๐บ๐ธ
TPI-Abuse
2026-09-28 10:10:37
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:10:31.849086 2026] [security2:error] [pid 13715:tid 13715] [client 34.128.83.101:46640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wm.gisur.com"] [uri "/.git/config"] [unique_id "aro9F45u6eFH-wQuama97wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-28 09:20:02
(4 weeks ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 09:04:09
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 05:04:05.734542 2026] [security2:error] [pid 13930:tid 13930] [client 34.128.83.101:40088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwipapuri-abadi.com"] [uri "/.git/config"] [unique_id "arothX3ZXVlN__ebFh0iHwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 05:51:10
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 01:51:04.450828 2026] [security2:error] [pid 12962:tid 12962] [client 34.128.83.101:51656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wl7ba.lbee.com"] [uri "/.git/config"] [unique_id "aroASDEajVXBH1RPPEhM3wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-28 03:28:47
(4 weeks ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
Mangelot Hosting
2026-09-27 18:58:18
(4 weeks ago)
(modsecurity) srv104 ModSecurity 34.128.83.101 (ID/Indonesia/101.83.128.34.bc.googleusercontent.com) ...
show more
(modsecurity) srv104 ModSecurity 34.128.83.101 (ID/Indonesia/101.83.128.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 21:21:24
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 17:21:18.808476 2026] [security2:error] [pid 5131:tid 5131] [client 34.128.83.101:52972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendeeholtcamp.wendeenicole.com"] [uri "/.git/config"] [unique_id "arblziHZ210ODYHdt0U3rAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
pipeline.es
2026-09-25 20:35:31
(1 month ago)
Web scanning / probing for vulnerable paths | URL: /403.shtml | Evidence: weluxtravel.com 34.128.83. ...
show more
Web scanning / probing for vulnerable paths | URL: /403.shtml | Evidence: weluxtravel.com 34.128.83.101 - - [25/Sep/2026:22:34:19 +0200] \"GET /403.shtml HTTP/1.1\" 404 20525 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=ID | ASN: GOOGLE-CLOUD-PLATFORM | Country: ID
show less
Port Scan
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-24 09:00:09
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-23 15:25:31
(1 month ago)
Excessive multi-domain requests
Brute-Force
๐ฆ๐บ
AWW-Admin
2026-09-23 09:36:28
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 34.128.83.101 (ID/Indonesia/101.83.128. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.128.83.101 (ID/Indonesia/101.83.128.34.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-09-22 00:17:37
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 20:17:33.586046 2026] [security2:error] [pid 4780:tid 4780] [client 34.128.83.101:57354] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.willowriver3.artfranz.com"] [uri "/.git/config"] [unique_id "arHJHZC8KY1sZ-ddcXli2wAAAHA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 00:06:48
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 23:18:31
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:18:23.787892 2026] [security2:error] [pid 30986:tid 30986] [client 34.128.83.101:43386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.willmarksynthetics.cosentient.com"] [uri "/.git/config"] [unique_id "arG7P9jn9vsm2cuSKUtJhgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 21:35:01
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.83.101 (101.83.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:34:56.396772 2026] [security2:error] [pid 764190:tid 764190] [client 34.128.83.101:47562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.williamfitzsimmons.com"] [uri "/.git/config"] [unique_id "arGjAGQHBMxD0flVvJWkrwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack