Anonymous
2026-09-22 10:44:59
(2 hours ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 09:09:44
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.220.184.69 (69.184.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.184.69 (69.184.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 05:09:39.727292 2026] [security2:error] [pid 616:tid 765] [client 35.220.184.69:56670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soluciona.biz"] [uri "/.git/config"] [unique_id "arJF0yQ-XkiOwZkLouegKwAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-09-22 08:54:39
(4 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.goblinpot.store | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
Major Hostility
2026-09-22 07:13:06
(5 hours ago)
"GET /.git/config HTTP/1.1" 404
"GET /.git/config HTTP/1.1" 404
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-22 07:06:08
(6 hours ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.220.184.69 - - [22/Sep/2026:09:06:02 +0200] "GET /.git/config HTTP/1.1" 301 6307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
xxkodedxx
2026-09-22 06:56:21
(6 hours ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1ร edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1ร edge-block in 10m window.
Origin: HK / AS396982 Google LLC
Active: 06:55:32 UTC
Volume: 1 HTTP req
Probed: /.git/config
Status mix: 444ร1
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 06:42:03
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.220.184.69 (69.184.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.184.69 (69.184.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 02:41:56.915758 2026] [security2:error] [pid 23001:tid 23001] [client 35.220.184.69:52620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spyasociados.com"] [uri "/.git/config"] [unique_id "arIjNCc1MbxQfJcvRChwtwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
Anytech
2026-09-22 06:05:09
(7 hours ago)
Blocked by ConnMonitor
Web App Attack
๐ฎ๐ณ
evicky2002
2026-09-22 06:00:01
(7 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-09-22 05:34:56
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.220.184.69 (69.184.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.184.69 (69.184.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 01:34:49.670401 2026] [security2:error] [pid 5531:tid 5531] [client 35.220.184.69:47040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mlbechler.com.qu1ck.com"] [uri "/.git/config"] [unique_id "arITeU8XDE6mix3UkEZFiQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
interbiznw.com
2026-09-22 05:16:50
(7 hours ago)
fail2ban-ban
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-09-22 05:14:37
(7 hours ago)
3 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-22 04:47:34
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.220.184.69 (69.184.220.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.220.184.69 (69.184.220.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 00:47:26.654260 2026] [security2:error] [pid 21742:tid 21742] [client 35.220.184.69:45502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "royalhay.gulftelecom.com"] [uri "/.git/config"] [unique_id "arIIXjTUEAFBDjY10LrkeQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-09-22 04:44:45
(8 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.teddypot.website | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
๐บ๐ธ
swalluw
2026-09-22 04:25:39
(8 hours ago)
Web vulnerability scanning: request for /.git/config (HTTP 404, GET) at 2026-09-22T04:25:39+00:00 - ...
show more
Web vulnerability scanning: request for /.git/config (HTTP 404, GET) at 2026-09-22T04:25:39+00:00 - exploit probe, no legitimate use
show less
Bad Web Bot
Web App Attack