๐ฌ๐ง
andypiper
2026-10-02 01:03:14
(5 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 00:37:52
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.245.233.113 (113.233.245.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.245.233.113 (113.233.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 20:37:45.680037 2026] [security2:error] [pid 12291:tid 12291] [client 35.245.233.113:51826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kronrod.com"] [uri "/.git/config"] [unique_id "ar782bUYaaUv8IocLdscaAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
tsZero
2026-10-02 00:33:58
(6 hours ago)
Scan example: path=/.git/config status=403
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-02 00:22:50
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.245.233.113 (113.233.245.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.245.233.113 (113.233.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 20:22:46.134977 2026] [security2:error] [pid 22427:tid 22439] [client 35.245.233.113:37780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kristinaarocho.docdalton.com"] [uri "/.git/config"] [unique_id "ar75Vo4-LDos3Y7EVgIJVgAAAUk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-02 00:10:03
(6 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 00:07:45
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.245.233.113 (113.233.245.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.245.233.113 (113.233.245.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 20:07:42.047481 2026] [security2:error] [pid 7065:tid 7065] [client 35.245.233.113:54838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krewt.com"] [uri "/.git/config"] [unique_id "ar71zri8sIMnpQiXKyrh4AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ญ๐บ
kranem
2026-10-02 00:00:25
(6 hours ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
Timestamp: 2026-10-01T23:35:26Z
User-Agent: empty
show less
Bad Web Bot
๐ฉ๐ช
FeG Deutschland
2026-10-01 23:51:52
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐จ๐ฆ
Anytech
2026-10-01 23:10:56
(7 hours ago)
Blocked by ConnMonitor
Web App Attack
๐บ๐ธ
mnsf
2026-10-01 23:06:02
(7 hours ago)
Abuse Detected (9)
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-10-01 22:42:20
(7 hours ago)
1.068 requests with url.path */.git/config
430 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐ฉ๐ช
Tsumugi Kotobuki
2026-10-01 22:30:19
(8 hours ago)
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 58 | Len: 60B | Win: ...
show more
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 58 | Len: 60B | Win: 64240(1) | rDNS: 113.233.245.35.bc.googleusercontent.com | F2B/ufw-honeypot@2026-10-01T22:30:19Z
show less
Port Scan
Hacking
๐ณ๐ด
jad-abuse
2026-10-01 22:27:09
(8 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits.
show less
Web App Attack
Anonymous
2026-10-01 22:24:36
(8 hours ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.kostaspriftis.gr; logs=/var/log/httpd/domains/kostasprif ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.kostaspriftis.gr; logs=/var/log/httpd/domains/kostaspriftis.gr.log; samples=/.git/config
show less
Hacking
Web App Attack
๐บ๐ธ
kosada.com
2026-10-01 22:12:47
(8 hours ago)
Repeated exploit attempts, for example: /.git/config /.git/config (HTTP/1.1 port 443)
Web App Attack