🇩🇪
pltcldvlpr
2026-09-16 06:20:33
(19 hours ago)
CMS/framework probe: 34.176.102.43 - - [16/Sep/2026:08:20:33 +0200] "GET /.git/config HTTP/1.1" 401 ...
show more
CMS/framework probe: 34.176.102.43 - - [16/Sep/2026:08:20:33 +0200] "GET /.git/config HTTP/1.1" 401 590 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" asn=396982 org="Google LLC" country=CL
...
show less
Web App Attack
2026-09-16 05:28:35
(20 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.176.102.43 (CL/Chile/43.102.176.34.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.176.102.43 (CL/Chile/43.102.176.34.bc.googleusercontent.com)
show less
SQL Injection
🇸🇪
vaia.cloud
2026-09-16 01:30:05
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇴
jad-abuse
2026-09-16 01:27:24
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup, server_status. Observed by 1 sensor(s); 170 hits.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:10:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.102.43 (43.102.176.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.102.43 (43.102.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:10:45.609938 2026] [security2:error] [pid 1583602:tid 1583602] [client 34.176.102.43:46482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swampash.lloydprins.com"] [uri "/.git/config"] [unique_id "aqm0VZTOsRyLLfxfr5AkWwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 20:46:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.102.43 (43.102.176.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.102.43 (43.102.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:46:04.208197 2026] [security2:error] [pid 21565:tid 21565] [client 34.176.102.43:42104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swaincustomdesigns.com"] [uri "/.git/config"] [unique_id "aqmujHrIMROUhkdYIo1CjAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-15 14:20:04
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 11:17:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.102.43 (43.102.176.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.102.43 (43.102.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:17:13.263879 2026] [security2:error] [pid 30149:tid 30149] [client 34.176.102.43:44262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mangamaster.hongkonger.org"] [uri "/.git/config"] [unique_id "aqkpOV3_vvJai_f8bkKC6AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-15 10:19:16
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-09-15 10:19:08
(1 day ago)
Web application attack detected.
Web App Attack
🇩🇪
LRob
2026-09-15 10:15:58
(1 day ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config | 2026-09-15 10:15 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 06:23:00
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.102.43 (43.102.176.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.102.43 (43.102.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:22:56.689565 2026] [security2:error] [pid 7789:tid 7789] [client 34.176.102.43:49114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manatawnycreekfarm.com"] [uri "/.git/config"] [unique_id "aqjkQHPq57R26yFEFHqxTQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
10dencehispahard SL
2022-06-08 23:35:07
(4 years ago)
Unauthorized login attempts [{'wordpress-xmlrpc'}]
Brute-Force
Web App Attack
🇺🇸
gu-alvareza
2022-06-08 15:56:32
(4 years ago)
WordPress.REST.API.Username.Enumeration.Information.Disclosure
Web App Attack
🇩🇪
clamehost.it
2022-06-07 21:35:57
(4 years ago)
Automatic report - Brute Force attack using this IP address
Brute-Force