🇺🇸
stdcout9090
2026-10-17 09:56:06
(5 hours ago)
AetherGuard WAF blocked: Matched phrase "/.git/" at REQUEST_URI.
Target: management.aetherguard.xyz/ ...
show more
AetherGuard WAF blocked: Matched phrase "/.git/" at REQUEST_URI.
Target: management.aetherguard.xyz/.git/config
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-16 22:01:08
(17 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-15.
show less
Web App Attack
SSH
Hacking
🇧🇪
cmbplf
2026-10-16 01:32:33
(1 day ago)
1.607 requests with url.path */.git/config
471 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇬🇧
andypiper
2026-10-16 01:02:32
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇨🇿
ddw
2026-10-16 00:58:20
(1 day ago)
ModSecurity detection - Rules: 930130(Restricted File Access Attempt)
Web App Attack
🇫🇷
baphomet
2026-10-16 00:56:57
(1 day ago)
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show more
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-10-16T00:56:57Z sensor=fail2ban role=web-canary
src=34.178.2.102
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 00:48:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.178.2.102 (102.2.178.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.2.102 (102.2.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:48:07.461926 2026] [security2:error] [pid 4845:tid 4845] [client 34.178.2.102:41906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manueltoren.com.dandemonium.net"] [uri "/.git/config"] [unique_id "atF0R7HfUiZbkzyWTMGzvgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-10-16 00:45:35
(1 day ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after sensitive config/credentials exposure probe. Evidence: AttackPattern: /\.git (Match: /.git)
show less
Hacking
Brute-Force
Web App Attack
🇺🇦
Olexiy Backend
2026-10-16 00:33:41
(1 day ago)
34.178.2.102
...
Bad Web Bot
Web App Attack
2026-10-16 00:30:49
(1 day ago)
34.178.2.102 - - [16/Oct/2026:08:30:48 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "-"
...
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-16 00:29:57
(1 day ago)
Try to access /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 00:22:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.178.2.102 (102.2.178.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.2.102 (102.2.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:22:13.240110 2026] [security2:error] [pid 5200:tid 5200] [client 34.178.2.102:39290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manichri.com"] [uri "/.git/config"] [unique_id "atFuNWWHOKSEBdCbbgvFKwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
emandell
2026-10-16 00:11:59
(1 day ago)
Requests / Checking for common exploitable paths
Web Spam
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 00:01:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.178.2.102 (102.2.178.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.2.102 (102.2.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 20:01:47.986214 2026] [security2:error] [pid 10242:tid 10242] [client 34.178.2.102:44822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manatawnycreekfarm.com"] [uri "/.git/config"] [unique_id "atFpa9D26CJeARre5TA_9QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Trueforce Threat Report
2026-10-15 23:50:42
(1 day ago)
Automated report, trolling for resource vulnerabilities
Bad Web Bot
Web App Attack