๐บ๐ธ
TPI-Abuse
2026-09-27 03:38:27
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 23:38:22.261792 2026] [security2:error] [pid 10806:tid 10806] [client 34.141.233.210:33192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jodstar.com"] [uri "/.git/config"] [unique_id "ariPrnycizSsRhBLLPGVtwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-09-26 07:22:41
(21 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 17:06:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 13:05:59.558174 2026] [security2:error] [pid 19378:tid 19378] [client 34.141.233.210:53860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "natashahenry.co.uk"] [uri "/.git/config"] [unique_id "arap98JCekG5zabIl17WlQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
ketovoila.pl
2026-09-23 12:23:55
(3 days ago)
ketovoila.pl web app secret/repository scan: hits=247; unique_paths=27; sample_paths=/.env.backup1,/ ...
show more
ketovoila.pl web app secret/repository scan: hits=247; unique_paths=27; sample_paths=/.env.backup1,/.env.bak,/.git/config; UA="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"; window=2026-09-23T12:23:55Z..2026-09-23T12:23:59Z HTTP methods: GET (245),POST (2).
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-09-23 10:57:34
(3 days ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/210.233.141.34.bc.googleuserconte ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/210.233.141.34.bc.googleusercontent.com
show less
Web App Attack
๐จ๐ฆ
Anytech
2026-09-23 10:54:09
(3 days ago)
Blocked by ConnMonitor
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-22 22:06:38
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-21.
show less
Web App Attack
SSH
Hacking
๐ต๐ฑ
Budyn
2026-09-21 20:46:09
(5 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: keycloak.sweetpuddingtrap.online | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-09-21 20:18:33
(5 days ago)
Login credentials theft attempt
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-21 19:07:02
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:06:58.421587 2026] [security2:error] [pid 8124:tid 8124] [client 34.141.233.210:38012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathiepontinen.com"] [uri "/.git/config"] [unique_id "arGAUsyjFQF0koKomCLl5AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-09-21 17:29:44
(5 days ago)
34.141.233.210 - - [21/Sep/2026:17:29:08 +0000] "POST / HTTP/1.1" 403 20088 "-" "Mozilla/5.0 (Macint ...
show more
34.141.233.210 - - [21/Sep/2026:17:29:08 +0000] "POST / HTTP/1.1" 403 20088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.233.210"
34.141.233.210 - - [21/Sep/2026:17:29:08 +0000] "POST / HTTP/1.1" 403 20088 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.233.210"
34.141.233.210 - - [21/Sep/2026:17:29:09 +0000] "GET /.git/config HTTP/1.1" 403 16278 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.233.210"
34.141.233.210 - - [21/Sep/2026:17:29:09 +0000] "GET /.env HTTP/1.1" 403 16278 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.141.233.210"
34.141.233.210 - - [21/Sep/2026:17:29:10 +0000] "GET /.env.local HTTP/1.1" 403 1629
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 15:12:58
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 11:12:50.519717 2026] [security2:error] [pid 3552:tid 3552] [client 34.141.233.210:51138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kateshendge.com.sigi.biz"] [uri "/.git/config"] [unique_id "arFJcqqsr8nHMCv5BiRT9gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-21 14:47:28
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 14:10:38
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.233.210 (210.233.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 10:10:32.119380 2026] [security2:error] [pid 9880:tid 9880] [client 34.141.233.210:52692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "katemcleod.net"] [uri "/.git/config"] [unique_id "arE62L9c22tqdHcxV8O7uwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-20 19:10:04
(6 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack