🇩🇪
grassau.com
2026-09-17 03:25:10
(17 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.16.219.30 (US/United States/Nevada/L ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.16.219.30 (US/United States/Nevada/Las Vegas/30.219.16.34.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
filstal.org
2026-09-17 03:16:51
(17 hours ago)
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ...
show more
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths.
show less
Hacking
Brute-Force
Web App Attack
🇳🇱
middelkoopcc
2026-09-17 03:11:01
(17 hours ago)
2026-09-17 05:09:30 GET /.git/config [301] && 2026-09-17 05:09:30 GET /.env [301] && 2026-09-17 05:0 ...
show more
2026-09-17 05:09:30 GET /.git/config [301] && 2026-09-17 05:09:30 GET /.env [301] && 2026-09-17 05:09:31 GET /.env.bak [301] && 161 more within 20 minutes
show less
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-17 02:45:21
(18 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.16.219.30 (US/United States/30.219.16.34.bc. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.16.219.30 (US/United States/30.219.16.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 02:22:58
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:22:50.688460 2026] [security2:error] [pid 22781:tid 22781] [client 34.16.219.30:46866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forwardfusion.co"] [uri "/.git/config"] [unique_id "aqtO-vQo8pM97kRybA-ragAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-17 02:06:38
(18 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: forum.sweetpuddingtrap.top | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-16 17:31:44
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-16 17:31:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:31:36.415289 2026] [security2:error] [pid 27621:tid 27621] [client 34.16.219.30:36084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bicaco.com"] [uri "/.git/config"] [unique_id "aqrSeLfFMmPVKE77ggdC_QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
dominioz
2026-09-16 15:23:41
(1 day ago)
2026-09-16 15:23:23 GET /.env - - 34.16.219.30 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15 ...
show more
2026-09-16 15:23:23 GET /.env - - 34.16.219.30 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 587
2026-09-16 15:23:24 GET /.env.local - - 34.16.219.30 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 599
2026-09-16 15:23:26 GET /.env.production - - 34.16.219.30 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 609
2026-09-16 15:23:26 GET /.env.staging - - 34.16.219.30 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 603
2026-09-16 15:23:27 GET /.env.development - - 34.16.219.30 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 611
2026-09-16 15:23:28 GET /.env.test - - 34.1
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 13:54:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:53:54.915214 2026] [security2:error] [pid 19406:tid 19433] [client 34.16.219.30:44222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bhsclassof68.info"] [uri "/.git/config"] [unique_id "aqqfcnFyyJRQrflL08eE7wAAANg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 12:44:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:44:25.458000 2026] [security2:error] [pid 26001:tid 26001] [client 34.16.219.30:50138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bhartman.com"] [uri "/.git/config"] [unique_id "aqqPKXR_53RA_bmqoHGwKwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 11:41:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 07:41:46.310987 2026] [security2:error] [pid 15467:tid 15467] [client 34.16.219.30:38774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bradsalerno.com.winwithbrad.com"] [uri "/.git/config"] [unique_id "aqqAei58YzZEuFW83kmefwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-09-16 11:13:57
(1 day ago)
Repeated requests for suspicious nonexistent URLs, for example: /.env.staging (HTTP/1.1 port 443, us ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /.env.staging (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 10:58:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.219.30 (30.219.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:58:15.925154 2026] [security2:error] [pid 17998:tid 17998] [client 34.16.219.30:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bradleybarefoot.com"] [uri "/.git/config"] [unique_id "aqp2R_3gc1X778-Pmp7I4wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
ToJa
2026-09-16 08:53:38
(1 day ago)
Web App Attack, ModSecurity blocked:
2026/09/16 10:53:36 [error] 360525#360525: *9 [client 34.16.219 ...
show more
Web App Attack, ModSecurity blocked:
2026/09/16 10:53:36 [error] 360525#360525: *9 [client 34.16.219.30] ModSecurity: Access denied with code 403 (phase 2). [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] request: "POST / HTTP/1.1"
show less
Web App Attack