🇬🇧
openstrike.co.uk
2026-07-07 05:15:27
(4 hours ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-07-06 21:42:00
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.73.217.140 (140.217.73.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.73.217.140 (140.217.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:41:55.697937 2026] [security2:error] [pid 32485:tid 32485] [client 34.73.217.140:50098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sutherlandyogastudio.com"] [uri "/.git/config"] [unique_id "akwhI8mX11033zBlOENcMAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-06 21:39:18
(12 hours ago)
34.73.217.140 - - [07/Jul/2026:05:39:17 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "-"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 21:25:34
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.73.217.140 (140.217.73.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.73.217.140 (140.217.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:25:29.440915 2026] [security2:error] [pid 2594:tid 2594] [client 34.73.217.140:47100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "susanoneill.us"] [uri "/.git/config"] [unique_id "akwdSesWUpU1o1U8fTcUrwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-06 21:17:43
(12 hours ago)
Honey Pot Hit / Attack Vector found!
Port Scan
Hacking
Web App Attack
🇫🇮
inlink.ltd
2026-07-06 21:08:21
(12 hours ago)
dot file probe
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 21:02:13
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.73.217.140 (140.217.73.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.73.217.140 (140.217.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:02:08.130327 2026] [security2:error] [pid 16100:tid 16100] [client 34.73.217.140:42610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "surf-sci-eng.com"] [uri "/.git/config"] [unique_id "akwX0O_usfK-bG503O6cHQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-06 21:00:08
(13 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇳🇴
jad-abuse
2026-07-06 20:33:55
(13 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits.
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-07-06 20:33:13
(13 hours ago)
[Tue Jul 07 06:33:11.614461 2026] [security2:error] [pid 159552] [client 34.73.217.140:55810] [clien ...
show more
[Tue Jul 07 06:33:11.614461 2026] [security2:error] [pid 159552] [client 34.73.217.140:55810] [client 34.73.217.140] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "support.paulshipley.com.au"] [uri "/.git/config"] [unique_id "akwRBxtyrlGtiv8MmRYzpQAAAAc"]
...
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-07-06 20:21:53
(13 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇫🇮
as211431.net
2026-07-06 20:18:49
(13 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
UA: Empty string
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-06 20:18:07
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.73.217.140 (140.217.73.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.73.217.140 (140.217.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 16:17:59.463154 2026] [security2:error] [pid 23393:tid 23393] [client 34.73.217.140:38686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "supportconvalelementary.com"] [uri "/.git/config"] [unique_id "akwNd0JleSZv9UiU_nIy6gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
interbiznw.com
2026-07-06 20:16:05
(13 hours ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇩🇪
Ba-Yu
2026-07-06 20:12:39
(13 hours ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack