๐ฎ๐ณ
evicky2002
2026-09-18 06:00:02
(40 minutes ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ณ๐ฑ
Alt255
2026-09-18 05:39:49
(1 hour ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.51.188.184 - - \[18/Sep/2026:07:39:40 +0200\] "GET /.git/config HTTP/1.1" 301 620 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
debestelapp
2026-09-18 05:00:13
(1 hour ago)
Web App Attack
Anonymous
2026-09-18 02:37:55
(4 hours ago)
2026/09/18 04:37:54 [error] 2433725#2433725: *36282 access forbidden by rule, client: 34.51.188.184, ...
show more
2026/09/18 04:37:54 [error] 2433725#2433725: *36282 access forbidden by rule, client: 34.51.188.184, server: sahpa.co.za, request: "GET /.git/config HTTP/1.1", host: "sahpa.co.za"
2026/09/18 04:37:54 [error] 2433725#2433725: *36282 access forbidden by rule, client: 34.51.188.184, server: sahpa.co.za, request: "GET /.env HTTP/1.1", host: "sahpa.co.za"
2026/09/18 04:37:55 [error] 2433725#2433725: *36282 access forbidden by rule, client: 34.51.188.184, server: sahpa.co.za, request: "GET /.env.local HTTP/1.1", host: "sahpa.co.za"
...
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-18 02:06:23
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.51.188.184 (184.188.51.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.188.184 (184.188.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 22:06:19.270630 2026] [security2:error] [pid 31830:tid 31830] [client 34.51.188.184:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sahinozalit.com"] [uri "/.git/config"] [unique_id "aqycm4LmPFdYO71iFzap9gAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-18 01:34:11
(5 hours ago)
Bot / seems abusive / Apache connections: 22
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
๐จ๐ญ
sternwart
2026-09-17 23:54:48
(6 hours ago)
Automatisch erkannt: Zugriff auf /.git/config (ict-fachassessment.ch)
Web App Attack
Bad Web Bot
๐ง๐ท
dominioz
2026-09-17 23:23:52
(7 hours ago)
2026-09-17 23:23:36 GET /.git/config - - 34.51.188.184 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS ...
show more
2026-09-17 23:23:36 GET /.git/config - - 34.51.188.184 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 618
2026-09-17 23:23:36 GET /.env - - 34.51.188.184 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 623
2026-09-17 23:23:38 GET /.env.local - - 34.51.188.184 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 635
2026-09-17 23:23:39 GET /.env.production - - 34.51.188.184 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 645
2026-09-17 23:23:39 GET /.env.staging - - 34.51.188.184 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 639
...
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-17 23:10:59
(7 hours ago)
Excessive 404/403 errors
Brute-Force
๐ฌ๐ง
Apache
2026-09-17 20:57:49
(9 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.51.188.184 (SE/Sweden/184.188.51.34.bc.googl ...
show more
(mod_security) mod_security (id:210730) triggered by 34.51.188.184 (SE/Sweden/184.188.51.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
๐จ๐ฟ
SystemAdmin
2026-09-17 20:30:49
(10 hours ago)
Doing bad things...
Bad Web Bot
๐ซ๐ท
dynamix
2026-09-17 20:14:56
(10 hours ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
konseptit
2026-09-17 19:06:20
(11 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.51.188.184 (SE/Sweden/184.188.51.34. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.51.188.184 (SE/Sweden/184.188.51.34.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
2026-09-17 18:24:31
(12 hours ago)
Aggressive web scan
Web App Attack
๐ซ๐ฎ
paissangroup
2026-09-17 17:35:01
(13 hours ago)
Multiple WAF Violations
Web App Attack