๐ง๐ท
Peregrine
2026-06-15 03:13:37
(21 hours ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.128.118.178 172.69.165.18 - - [13/Jun/2026:05:35 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.128.118.178 172.69.165.18 - - [13/Jun/2026:05:35:50 -0300] "GET /.git/config HTTP/1.1" 404 18193
show less
Bad Web Bot
๐ณ๐ฑ
homeshowdomain.nl
2026-06-14 22:02:44
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-13.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-06-13 22:08:11
(2 days ago)
Auto-ban: >3000 req/min op 2026-06-13
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-13 17:15:05
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:14:58.544581 2026] [security2:error] [pid 26028:tid 26028] [client 34.128.118.178:39138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wcurtislloyd.com"] [uri "/.git/config"] [unique_id "ai2QEtca7pWtC6iQjjrV0gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 13:56:08
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 09:56:02.415334 2026] [security2:error] [pid 4523:tid 4523] [client 34.128.118.178:37648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clubfansite.com"] [uri "/.git/config"] [unique_id "ai1hct7nTS49aveGIwCVwwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 13:03:18
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 09:03:11.006989 2026] [security2:error] [pid 10069:tid 10069] [client 34.128.118.178:42552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genesis-one.com"] [uri "/.git/config"] [unique_id "ai1VDxDgfhlnXPet9NoopQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
TechnoSolutions CL
2026-06-13 12:02:03
(2 days ago)
34.128.118.178 - - [13/Jun/2026:12:02:00 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 ( ...
show more
34.128.118.178 - - [13/Jun/2026:12:02:00 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 9; ONEPLUS A6013) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.5 Mobile Safari/537.36"
34.128.118.178 - - [13/Jun/2026:12:02:03 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Maxthon/4.5.2"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 10:47:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 06:47:44.737577 2026] [security2:error] [pid 10739:tid 10739] [client 34.128.118.178:46860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakewoodranchhairsalon.com"] [uri "/.git/config"] [unique_id "ai01ULw3YgCH9d-b4r9J0wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-13 10:05:38
(2 days ago)
Abuse Detected (2)
Brute-Force
Web App Attack
๐ฎ๐ฉ
Burayot
2026-06-13 09:25:07
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.128.118.178 (ID/Indonesia/178.11 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.128.118.178 (ID/Indonesia/178.118.128.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
๐ง๐ท
Peregrine
2026-06-13 08:35:55
(2 days ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.128.118.178 172.69.165.18 - - [13/Jun/2026:05:35 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 34.128.118.178 172.69.165.18 - - [13/Jun/2026:05:35:50 -0300] "GET /.git/config HTTP/1.1" 404 18193
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-13 08:32:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:32:45.481949 2026] [security2:error] [pid 29637:tid 29637] [client 34.128.118.178:44424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "2002eldorado.com.theholographicseed.com"] [uri "/.git/config"] [unique_id "ai0VrZHn1sZX7WDVvWRZMAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 07:42:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:42:50.553897 2026] [security2:error] [pid 30056:tid 30126] [client 34.128.118.178:49936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelusa.us"] [uri "/.git/config"] [unique_id "ai0J-s5a6ObjrJ6tX6MjUwAAAck"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 06:15:34
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:15:27.915517 2026] [security2:error] [pid 18096:tid 18096] [client 34.128.118.178:39376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "susanleeward.com"] [uri "/.git/config"] [unique_id "aiz1fw0XHia1R5O1LmkZXgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 04:19:30
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.118.178 (178.118.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:19:24.190562 2026] [security2:error] [pid 8962:tid 8962] [client 34.128.118.178:57432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thenitecapsbluesband.craftcare.net"] [uri "/.git/config"] [unique_id "aizaTDJzBPbN0MB_2DEiJwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack