๐ณ๐ด
tmiland
2026-10-21 02:05:08
(17 hours ago)
(nginx_404) Dot directory Honeypot Trap 34.159.255.124 (DE/Germany/124.255.159.34.bc.googleuserconte ...
show more
(nginx_404) Dot directory Honeypot Trap 34.159.255.124 (DE/Germany/124.255.159.34.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 34.159.255.124; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.159.255.124 - - [21/Oct/2026:04:05:01 +0200] "GET /.git/config HTTP/1.1" 404 3232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.159.255.124 - - [21/Oct/2026:04:05:01 +0200] "GET /.env HTTP/1.1" 404 3232 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Brute-Force
๐ซ๐ท
masterguru
2026-10-21 00:40:32
(18 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-21 00:06:17
(19 hours ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-20 17:29:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.255.124 (124.255.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.255.124 (124.255.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:29:38.416404 2026] [security2:error] [pid 18762:tid 18762] [client 34.159.255.124:57858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coastalpirates.com"] [uri "/.git/config"] [unique_id "atelAlUaKRWrPGGz0lPzcQAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
interbiznw.com
2026-10-20 16:45:10
(1 day ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 15:49:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.255.124 (124.255.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.255.124 (124.255.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 11:49:13.253284 2026] [security2:error] [pid 22988:tid 22988] [client 34.159.255.124:60662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coast-consult.com"] [uri "/.git/config"] [unique_id "ateNeawSHNvCeIXGH2nZXgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 15:23:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.159.255.124 (124.255.159.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.255.124 (124.255.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 11:23:49.776321 2026] [security2:error] [pid 29227:tid 29227] [client 34.159.255.124:52704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coalminer.com"] [uri "/.git/config"] [unique_id "ateHhRQlOyWF6I9tu1VGGQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-10-20 15:23:48
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 34.159.255.124 (DE/Germany/124.255.159.34.bc.go ...
show more
(mod_security) mod_security (id:949110) triggered by 34.159.255.124 (DE/Germany/124.255.159.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ง๐ช
cmbplf
2026-10-20 14:59:43
(1 day ago)
9.761 4xx requests in 1 hour (1w6d15h)
Brute-Force
Bad Web Bot
๐ณ๐ฑ
e.fierstra
2026-10-20 13:48:29
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 11:44:18
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
sternwart
2026-10-20 11:41:32
(1 day ago)
Automatisch erkannt: Zugriff auf /.git/config (coaching-planet.ch)
Web App Attack
Bad Web Bot
๐ณ๐ฑ
ConsulHosting
2026-10-20 11:33:23
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-20 10:22:44
(1 day ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.159.255.124 - - [20/Oct/2026:12:22:34 +0200] "GET /.git/config HTTP/1.1" 503 7795 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 09:24:19
(1 day ago)
Excessive multi-domain requests
Brute-Force