๐ณ๐ฑ
Cloud86 B.V.
2026-10-01 18:46:06
(1 week ago)
categories: Email Spam
Email Spam
๐บ๐ธ
raymarron.com
2026-09-30 13:43:29
(1 week ago)
/.git/config (x2)
Web App Attack
๐ฉ๐ช
klaus_ph
2026-09-27 04:54:30
(2 weeks ago)
2026-09-26 01:34:15,635 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.177.96.31
...
Bad Web Bot
๐บ๐ธ
craudiovizai
2026-09-24 12:30:41
(2 weeks ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked a ...
show more
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked at the edge.
show less
Web App Attack
Bad Web Bot
๐ฎ๐ณ
evicky2002
2026-09-24 06:00:03
(2 weeks ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-09-23 22:49:29
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.177.96.31 (31.96.177.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.96.31 (31.96.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 18:49:23.171587 2026] [security2:error] [pid 18603:tid 18603] [client 34.177.96.31:49750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rdhtrucking.com"] [uri "/.git/config"] [unique_id "arRXczKq8r5lKHTJGNLABwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ฐ
ScamAware
2026-09-23 22:35:29
(2 weeks ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack
๐ฉ๐ช
Hary74656
2026-09-23 22:27:02
(2 weeks ago)
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.177.96.31] [realclient ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.177.96.31] [realclient 34.177.96.31] [24/Sep/2026:00:27:01 +0200] [vhost schani.hostmi.at] 403 "GET /.git/config HTTP/1.1"
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 22:09:13
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.177.96.31 (31.96.177.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.96.31 (31.96.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 18:09:05.877665 2026] [security2:error] [pid 26300:tid 26300] [client 34.177.96.31:60442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rcrgalicia.com"] [uri "/.git/config"] [unique_id "arROARwZ7HfGXQybsHn3XQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-23 22:07:03
(2 weeks ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-09-23 21:27:41.
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-23 22:05:24
(2 weeks ago)
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.177.96.31 - - \[24/Sep/2026:00:05:04 +0200\] "GET /.git/config HTTP/1.1" 301 5742 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
lnklnx
2026-09-23 22:02:17
(2 weeks ago)
www.rcmeal.com:443 34.177.96.31 - - [23/Sep/2026:17:02:14 -0500] "GET /.git/config HTTP/1.1" 404 473 ...
show more
www.rcmeal.com:443 34.177.96.31 - - [23/Sep/2026:17:02:14 -0500] "GET /.git/config HTTP/1.1" 404 4733 "-" "-"
...
show less
Web App Attack
๐จ๐ฆ
polycoda
2026-09-23 21:49:33
(2 weeks ago)
AutoBlock: โ๏ธ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
๐ง๐ท
borbolla
2026-09-23 21:46:22
(2 weeks ago)
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /.git/config HTTP/1.1"
Web App Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-23 21:45:43
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.177.96.31 (31.96.177.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.177.96.31 (31.96.177.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 17:45:37.156139 2026] [security2:error] [pid 27751:tid 27751] [client 34.177.96.31:42778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rcain3.cain2016.org"] [uri "/.git/config"] [unique_id "arRIgeAtda3kYVrQj3vltwAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack