🇳🇱
homeshowdomain.nl
2026-06-15 22:00:10
UTC ·
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-15 05:24:01
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:23:51.448541 2026] [security2:error] [pid 23218:tid 2321 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:23:51.448541 2026] [security2:error] [pid 23218:tid 23218] [client 34.22.42.31:40936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.daytonabluemetallic.com.micahgartman.com"] [uri "/dashboard/.git/config"] [unique_id "ai-MZ2e5rHAX6TBLQmJ-wQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-15 04:35:09
UTC ·
(4 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-06-15 03:51:00
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:50:53.151520 2026] [security2:error] [pid 999:tid 999] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:50:53.151520 2026] [security2:error] [pid 999:tid 999] [client 34.22.42.31:49690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "silverdump.com"] [uri "/html/.git/config"] [unique_id "ai92nW6LkRntXgxeuBilVQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-06-15 03:37:44
UTC ·
(4 months ago)
Multiple WAF Violations
Web App Attack
🇬🇧
consul.to
2026-06-15 02:40:59
UTC ·
(4 months ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
4server
2026-06-15 02:08:38
UTC ·
(4 months ago)
[MonJun1504:08:36.3294892026][security2:error][pid3364310:tid3364315][client34.22.42.31:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLO ...
show more
[MonJun1504:08:36.3294892026][security2:error][pid3364310:tid3364315][client34.22.42.31:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.helvetica-advisors.ch.136-243-54-122.cpanel.site\"][uri\"/dashboard/.git/config\"][unique_id\"ai9epMtimeK0es7A4q7nHwAAAEI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:37:49
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:37:44.578358 2026] [security2:error] [pid 15071:tid 1507 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:37:44.578358 2026] [security2:error] [pid 15071:tid 15071] [client 34.22.42.31:51552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sellitwithsteve.listitwithsteve.com"] [uri "/backend/.git/config"] [unique_id "ai9XaGwPYipFuW5HmBNIggAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:39:13
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:39:09.846463 2026] [security2:error] [pid 25925:tid 2594 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:39:09.846463 2026] [security2:error] [pid 25925:tid 25942] [client 34.22.42.31:33222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desert-automotive.com"] [uri "/www/.git/config"] [unique_id "ai87nfWLhT7Vi976L838vAAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 21:35:37
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:35:30.362911 2026] [security2:error] [pid 24505:tid 2450 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.42.31 (31.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:35:30.362911 2026] [security2:error] [pid 24505:tid 24505] [client 34.22.42.31:35262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thalos.pe"] [uri "/api/.git/config"] [unique_id "ai8eoo8dgdmEihEDO1DXdwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-14 21:02:12
UTC ·
(4 months ago)
Bot / seems abusive / Apache connections: 28
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇷🇴
INTEQ
2026-06-14 20:58:57
UTC ·
(4 months ago)
Web attack from 34.22.42.31
Web App Attack
🇧🇾
lns.bz
2026-06-14 13:32:32
UTC ·
(4 months ago)
Too many 404 requests [BY]
Web App Attack
🇫🇷
OrchidsRadiant
2026-06-14 12:58:41
UTC ·
(4 months ago)
_:443 34.22.42.31 - - [14/Jun/2026:12:58:40 +0000] "GET /blog/.git/config HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; de-CH; rv:1.9.2.8) Gecko/20100729 Firefox/3.6.8"
_:443 34.22.42.31 - - [14/Jun/2026:12:58:40 +0000] "GET /shop/.git/co ...
show more
_:443 34.22.42.31 - - [14/Jun/2026:12:58:40 +0000] "GET /blog/.git/config HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; de-CH; rv:1.9.2.8) Gecko/20100729 Firefox/3.6.8"
_:443 34.22.42.31 - - [14/Jun/2026:12:58:40 +0000] "GET /shop/.git/config HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Symbian/3; Series60/5.2 NokiaC7-00/012.003; Profile/MIDP-2.1 Configuration/CLDC-1.1 ) AppleWebKit/525 (KHTML, like Gecko) Version/3.0 BrowserNG/7.2.7.3 3gpp-gba"
_:443 34.22.42.31 - - [14/Jun/2026:12:58:40 +0000] "GET /wp-content/.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Linux; Android 8.0.0; F5121) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.101 Mobile Safari/537.36"
_:443 34.22.42.31 - - [14/Jun/2026:12:58:40 +0000] "GET /public/.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Win64; x64; Trident/5.0; .NET CLR 3.7.50745; Media Center PC 6.0; Zune 4.7; .NET4.0C; en-MT)"
_:443 34.22.42.31 - - [14/Jun/2026:12:58:40 +0000] "GET /wordpress/.git/conf
...
show less
Bad Web Bot
Web App Attack
🇵🇱
webadmin
2026-06-14 12:57:01
UTC ·
(4 months ago)
Web App Attack