🇮🇩
penjaga BRIN
2026-09-29 17:59:36
(20 hours ago)
Suspicious malicious activity
Hacking
🇺🇸
TPI-Abuse
2026-09-29 17:47:18
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.126.78.133 (133.78.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.78.133 (133.78.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 13:47:13.648455 2026] [security2:error] [pid 9901:tid 10083] [client 34.126.78.133:45470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.legaljob.org.aafm.us"] [uri "/.git/config"] [unique_id "arv5oXb1S3puNcQ6bcmkCAAAAdc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 12:14:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.78.133 (133.78.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.78.133 (133.78.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:14:37.603698 2026] [security2:error] [pid 21584:tid 21584] [client 34.126.78.133:56944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asermaq.cl"] [uri "/.git/config"] [unique_id "arurrTsM6qJ6wZPKeiilQAAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-28 04:30:05
(2 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.goblinpot.online | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-09-27 15:59:01
(2 days ago)
2026/09/27 16:58:32 [error] 2462#2462: *360414 access forbidden by rule, client: 34.126.78.133, serv ...
show more
2026/09/27 16:58:32 [error] 2462#2462: *360414 access forbidden by rule, client: 34.126.78.133, server: [redacted], request: "GET /autodiscover.xml/.env HTTP/1.1", host: "[redacted]"
2026/09/27 16:58:59 [error] 2462#2462: *360414 access forbidden by rule, client: 34.126.78.133, server: [redacted], request: "GET /autodiscover.xml/app/.env HTTP/1.1", host: "[redacted]"
2026/09/27 16:59:00 [error] 2462#2462: *360414 access forbidden by rule, client: 34.126.78.133, server: [redacted], request: "GET /autodiscover.xml/apps/.env HTTP/1.1", host: "[redacted]"
show less
Brute-Force
Web App Attack
🇸🇬
simpeg-adm.bandung.go.id
2026-09-27 04:12:23
(3 days ago)
27/Sep/2026:04:12:22 +0000;34.126.78.133;"/.git/config"
27/Sep/2026:04:12:22 +0000;34.126.78.133;"/" ...
show more
27/Sep/2026:04:12:22 +0000;34.126.78.133;"/.git/config"
27/Sep/2026:04:12:22 +0000;34.126.78.133;"/"
27/Sep/2026:04:12:23 +0000;34.126.78.133;"/.env"
27/Sep/2026:04:12:23 +0000;34.126.78.133;"/.env.local"
27/Sep/2026:04:12:23 +0000;34.126.78.133;"/.env.production"
27/Sep/2026:04:12:23 +0000;34.126.78.133;"/.env.staging"
27/Sep/2026:04:12:23 +0000;34.126.78.133;"/.env.development"
...
show less
Web Spam
Brute-Force
Web App Attack
🇩🇪
ghostwarriors
2026-09-27 03:20:08
(3 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-09-26 13:20:28
(4 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
2026-09-26 12:50:03
(4 days ago)
| [Dangerous/Singapore] Aggressive IP 34.126.78.133 (~30 hits). Type: DoS Defender- Web server 400 e ...
show more
| [Dangerous/Singapore] Aggressive IP 34.126.78.133 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇩🇪
FD-IX
2026-09-26 07:01:26
(4 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-25 05:07:29
(5 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇦
URAN Publishing Service
2026-09-25 02:43:39
(5 days ago)
[25/Sep/2026:05:43:38 +0300] -- 34.126.78.133 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[25/Sep/2026:05:43:38 +0300] -- 34.126.78.133 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇩🇪
filstal.org
2026-09-24 16:44:04
(5 days ago)
Web exploit or injection attempt blocked by ModSecurity WAF.
SQL Injection
Web App Attack
2026-09-24 00:33:44
(6 days ago)
[server.tmg.gr] httpd-config-scan: sites=www.arrhythmiasinstitute.gr; logs=/var/log/httpd/domains/ar ...
show more
[server.tmg.gr] httpd-config-scan: sites=www.arrhythmiasinstitute.gr; logs=/var/log/httpd/domains/arrhythmiasinstitute.gr.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
🇩🇪
Blexyel
2026-09-21 22:10:03
(1 week ago)
34.126.78.133 - - [22/Sep/2026:00:10:03 +0200] "GET /.git/config HTTP/1.1" 404 22 "-" "Mozilla/5.0 ( ...
show more
34.126.78.133 - - [22/Sep/2026:00:10:03 +0200] "GET /.git/config HTTP/1.1" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "api.neko.fomx.gay"
...
show less
Brute-Force
Web App Attack