] [client 35.201.196.175:39480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.isaiah.byles.net"] [uri "/.git/config"] [unique_id "asUpYjoxLvm_XGDSGOKSGgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-06 17:00:24
(1 hour ago)
GET /.git/config HTTP/1.1
...
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-06 16:55:06
(1 hour ago)
IVski WAF | Sensitive file probe - looking for exposed .git/config
Hacking
Brute-Force
Web App Attack