๐ฌ๐ง
openstrike.co.uk
2026-09-30 05:14:33
(9 hours ago)
250 attacks on PHP URLs, VC URLs, env grabbing URLs:
GET /includes/phpinfo.php HTTP/1.1
GET /.git/co ...
show more
250 attacks on PHP URLs, VC URLs, env grabbing URLs:
GET /includes/phpinfo.php HTTP/1.1
GET /.git/config HTTP/1.1
GET /config/app/.env HTTP/1.1
show less
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-09-29 23:07:06
(15 hours ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-29 19:27:20
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 15:27:14.059639 2026] [security2:error] [pid 26848:tid 26848] [client 34.101.182.101:56924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lspfest.com"] [uri "/.git/config"] [unique_id "arwREhvbpmpAXNGwPQUMWAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-28 16:50:47
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-27 20:02:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 16:02:36.601339 2026] [security2:error] [pid 2633:tid 2701] [client 34.101.182.101:40800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.worldecom.aafm.us"] [uri "/.git/config"] [unique_id "arl2XN7ao_huj5xXrrm50AAAAYc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-27 14:05:02
(3 days ago)
Abuse Detected (9)
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-09-27 08:36:00
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-27 04:58:35
(3 days ago)
Excessive 404/403 errors
Brute-Force
Anonymous
2026-09-27 02:22:41
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 14:35:48
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:35:45.863504 2026] [security2:error] [pid 19533:tid 19533] [client 34.101.182.101:32866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.blacksheepoffroad.com"] [uri "/.git/config"] [unique_id "arfYQdGa0YeS4TIFBJcthgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-26 11:56:56
(4 days ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.git/config | 2026-09-26 11:56 UTC
show less
Hacking
Web App Attack
๐ช๐ธ
robotstxt
2026-09-26 11:06:40
(4 days ago)
34.101.182.101 - - [26/Sep/2026:11:05:38 +0000] "GET /.env HTTP/1.1" 403 15456 "-" "Mozilla/5.0 (Mac ...
show more
34.101.182.101 - - [26/Sep/2026:11:05:38 +0000] "GET /.env HTTP/1.1" 403 15456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.101.182.101"
34.101.182.101 - - [26/Sep/2026:11:05:39 +0000] "GET /.env.local HTTP/1.1" 403 15456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.101.182.101"
34.101.182.101 - - [26/Sep/2026:11:05:40 +0000] "GET /.env.production HTTP/1.1" 403 15456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.101.182.101"
34.101.182.101 - - [26/Sep/2026:11:05:41 +0000] "GET /.env.staging HTTP/1.1" 403 15456 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.101.182.101"
34.101.182.101 - - [26/Sep/2026:11:05:42 +0000] "GET /.env.
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 10:51:54
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 06:51:47.848548 2026] [security2:error] [pid 32720:tid 32720] [client 34.101.182.101:48110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wordpress.martinka.org"] [uri "/.git/config"] [unique_id "arejw5M6BlmDxd1vsCw3gQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-25 08:35:01
(5 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 20:49:58
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.182.101 (101.182.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 16:49:53.258539 2026] [security2:error] [pid 26165:tid 26165] [client 34.101.182.101:53312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.venture2-22.cain2016.org"] [uri "/.git/config"] [unique_id "arWM8XreYJU7nSxN18urhAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack