🇬🇧
openstrike.co.uk
2026-09-20 05:13:30
(21 minutes ago)
3 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇩🇪
NetShield-DE
2026-09-20 04:07:39
(1 hour ago)
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-09-20T ...
show more
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-09-20T06:07:02+0200. Last: 2026-09-20T06:07:02+0200.
Samples:
- 2026-09-20 01:27:49,732 fail2ban.actions [4095059]: NOTICE [abuseipdb] Ban 34.63.114.136
show less
Web App Attack
🇿🇦
conure.sh
2026-09-19 23:40:28
(5 hours ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 2 domain(s) in 0s
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 23:31:16
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.63.114.136 (136.114.63.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.63.114.136 (136.114.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 19:31:09.198835 2026] [security2:error] [pid 17524:tid 17524] [client 34.63.114.136:56560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nathsharmaandcompany.com"] [uri "/.git/config"] [unique_id "aq8bPSc7EchPE3YrLmPmXQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
pm33
2026-09-19 23:28:58
(6 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
2026-09-19 23:02:30
(6 hours ago)
GET /.git/config HTTP/1.1
...
Web App Attack
🇯🇵
tttomomi
2026-09-19 22:52:54
(6 hours ago)
Repeated probing for credential and configuration files, and for known webshell and remote-code-exec ...
show more
Repeated probing for credential and configuration files, and for known webshell and remote-code-execution endpoints, on our web server. Every request was refused with a 4xx status; none returned content. Paths probed: /.git/config.
show less
Web App Attack
2026-09-19 22:37:20
(6 hours ago)
34.63.114.136 - - [20/Sep/2026:00:37:20 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "-"
Web App Attack
2026-09-19 22:36:06
(6 hours ago)
Blocked by siteaihub.com: live autoban: immediate: /.git/config
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-19 22:35:25
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.63.114.136 (136.114.63.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.63.114.136 (136.114.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 18:35:18.701414 2026] [security2:error] [pid 4958:tid 4958] [client 34.63.114.136:52636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.naghmehfarahmand.com"] [uri "/.git/config"] [unique_id "aq8OJgx169Cby21l5Ztv8gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇱
avatiah
2026-09-19 21:53:05
(7 hours ago)
Automated block by fail2ban jail 'mystorytel-badpaths' on mystorytel.com
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 21:37:42
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.63.114.136 (136.114.63.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.63.114.136 (136.114.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 17:37:38.011500 2026] [security2:error] [pid 5911:tid 5962] [client 34.63.114.136:38220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.myrtlebeachdiet.com"] [uri "/.git/config"] [unique_id "aq8Aokxd3uHCtV8id7G7ggAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-09-19 21:21:03
(8 hours ago)
Accessed trap at '/.git/config'
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 21:07:13
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.63.114.136 (136.114.63.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.63.114.136 (136.114.63.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 17:07:06.567403 2026] [security2:error] [pid 11178:tid 11178] [client 34.63.114.136:51026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.myllc.email"] [uri "/.git/config"] [unique_id "aq75etjW8ijhO6bO5nEnegAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-19 21:05:25
(8 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack