๐ฎ๐ณ
evicky2002
2026-09-18 06:00:02
(22 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ฌ๐ง
openstrike.co.uk
2026-09-17 05:13:23
(1 day ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
๐ฒ๐ฝ
octageeks.com
2026-09-17 04:20:16
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
๐บ๐ธ
craudiovizai
2026-09-16 18:30:34
(2 days ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked a ...
show more
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked at the edge.
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-16 18:16:23
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.32.165.186 (186.165.32.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.165.186 (186.165.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:16:19.575304 2026] [security2:error] [pid 8436:tid 8436] [client 34.32.165.186:40688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "conquesticon.org"] [uri "/.git/config"] [unique_id "aqrc84EAM1uNKOJF8A4PZwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-16 18:13:56
(2 days ago)
cloudlinux2 fail2ban: 2026-09-16 20:08:52,026 fail2ban.filter [1818]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-16 20:08:52,026 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 35.197.177.165 - 2026-09-16 20:08:52cloudlinux2 fail2ban: 2026-09-16 20:08:54,617 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Ban 35.197.177.165cloudlinux2 fail2ban: 2026-09-16 20:08:54,536 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 35.197.177.165 - 2026-09-16 20:08:54cloudlinux2 fail2ban: 2026-09-16 20:08:54,747 fail2ban.filter [1818]: INFO [recidive] Found 35.197.177.165 - 2026-09-16 20:08:54cloudlinux2 fail2ban: 2026-09-16 20:08:54,224 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 35.197.177.165 - 2026-09-16 20:08:54cloudlinux2 fail2ban: 2026-09-16 20:09:19,266 fail2ban.actions [1818]: NOTICE [plesk-modsecurity] Unban 104.28.222.46cloudlinux2 fail2ban: 2026-09-16 20:09:29,377 fail2ban.filter [1818]: INFO [plesk-modsecurity] Found 34.32.165.186 - 2026-09-16 20:09:29cloudlinux2 fail2ban: 2026-09-16 20:10:39,376
show less
Web App Attack
๐ฎ๐ฉ
Burayot
2026-09-16 18:12:37
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.32.165.186 (186.165.32.34.bc.goo ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.32.165.186 (186.165.32.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
๐จ๐ฆ
Anytech
2026-09-16 18:11:37
(2 days ago)
Blocked by ConnMonitor
Web App Attack
๐ฉ๐ช
thesimonmanuel
2026-09-16 17:52:28
(2 days ago)
34.32.165.186 - - [16/Sep/2026:23:22:26 +0530] "GET /.git/config HTTP/1.1" 403 117 "-" "-" "-"
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 17:35:36
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.32.165.186 (186.165.32.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.165.186 (186.165.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:35:30.264272 2026] [security2:error] [pid 19289:tid 19289] [client 34.32.165.186:53624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "connec-tek.com.simia.com"] [uri "/.git/config"] [unique_id "aqrTYjRd5cizZi-VY9tNFwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Jimbo67
2026-09-16 17:30:48
(2 days ago)
Cloudflare WAF: 1 hits in 30s | action=block | abuse=suspicious_probe | categories=19 | rule_id=3329 ...
show more
Cloudflare WAF: 1 hits in 30s | action=block | abuse=suspicious_probe | categories=19 | rule_id=3329c9d804134f3e89780d69bfd872dc | URIs=/.git/config | confidence=0.82
show less
Bad Web Bot
๐ฌ๐ง
Aetherweb Ark
2026-09-16 17:22:41
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.32.165.186 (186.165.32.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.32.165.186 (186.165.32.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ฉ๐ช
kkw
2026-09-16 16:56:27
(2 days ago)
[REDACTED] 34.32.165.186 - - [16/Sep/2026:18:56:26 +0200] "GET /.git/config HTTP/1.1" 301 4700 "-" " ...
show more
[REDACTED] 34.32.165.186 - - [16/Sep/2026:18:56:26 +0200] "GET /.git/config HTTP/1.1" 301 4700 "-" "-"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-16 16:53:03
(2 days ago)
[16/Sep/2026:19:53:03 +0300] -- 34.32.165.186 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[16/Sep/2026:19:53:03 +0300] -- 34.32.165.186 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-09-16 16:43:04
(2 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack