🇬🇧
openstrike.co.uk
2026-07-03 05:16:01
(4 days ago)
6 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇳🇱
homeshowdomain.nl
2026-07-02 22:00:34
(5 days ago)
Auto-ban: >3000 req/min op 2026-07-02
Web App Attack
SSH
Hacking
🇬🇧
consul.to
2026-07-02 17:31:48
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
Oakley
2026-07-02 13:38:03
(5 days ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇳🇿
Antinson
2026-07-02 13:09:38
(5 days ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
interbiznw.com
2026-07-02 09:37:49
(5 days ago)
fail2ban-ban
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 09:12:31
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 134.199.168.226 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.168.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 05:12:25.220754 2026] [security2:error] [pid 15742:tid 15742] [client 134.199.168.226:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "betiqos.com"] [uri "/.git/config"] [unique_id "akYreUZw43bZ-r4lTU21-AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 08:36:22
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 134.199.168.226 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.168.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 04:36:19.499960 2026] [security2:error] [pid 30990:tid 30990] [client 134.199.168.226:55144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kanata.ws"] [uri "/.git/config"] [unique_id "akYjA-IxVCI-ZG31LRd_LgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MM-bot
2026-07-02 07:38:07
(5 days ago)
URL-probe: HTTP/1.1 GET request on /.git/config (2026-07-02 09:38:07 UTC+2)
Web App Attack
Hacking
2026-07-02 07:16:05
(5 days ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇫🇮
as211431.net
2026-07-02 07:13:04
(5 days ago)
Triggered Cloudflare WAF (firewallCustom) from AU.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from AU.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
thetomtaylor.co.uk
2026-07-02 07:08:01
(5 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 06:29:20
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 134.199.168.226 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.168.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 02:29:14.368653 2026] [security2:error] [pid 4125:tid 4125] [client 134.199.168.226:47912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idgcasadelgeologo.com"] [uri "/.git/config"] [unique_id "akYFOiKh6RueJMn0i6zBIAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
LTM
2026-07-02 06:20:01
(5 days ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 05:58:20
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 134.199.168.226 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.168.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 01:58:13.790648 2026] [security2:error] [pid 5437:tid 5437] [client 134.199.168.226:47800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmp.net"] [uri "/.git/config"] [unique_id "akX99Sg1N36gszxVpAX9xAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack