๐ฌ๐ง
openstrike.co.uk
2026-09-16 05:14:07
(2 days ago)
3 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
๐ฎ๐ณ
evicky2002
2026-09-16 00:02:04
(3 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐บ๐ธ
xxkodedxx
2026-09-15 23:52:32
(3 days ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1ร edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 1ร edge-block in 10m window.
Origin: US / AS396982 Google LLC
Active: 23:51:58 UTC
Volume: 1 HTTP req
Probed: /.git/config
Status mix: 444ร1
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
jfz-abuse
2026-09-15 23:40:35
(3 days ago)
fail2ban: apache-filepath-recon
...
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 23:19:09
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:19:02.877384 2026] [security2:error] [pid 10109:tid 10130] [client 34.22.49.55:33514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zoomtexas.com"] [uri "/.git/config"] [unique_id "aqnSZg-oPUGXhlOt6heKBQAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
rh24
2026-09-15 23:11:28
(3 days ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.22.49.55 (US/United States/55.49.22.34 ...
show more
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.22.49.55 (US/United States/55.49.22.34.bc.googleusercontent.com)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-15 22:59:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:58:56.178961 2026] [security2:error] [pid 27378:tid 27378] [client 34.22.49.55:37762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.z-mgmt.com"] [uri "/.git/config"] [unique_id "aqnNsA-nDHOnvc0bYAdrGQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 22:36:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:35:56.927986 2026] [security2:error] [pid 17304:tid 17304] [client 34.22.49.55:51106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.z-industrial.com"] [uri "/.git/config"] [unique_id "aqnITEgOZpgBRFipJ5ArigAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
iNetWorker
2026-09-15 22:33:26
(3 days ago)
trolling for resource vulnerabilities
Web App Attack
Anonymous
2026-09-15 22:31:02
(3 days ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 22:06:39
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:06:33.984180 2026] [security2:error] [pid 30050:tid 30050] [client 34.22.49.55:34986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zheundu.com.greighhouse.com"] [uri "/.git/config"] [unique_id "aqnBaQJ7pXLEkT69i9EYvAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 21:19:51
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:19:46.002410 2026] [security2:error] [pid 8110:tid 8110] [client 34.22.49.55:56846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zemincollection.chevronparkett.com"] [uri "/.git/config"] [unique_id "aqm2cgrwspi7oveAp7L6pQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-15 21:13:42
(3 days ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.22.49.55 - - [15/Sep/2026:23:13:41 +0200] "GET /.git/config HTTP/1.1" 404 7942 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 20:41:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.49.55 (55.49.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:40:56.867596 2026] [security2:error] [pid 21020:tid 21020] [client 34.22.49.55:58050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.zanussi.pamplonaserviciotecnico.com"] [uri "/.git/config"] [unique_id "aqmtWP21T9dyd4_uwdN8XwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
paissangroup
2026-09-15 20:37:47
(3 days ago)
Multiple WAF Violations
Web App Attack