๐ซ๐ท
spot
2026-10-16 19:20:45
(3 hours ago)
34.159.84.71 - - [16/Oct/2026:20:20:43 +0100] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 ( ...
show more
34.159.84.71 - - [16/Oct/2026:20:20:43 +0100] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Hacking
Anonymous
2026-10-16 18:00:03
(4 hours ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 15:40:22
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:40:15.807385 2026] [security2:error] [pid 27795:tid 27795] [client 34.159.84.71:58740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cayman-boat-registration.com"] [uri "/.git/config"] [unique_id "atJFXzxQ68pH6El7TnEnfQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
zynex
2026-10-16 12:49:36
(9 hours ago)
URL Probing: /.env
Web App Attack
๐ฉ๐ช
Hazzard
2026-10-16 12:09:21
(10 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐ฟ๐ฆ
conure.sh
2026-10-16 12:07:52
(10 hours ago)
csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 6s
Web App Attack
Anonymous
2026-10-16 11:54:31
(10 hours ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-16 05:35:02
(16 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-16 05:35:01
(16 hours ago)
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.159.84.71 - - [16/Oct/2026:07:34:52 +0200] "GET /.git/config HTTP/1.1" 403 2145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 05:30:09
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:30:03.434731 2026] [security2:error] [pid 11081:tid 11081] [client 34.159.84.71:53032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catnameslist.com"] [uri "/.git/config"] [unique_id "atG2W13FuHujBG2L6p0IyQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
Origon
2026-10-16 05:22:41
(17 hours ago)
http-sensitive-files - IP: 34.159.84.71 - time="2026-10-16T07:22:41+02:00" level=info msg="(555f66b ...
show more
http-sensitive-files - IP: 34.159.84.71 - time="2026-10-16T07:22:41+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.159.84.71 (DE/396982) : 4h ban on Ip 34.159.84.71" module=db
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 05:06:42
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:06:38.651072 2026] [security2:error] [pid 2592:tid 2609] [client 34.159.84.71:40652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catislandrentals.com.nicholsinvest.com"] [uri "/.git/config"] [unique_id "atGw3ugt1PRCf6XHzRzwaQAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 04:23:40
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 00:23:35.277381 2026] [security2:error] [pid 24846:tid 24846] [client 34.159.84.71:53358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catholicshopper.com"] [uri "/.git/config"] [unique_id "atGmx0-ic6wjSu_L4FPO0gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-16 03:33:58
(18 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 03:33:14
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.159.84.71 (71.84.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:33:08.140822 2026] [security2:error] [pid 17963:tid 17963] [client 34.159.84.71:34770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catherineclayton.com"] [uri "/.git/config"] [unique_id "atGa9KOAh3bFke8mIFKgPgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack