๐ฎ๐น
VHosting
2026-09-29 08:10:03
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ท๐ด
clauss
2026-09-29 08:01:47
(3 days ago)
34.77.235.84 - - [29/Sep/2026:11:01:46 +0300] "GET /.git/config HTTP/1.1" 404 3420 "-" "Mozilla/5.0 ...
show more
34.77.235.84 - - [29/Sep/2026:11:01:46 +0300] "GET /.git/config HTTP/1.1" 404 3420 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.77.235.84 - - [29/Sep/2026:11:01:46 +0300] "GET /.env.local HTTP/1.1" 404 3420 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 06:37:47
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:37:44.429156 2026] [security2:error] [pid 22621:tid 22621] [client 34.77.235.84:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rodrigoaldecoa.com"] [uri "/.git/config"] [unique_id "artcuJQ5niJ-gIiEW_Ss0wAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 23:23:48
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 19:23:42.243607 2026] [security2:error] [pid 1775:tid 1775] [client 34.77.235.84:42876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.airedaleflyer.com"] [uri "/.git/config"] [unique_id "arr2_rJl1ChdxXo1h6eZQQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 05:28:04
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 01:27:56.671750 2026] [security2:error] [pid 6509:tid 6509] [client 34.77.235.84:50070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.londongroup.info"] [uri "/.git/config"] [unique_id "arn63LA-Ek2x1lpgL4MlNgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Dominik Lysiak
2026-09-24 18:29:25
(1 week ago)
34.77.235.84 - - [24/Sep/2026:20:29:24 +0200] "GET /.git/config HTTP/1.1" 401 574 "-" "Mozilla/5.0 ( ...
show more
34.77.235.84 - - [24/Sep/2026:20:29:24 +0200] "GET /.git/config HTTP/1.1" 401 574 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.77.235.84 - - [24/Sep/2026:20:29:24 +0200] "GET /.env HTTP/1.1" 401 574 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.77.235.84 - - [24/Sep/2026:20:29:24 +0200] "GET /.env.local HTTP/1.1" 401 574 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 17:48:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:48:23.630004 2026] [security2:error] [pid 19124:tid 19124] [client 34.77.235.84:58370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doc.falundafatr.org"] [uri "/.git/config"] [unique_id "arViZ0S4XRNhgB2M1YIehwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 10:55:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.235.84 (84.235.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 06:54:59.245620 2026] [security2:error] [pid 12419:tid 12419] [client 34.77.235.84:39754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "craftammie.com"] [uri "/.git/config"] [unique_id "arOwAxP0VLrvYqwYNdyAGAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
dominioz
2026-09-23 09:47:12
(1 week ago)
2026-09-23 09:46:58 GET /.git/config - - 34.77.235.84 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+ ...
show more
2026-09-23 09:46:58 GET /.git/config - - 34.77.235.84 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 578
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-21 22:04:20
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-20.
show less
Web App Attack
SSH
Hacking
๐ฎ๐น
VHosting
2026-09-21 07:30:03
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-09-20 15:32:13
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack