🇩🇪
fritteli
2026-11-08 08:30:02
UTC ·
(4 hours ago)
[Sun Nov 08 09:30:00.251911 2026] [authz_core:error] [pid 3071346:tid 3071376] [client 34.180.51.236:57482] AH01630: client denied by server configuration: proxy:http://localhost:4000/
[Sun Nov 08 09:30:00.511927 2026] [authz_core:error] [pid 3071346 ...
show more
[Sun Nov 08 09:30:00.251911 2026] [authz_core:error] [pid 3071346:tid 3071376] [client 34.180.51.236:57482] AH01630: client denied by server configuration: proxy:http://localhost:4000/
[Sun Nov 08 09:30:00.511927 2026] [authz_core:error] [pid 3071346:tid 3071376] [client 34.180.51.236:57482] AH01630: client denied by server configuration: proxy:http://localhost:4000/
[Sun Nov 08 09:30:00.772417 2026] [authz_core:error] [pid 3071346:tid 3071376] [client 34.180.51.236:57482] AH01630: client denied by server configuration: proxy:http://localhost:4000/
[Sun Nov 08 09:30:01.099412 2026] [authz_core:error] [pid 3071346:tid 3071376] [client 34.180.51.236:57482] AH01630: client denied by server configuration: proxy:http://localhost:4000/
[Sun Nov 08 09:30:01.379983 2026] [authz_core:error] [pid 3071346:tid 3071376] [client 34.180.51.236:57482] AH01630: client denied by server configuration: proxy:http://localhost:4000/.git/config
...
show less
Brute-Force
🇨🇭
Viks
2026-11-08 06:19:53
UTC ·
(6 hours ago)
HTTP vulnerability scanning:
GET /.git/config -> 403
GET /.env -> 403
GET /.env.local -> 403
GET /.env.production -> 403
GET /.env.staging -> 403
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131. ...
show more
HTTP vulnerability scanning:
GET /.git/config -> 403
GET /.env -> 403
GET /.env.local -> 403
GET /.env.production -> 403
GET /.env.staging -> 403
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Web App Attack
🇦🇺
Klaverstyn
2026-11-08 06:01:12
UTC ·
(6 hours ago)
Excessive HTTP request rate
Web App Attack
🇦🇹
René Hickersberger
2026-11-08 05:54:30
UTC ·
(7 hours ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Web App Attack
🇵🇱
Budyn
2026-11-08 05:29:11
UTC ·
(7 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: git.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: git.astropot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇦🇺
2000cn.com.au
2026-11-06 21:40:39
UTC ·
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
ssssssssssssssssssssuper
2026-11-06 21:20:18
UTC ·
(1 day ago)
34.180.51.236 - - [06/Nov/2026:16:20:16 -0500] "GET /.git/config HTTP/1.1" 302 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.180.51.236 - - [06/Nov/2026:16:20:17 -0500] "GET /.env HTT ...
show more
34.180.51.236 - - [06/Nov/2026:16:20:16 -0500] "GET /.git/config HTTP/1.1" 302 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.180.51.236 - - [06/Nov/2026:16:20:17 -0500] "GET /.env HTTP/1.1" 302 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.180.51.236 - - [06/Nov/2026:16:20:17 -0500] "GET /.env.local HTTP/1.1" 302 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇳🇱
thedreamer.nl
2026-11-06 20:58:56
UTC ·
(1 day ago)
34.180.51.236 - - [06/Nov/2026:21:55:50 +0100] "GET / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IN" "Mumbai" "19.07480" "72.88560"
34.180.51.236 - - [06/No ...
show more
34.180.51.236 - - [06/Nov/2026:21:55:50 +0100] "GET / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IN" "Mumbai" "19.07480" "72.88560"
34.180.51.236 - - [06/Nov/2026:21:55:50 +0100] "POST / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IN" "Mumbai" "19.07480" "72.88560"
34.180.51.236 - - [06/Nov/2026:21:55:50 +0100] "POST / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IN" "Mumbai" "19.07480" "72.88560"
34.180.51.236 - - [06/Nov/2026:21:55:50 +0100] "POST / HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IN" "Mumbai" "19.07480" "72.88560"
34.180.51.236 - - [06/Nov/2026:21:55:51 +0100] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozil
...
show less
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-06 16:53:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.180.51.236 (236.51.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:53:49.021186 2026] [security2:error] [pid 5479:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.51.236 (236.51.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:53:49.021186 2026] [security2:error] [pid 5479:tid 5479] [client 34.180.51.236:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindmaterial.io"] [uri "/.git/config"] [unique_id "au4GHdVMt7FIiBNgIdsYWQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-06 16:38:36
UTC ·
(1 day ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.180.51.236 - - [06/Nov/2026:17:38:17 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.180.51.236 - - [06/Nov/2026:17:38:17 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:07:11
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.180.51.236 (236.51.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:07:06.825227 2026] [security2:error] [pid 1770776:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.51.236 (236.51.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:07:06.825227 2026] [security2:error] [pid 1770776:tid 1770784] [client 34.180.51.236:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindgardens.com"] [uri "/.git/config"] [unique_id "au37KqddhVHeecZqtvzsYwAAAYU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
lns.bz
2026-11-06 12:31:44
UTC ·
(2 days ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇫🇷
bazter.pro
2026-11-06 11:47:23
UTC ·
(2 days ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇺🇸
not_hanjo_mei
2026-11-06 09:45:07
UTC ·
(2 days ago)
Scanning for exposed credential files (.env, .git, cloud keys): 268 requests in 24h.
Hacking
Web App Attack
🇬🇧
Apache
2026-11-06 00:33:00
UTC ·
(2 days ago)
(mod_security) mod_security (id:920500) triggered by 34.180.51.236 (IN/India/236.51.180.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
Brute-Force
Web App Attack