🇬🇧
openstrike.co.uk
2026-08-22 05:15:12
(55 minutes ago)
3 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
2026-08-22 05:07:31
(1 hour ago)
Automated report (2026-08-22T13:07:31+08:00). Caught probing for exposed Git data.
Hacking
Web App Attack
Open Proxy
2026-08-22 04:28:20
(1 hour ago)
Automated report (2026-08-22T12:28:20+08:00). Caught probing for exposed Git data.
Hacking
Web App Attack
Open Proxy
🇺🇸
TPI-Abuse
2026-08-22 04:21:11
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 165.227.199.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 165.227.199.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 00:21:05.095294 2026] [security2:error] [pid 7939:tid 7939] [client 165.227.199.0:39372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miraclepunchy.com"] [uri "/.git/config"] [unique_id "aokjseQf8LANhYJJuPPqAQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-22 03:38:16
(2 hours ago)
Web vulnerability probing: /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 03:31:06
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.227.199.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 165.227.199.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 23:31:01.912341 2026] [security2:error] [pid 19439:tid 19439] [client 165.227.199.0:48294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "integratic.com.co"] [uri "/.git/config"] [unique_id "aokX9csX8yhCm2QJEZmJ0wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-22 03:12:45
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.227.199.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 165.227.199.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 23:12:37.686361 2026] [security2:error] [pid 7355:tid 7355] [client 165.227.199.0:38390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psychicangelreader.com"] [uri "/.git/config"] [unique_id "aokTpZOgKT0sn_RdI35OHAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-08-22 02:58:56
(3 hours ago)
cloudlinux2 fail2ban: 2026-08-22 04:55:22,328 fail2ban.filter [1480]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-22 04:55:22,328 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 165.227.199.0 - 2026-08-22 04:55:22cloudlinux2 fail2ban: 2026-08-22 04:55:20,659 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 165.227.199.0 - 2026-08-22 04:55:20cloudlinux2 fail2ban: 2026-08-22 04:56:06,741 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 184.75.208.114 - 2026-08-22 04:56:06cloudlinux2 fail2ban: 2026-08-22 04:56:06,760 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 184.75.208.114 - 2026-08-22 04:56:06cloudlinux2 fail2ban: 2026-08-22 04:56:06,690 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 184.75.208.114 - 2026-08-22 04:56:06cloudlinux2 fail2ban: 2026-08-22 04:56:06,730 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 184.75.208.114 - 2026-08-22 04:56:06cloudlinux2 fail2ban: 2026-08-22 04:56:06,709 fail2ban.filter [1480]: INFO [plesk-modsecurity] Found 184.75.208.114 - 2026-08-2
show less
Brute-Force
🇬🇧
thetomtaylor.co.uk
2026-08-22 02:08:02
(4 hours ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-22 01:26:28
(4 hours ago)
[SatAug2203:26:22.5246762026][security2:error][pid1827100:tid1827205][client165.227.199.0:0]ModSecur ...
show more
[SatAug2203:26:22.5246762026][security2:error][pid1827100:tid1827205][client165.227.199.0:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"robertselitrenny.ch\"][uri\"/.git/config\"][unique_id\"aoj6vh9Zpmra3Gv319clRQAAAkY\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-08-22 01:17:02
(4 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-22 01:07:01
(5 hours ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-08-22 01:00:58
(5 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇧🇪
voormedia
2026-08-22 00:54:26
(5 hours ago)
Accessed trap at '/.git/config'
Web App Attack
🇧🇪
cmbplf
2026-08-22 00:32:46
(5 hours ago)
204 requests with url.path *.git/*
194 requests with url.path */.git/config
Brute-Force
Bad Web Bot