🇺🇸
leasj
2026-07-31 20:56:05
(1 hour ago)
Observed Scanned 1 known-sensitive endpoint(s), e.g.: /.git/config.
Hacking
Bad Web Bot
Web App Attack
🇮🇳
evicky2002
2026-07-31 06:00:00
(16 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
2026-07-31 04:20:10
(18 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-07-31 01:08:01
(21 hours ago)
Fail2Ban - [WEB]Exploit attempts (SQLi, RCE, path traversal) on webexploits ... [ice01,ice02,wa01,wa ...
show more
Fail2Ban - [WEB]Exploit attempts (SQLi, RCE, path traversal) on webexploits ... [ice01,ice02,wa01,wa02]
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
Charlesiv
2026-07-31 00:04:25
(22 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 213230 (Hetzner Online G ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 213230 (Hetzner Online GmbH)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
Timestamp: 2026-07-30T22:20:08Z
Ray ID: a237bfba8a3f7246
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/131.0.0.0
show less
Bad Web Bot
🇧🇪
sid3windr
2026-07-30 22:43:40
(1 day ago)
GET /.git/config (Tarpitted for 4m20s, wasted 15.35kB)
Web App Attack
🇺🇸
jsjdmediallc
2026-07-30 22:40:03
(1 day ago)
Auto-blocked: score 25 (threshold 10). Tier: HIGH. Hits: 3. Flags: git-exposure, git-config. Paths: ...
show more
Auto-blocked: score 25 (threshold 10). Tier: HIGH. Hits: 3. Flags: git-exposure, git-config. Paths: /.git/config, /.git/config, /.git/config
show less
Bad Web Bot
Web App Attack
2026-07-30 22:36:16
(1 day ago)
(caddyscan) Scanner path probe from 87.99.128.112 (US/United States/static.112.128.99.87.clients.you ...
show more
(caddyscan) Scanner path probe from 87.99.128.112 (US/United States/static.112.128.99.87.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 404 219 87.99.128.112 - - [30/Jul/2026:22:22:43 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 87.99.128.112 - - [30/Jul/2026:22:30:46 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 87.99.128.112 - - [30/Jul/2026:22:31:32 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 87.99.128.112 - - [30/Jul/2026:22:31:54 +0000] "GET /.git/config HTTP/1.1"
[REDACTED] 200 2627 87.99.128.112 - - [30/Jul/2026:22:36:15 +0000] "GET /.git/config HTTP/1.1"
show less
Port Scan
🇩🇪
lespbaj
2026-07-30 22:35:38
(1 day ago)
{"time":"2026-07-30T22:35:36+00:00","ip":"87.99.128.112","method":"GET","uri":"/.git/config","ua":"M ...
show more
{"time":"2026-07-30T22:35:36+00:00","ip":"87.99.128.112","method":"GET","uri":"/.git/config","ua":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0","referer":""}
...
show less
Bad Web Bot
Web App Attack
🇦🇺
nzhost.co.nz
2026-07-30 22:27:01
(1 day ago)
$f2bV_matches
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-07-30 22:19:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 87.99.128.112 (static.112.128.99.87.clients.you ...
show more
(mod_security) mod_security (id:210492) triggered by 87.99.128.112 (static.112.128.99.87.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 18:18:58.979015 2026] [security2:error] [pid 14186:tid 14186] [client 87.99.128.112:13050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "southtncardio.com"] [uri "/.git/config"] [unique_id "amvN0iqbgiSXmSgDe23lUQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-07-30 22:13:12
(1 day ago)
common Web Exploits being scanned
Web App Attack
🇳🇱
debestelapp
2026-07-30 22:12:54
(1 day ago)
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 22:10:53
(1 day ago)
87.99.128.112 - - [31/Jul/2026:01:10:52 +0300] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 ...
show more
87.99.128.112 - - [31/Jul/2026:01:10:52 +0300] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/131.0.0.0"
...
show less
Web App Attack
2026-07-30 22:08:49
(1 day ago)
87.99.128.112 - - [30/Jul/2026:22:08:48 +0000] "GET /.git/config HTTP/1.1" 302 467 "-" "Mozilla/5.0 ...
show more
87.99.128.112 - - [30/Jul/2026:22:08:48 +0000] "GET /.git/config HTTP/1.1" 302 467 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/131.0.0.0"
...
show less
Bad Web Bot
Web App Attack