๐ซ๐ท
masterguru
2026-06-12 00:32:33
(5 days ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.42.118.47 (US/United States/47.118.42.34.bc ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.42.118.47 (US/United States/47.118.42.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-196)
show less
Hacking
๐ซ๐ท
masterguru
2026-06-10 15:07:10
(6 days ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.42.118.47 (US/United States/47.118.42.34.bc ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.42.118.47 (US/United States/47.118.42.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐ท๐บ
DZBOT
2026-06-10 09:50:51
(1 week ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 21:59:16
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐ต๐ฑ
strefapi_com
2026-06-09 12:53:06
(1 week ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-06-09 08:58:48
(1 week ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.42.118.47 (US/United States/47.118.42.34.bc ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 34.42.118.47 (US/United States/47.118.42.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-06-08 22:06:29
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-08 20:58:22
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:58:15.662574 2026] [security2:error] [pid 8646:tid 8646] [client 34.42.118.47:45558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "halleycpa.com"] [uri "/.git/config"] [unique_id "aics54c9S25OOOO6UYHbTAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-08 20:22:18
(1 week ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 19:47:54
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 15:47:46.778571 2026] [security2:error] [pid 19322:tid 19322] [client 34.42.118.47:47670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.doreenkimura.com.misscharlottemusic.com"] [uri "/.git/config"] [unique_id "aiccYiN44_b2ClnCdf2VyAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
GEDAL
2026-06-08 19:34:41
(1 week ago)
Fail2ban webexploits @ <hostname> : 34.42.118.47 - - [08/Jun/2026:21:34:40 +0200] "GET /.git/config ...
show more
Fail2ban webexploits @ <hostname> : 34.42.118.47 - - [08/Jun/2026:21:34:40 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3800.0 Iron Safari/537.36"
show less
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-06-08 18:54:53
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 14:54:50.168888 2026] [security2:error] [pid 16575:tid 16575] [client 34.42.118.47:52434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internetnameregistration.com"] [uri "/.git/config"] [unique_id "aicP-jP0uUSEM_I9oAZ49QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 14:53:41
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 10:53:36.774739 2026] [security2:error] [pid 6760:tid 6760] [client 34.42.118.47:56902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rosecityexpress.soviaenterprises.com"] [uri "/.git/config"] [unique_id "aibXcFiovzgAiFl2HjO_cgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 12:09:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 08:09:51.421407 2026] [security2:error] [pid 26846:tid 26846] [client 34.42.118.47:51860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mikethenomad.com.michaelkivisto.com"] [uri "/.git/config"] [unique_id "aiaxD433CXQUXkfISGbpKwAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 11:23:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.42.118.47 (47.118.42.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 07:23:26.806327 2026] [security2:error] [pid 27982:tid 27982] [client 34.42.118.47:42190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "texaspamman.com"] [uri "/.git/config"] [unique_id "aiamLkCF3fqQ0g4HILke3gAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack