🇧🇪
sid3windr
2026-09-18 16:14:53
(1 day ago)
GET /.git/config (Tarpitted for 1d15h8m26s, wasted 8.06MB)
Web App Attack
🇧🇪
sid3windr
2026-09-18 11:40:24
(2 days ago)
GET /.git/config (Tarpitted for 1d15h8m27s, wasted 8.06MB)
Web App Attack
🇮🇳
evicky2002
2026-09-17 06:00:05
(3 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇬🇧
openstrike.co.uk
2026-09-17 05:13:40
(3 days ago)
3 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
nyt
2026-09-16 23:13:25
(3 days ago)
Sensitive File Probe, Empty UA + 404
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-16 22:02:52
(3 days ago)
Auto-ban: >3000 req/min op 2026-09-16
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-16 21:59:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.239.45.42 (42.45.239.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.239.45.42 (42.45.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:59:53.084631 2026] [security2:error] [pid 2777:tid 2777] [client 35.239.45.42:58620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "new-bethel-baptist-church.com.danged.com"] [uri "/.git/config"] [unique_id "aqsRWUjRQeeAzJj-cnajjQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 21:55:54
(3 days ago)
35.239.45.42 new.arduino.ua [17/Sep/2026:00:55:54 +0300] "GET /.git/config HTTP/1.1" 403 146 "-" "-" ...
show more
35.239.45.42 new.arduino.ua [17/Sep/2026:00:55:54 +0300] "GET /.git/config HTTP/1.1" 403 146 "-" "-" 0.000 2806
...
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 21:44:41
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 35.239.45.42 (42.45.239.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 35.239.45.42 (42.45.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:44:36.231647 2026] [security2:error] [pid 15120:tid 15120] [client 35.239.45.42:39360] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "nevawade.com"] [uri "/.git/config"] [unique_id "aqsNxCxS5u3wcaSh08-EyAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 21:37:24
(3 days ago)
fail2ban jail apache-secrets-probe: 35.239.45.42 - - [16/Sep/2026:14:37:22 -0700] "GET /.git/config ...
show more
fail2ban jail apache-secrets-probe: 35.239.45.42 - - [16/Sep/2026:14:37:22 -0700] "GET /.git/config HTTP/1.1" 403 4406 "-" "-"
show less
Web App Attack
🇩🇪
rh24
2026-09-16 21:26:08
(3 days ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 35.239.45.42 (US/United States/42.45.239. ...
show more
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 35.239.45.42 (US/United States/42.45.239.35.bc.googleusercontent.com)
show less
Hacking
🇩🇪
pltcldvlpr
2026-09-16 21:24:23
(3 days ago)
CMS/framework probe: 35.239.45.42 - - [16/Sep/2026:23:24:22 +0200] "GET /.git/config HTTP/1.1" 404 1 ...
show more
CMS/framework probe: 35.239.45.42 - - [16/Sep/2026:23:24:22 +0200] "GET /.git/config HTTP/1.1" 404 162 "-" "-" asn=396982 org="Google LLC" country=US
...
show less
Web App Attack
2026-09-16 21:19:03
(3 days ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 21:13:37
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.239.45.42 (42.45.239.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.239.45.42 (42.45.239.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 17:13:30.051213 2026] [security2:error] [pid 29493:tid 29493] [client 35.239.45.42:38674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "netstatsolutions.com"] [uri "/.git/config"] [unique_id "aqsGemeySQQpNHW0WsvzfQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-16 21:09:37
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack