π΅π±
Budyn
2026-09-30 04:40:37
(5 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: apm.astropot.online | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-29 18:05:51
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.158.58.223 (223.58.158.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.158.58.223 (223.58.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 14:05:48.191786 2026] [security2:error] [pid 18299:tid 18318] [client 34.158.58.223:54924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedpoliticalscientist.com.aafm.us"] [uri "/.git/config"] [unique_id "arv9_DpZUcoQceZXg7uwegAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
Blexyel
2026-09-29 12:59:10
(5 days ago)
34.158.58.223 - - [29/Sep/2026:14:59:09 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ...
show more
34.158.58.223 - - [29/Sep/2026:14:59:09 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
π³π±
Site.eu
2026-09-28 14:28:54
(6 days ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-09-27 03:07:41
(1 week ago)
34.158.58.223 - - [27/Sep/2026:03:07:40 +0000] "GET /.git/config HTTP/1.1" 404 31891 "-" "Mozilla/5. ...
show more
34.158.58.223 - - [27/Sep/2026:03:07:40 +0000] "GET /.git/config HTTP/1.1" 404 31891 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π·π΄
clauss
2026-09-26 10:54:24
(1 week ago)
34.158.58.223 - - [26/Sep/2026:13:54:23 +0300] "GET /phpinfo.php HTTP/2.0" 301 276 "-" "Mozilla/5.0 ...
show more
34.158.58.223 - - [26/Sep/2026:13:54:23 +0300] "GET /phpinfo.php HTTP/2.0" 301 276 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.158.58.223 - - [26/Sep/2026:13:54:23 +0300] "GET /info.php HTTP/2.0" 301 276 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
π³π±
Alt255
2026-09-26 07:33:44
(1 week ago)
[rdbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example ...
show more
[rdbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.158.58.223 - - [26/Sep/2026:09:33:31 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-25 18:58:38
(1 week ago)
IP matched detection query many 3xx errors.
Brute-Force
Anonymous
2026-09-25 18:42:41
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
π¬π§
Apache
2026-09-25 16:18:49
(1 week ago)
(mod_security) mod_security (id:920500) triggered by 34.158.58.223 (SG/Singapore/223.58.158.34.bc.go ...
show more
(mod_security) mod_security (id:920500) triggered by 34.158.58.223 (SG/Singapore/223.58.158.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
π³π±
Site.eu
2026-09-25 01:19:55
(1 week ago)
Excessive 404/403 errors
Brute-Force
π©πͺ
big-cloud.nl
2026-09-24 00:53:32
(1 week ago)
Try to access /.git/config
Web App Attack
π«π·
masterguru
2026-09-22 09:20:58
(1 week ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-21 23:36:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.158.58.223 (223.58.158.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.158.58.223 (223.58.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:35:59.884098 2026] [security2:error] [pid 5401:tid 5401] [client 34.158.58.223:52964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aprilparks.boaredraven.com"] [uri "/.git/config"] [unique_id "arG_X2yaWDq6gMo15qQm9QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
robotstxt
2026-09-21 22:13:52
(1 week ago)
34.158.58.223 - - [21/Sep/2026:22:12:50 +0000] "GET /.env HTTP/1.1" 403 16913 "-" "Mozilla/5.0 (Maci ...
show more
34.158.58.223 - - [21/Sep/2026:22:12:50 +0000] "GET /.env HTTP/1.1" 403 16913 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.158.58.223"
34.158.58.223 - - [21/Sep/2026:22:12:51 +0000] "GET /.env.local HTTP/1.1" 403 16913 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.158.58.223"
34.158.58.223 - - [21/Sep/2026:22:12:52 +0000] "GET /.env.production HTTP/1.1" 403 16913 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.158.58.223"
34.158.58.223 - - [21/Sep/2026:22:12:53 +0000] "GET /.env.staging HTTP/1.1" 403 16913 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.158.58.223"
34.158.58.223 - - [21/Sep/2026:22:12:54 +0000] "GET /.env.developme
...
show less
Web App Attack