๐ฌ๐ง
openstrike.co.uk
2026-10-03 05:13:53
(1 week ago)
5 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
๐บ๐ธ
SX Communications
2026-10-02 19:42:03
(1 week ago)
Web vulnerability scanning / probing from 34.11.209.226: automated requests for CMS admin paths, log ...
show more
Web vulnerability scanning / probing from 34.11.209.226: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 2 hits; paths: /.git/config.
show less
Port Scan
Hacking
Web App Attack
๐บ๐ธ
SodaAudit.app
2026-10-02 19:38:29
(1 week ago)
[sodaaudit.app] Web app attack. Timestamp: 2026-10-02T19:24:15.000Z. 2 probe events, 1 distinct path ...
show more
[sodaaudit.app] Web app attack. Timestamp: 2026-10-02T19:24:15.000Z. 2 probe events, 1 distinct path(s). Paths (payload): /.git/config
show less
Web App Attack
๐ซ๐ท
masterguru
2026-10-02 19:37:45
(1 week ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 19:36:57
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 15:36:52.165723 2026] [security2:error] [pid 4992:tid 4992] [client 34.11.209.226:59244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.solara.iainrealtor.com"] [uri "/.git/config"] [unique_id "asAH1HTcwG0GqsmivfHrNgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 19:05:01
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 15:04:55.271139 2026] [security2:error] [pid 25168:tid 25168] [client 34.11.209.226:56604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.snappsferry.daisydoesoap.com"] [uri "/.git/config"] [unique_id "asAAV1vY5hc-KbfR0ZlUAAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
Bay13
2026-10-02 18:26:24
(1 week ago)
CrowdSec:custom/http-sensitive-files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 18:26:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 14:26:16.883202 2026] [security2:error] [pid 12422:tid 12422] [client 34.11.209.226:45776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.smoothiegirl.benshermanguitar.com"] [uri "/.git/config"] [unique_id "ar_3SHTtfB94Rdu58MuMXgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-02 18:10:06
(1 week ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐บ๐ธ
interbiznw.com
2026-10-02 18:01:05
(1 week ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 17:59:41
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 13:59:34.369967 2026] [security2:error] [pid 876:tid 876] [client 34.11.209.226:47084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.smallbizreorg.com"] [uri "/.git/config"] [unique_id "ar_xBiLwMwbGcXU7UWOtyQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-02 17:56:59
(1 week ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 17:34:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.209.226 (226.209.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 13:34:36.017372 2026] [security2:error] [pid 28953:tid 28953] [client 34.11.209.226:54308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.slcflyers.com.rollinchassis.com"] [uri "/.git/config"] [unique_id "ar_rLDbAIKXhUlCsye4ccQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-10-02 17:30:19
(1 week ago)
Secret file probe | method: GET | path: /.git/config | ua: -
Hacking
Web App Attack
๐ธ๐ช
SkyDancer
2026-10-02 17:24:34
(1 week ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH