🇬🇧
openstrike.co.uk
2025-12-24 06:14:51
UTC ·
(10 months ago)
5 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
octageeks.com
2025-12-24 05:06:19
UTC ·
(10 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
jjnxpct
2025-12-24 04:48:58
UTC ·
(10 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config]
Hacking
Web App Attack
🇬🇧
[email protected]
2025-12-24 00:51:07
UTC ·
(10 months ago)
...
Brute-Force
SSH
🇺🇸
TPI-Abuse
2025-12-23 23:18:36
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 18:18:32.267644 2025] [security2:error] [pid 30175:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 18:18:32.267644 2025] [security2:error] [pid 30175:tid 30175] [client 35.243.235.147:60726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.twincitytn.com"] [uri "/.git/config"] [unique_id "aUsjSE5T2xJV4njbPw30CwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-23 22:59:54
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 17:59:51.010153 2025] [security2:error] [pid 10147:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 17:59:51.010153 2025] [security2:error] [pid 10147:tid 10147] [client 35.243.235.147:57498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tvr77.garyrankin.com"] [uri "/.git/config"] [unique_id "aUse5zir3IY14GbrnsltnAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-23 22:59:52
UTC ·
(10 months ago)
Auto-ban: >3000 req/min op 2025-12-23
Hacking
Web App Attack
SSH
🇦🇹
René Hickersberger
2025-12-23 22:15:56
UTC ·
(10 months ago)
[2025-12-23T22:15:56Z] Malicious request to /.git/config
Hacking
Bad Web Bot
Web App Attack
🇬🇧
Yosi
2025-12-23 22:15:12
UTC ·
(10 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇫🇷
Syxpi_Lumi
2025-12-23 21:00:10
UTC ·
(10 months ago)
Triggered Cloudflare WAF (linkMaze) from US.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇺🇸
TPI-Abuse
2025-12-23 20:33:58
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 15:33:54.724343 2025] [security2:error] [pid 21222:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 15:33:54.724343 2025] [security2:error] [pid 21222:tid 21222] [client 35.243.235.147:49474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tandemfamilycoaching.com"] [uri "/.git/config"] [unique_id "aUr8srubluCIRbIqCmL3-wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-23 20:15:53
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 15:15:48.389111 2025] [security2:error] [pid 26686:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 15:15:48.389111 2025] [security2:error] [pid 26686:tid 26686] [client 35.243.235.147:39962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.talkingmess.com"] [uri "/.git/config"] [unique_id "aUr4dKLn0jSEmY7wsSIW2QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-23 19:27:07
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 14:26:59.597623 2025] [security2:error] [pid 11924:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.235.147 (147.235.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 14:26:59.597623 2025] [security2:error] [pid 11924:tid 11924] [client 35.243.235.147:36980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.t9teamsportinggoods.com"] [uri "/.git/config"] [unique_id "aUrtA1Lipg32_xAkaMfR2wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2025-12-23 19:19:41
UTC ·
(10 months ago)
Multiple WAF Violations
Web App Attack
🇵🇱
IROK
2025-12-23 17:10:30
UTC ·
(10 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking