๐บ๐ธ
TPI-Abuse
2026-09-16 02:07:23
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.18.49.217 (217.49.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.49.217 (217.49.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:07:19.466538 2026] [security2:error] [pid 1048:tid 1048] [client 34.18.49.217:36598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamplonaserviciotecnico.ayudaclic.com"] [uri "/.git/config"] [unique_id "aqn5110RPuYI7glqj32ocwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 00:12:29
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.18.49.217 (217.49.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.49.217 (217.49.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:12:24.414054 2026] [security2:error] [pid 4208:tid 4208] [client 34.18.49.217:57162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamelaweisberg.com"] [uri "/.git/config"] [unique_id "aqne6GKVcV_zIa879EmnOgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 22:15:32
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.18.49.217 (217.49.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.49.217 (217.49.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:15:28.821316 2026] [security2:error] [pid 15748:tid 15748] [client 34.18.49.217:33702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "palumbodesigns.com"] [uri "/.git/config"] [unique_id "aqnDgKFQos6vf_wJPQZsvgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-15 18:29:14
(4 days ago)
Multiple, malicious web requests detected
Port Scan
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-15 17:33:34
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.18.49.217 (217.49.18.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.49.217 (217.49.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:33:26.706549 2026] [security2:error] [pid 17872:tid 17872] [client 34.18.49.217:60854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "palmatrader.com"] [uri "/.git/config"] [unique_id "aqmBZg24ntWWAFARXvsD0wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-15 15:27:23
(4 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-09-15 11:51:44
(5 days ago)
Multiple WAF Violations
Web App Attack
๐ฎ๐น
VHosting
2026-09-15 09:40:03
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐จ๐ฆ
lakered
2026-09-15 08:52:09
(5 days ago)
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d4312h1 - Ratio:0.98), High-Criminality-Signature (ja4h:d0d44b87af88c9714afafb88a3c165a2 - Ratio:0.93) | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:36881m)
show less
Hacking
Web App Attack
๐บ๐ธ
oralunal
2026-09-15 06:16:08
(5 days ago)
IP banned by Fail2Ban in jail oral-suss access.log mvfnds
...
Bad Web Bot
Web App Attack