๐บ๐ธ
TPI-Abuse
2026-09-29 15:32:32
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 11:32:28.737785 2026] [security2:error] [pid 20899:tid 20899] [client 34.84.31.116:45642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.harriettpowers.williamgilcher.com"] [uri "/.git/config"] [unique_id "arvaDHtAJ9Y1jsDRaojkcQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-09-29 10:37:00
(3 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: www.definitelynotahoneypot.xyz | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-09-29 09:34:12
(3 weeks ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 06:30:21
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:30:15.011302 2026] [security2:error] [pid 7136:tid 7139] [client 34.84.31.116:49538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.deepwaterdock.nicholsinvest.com"] [uri "/.git/config"] [unique_id "arta9xdWzdq_yIPquMJyUQAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 07:44:15
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 03:44:09.291345 2026] [security2:error] [pid 9444:tid 9444] [client 34.84.31.116:58558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.daretodreamproductions.homehealth101.com"] [uri "/.git/config"] [unique_id "aroayQvY0BbpX69BNY6FqgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 05:37:57
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 01:37:50.543830 2026] [security2:error] [pid 3441:tid 3441] [client 34.84.31.116:60642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.daprototype.desertalfas.org"] [uri "/.git/config"] [unique_id "arn9LrcBpy0w2DTgkS1OxgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 07:00:39
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.31.116 (116.31.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 03:00:32.913511 2026] [security2:error] [pid 29925:tid 29925] [client 34.84.31.116:41068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.davidleecrites.adoniahenterprises.com"] [uri "/.git/config"] [unique_id "ari_ENxw6xg39U7aeunBCQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-26 17:14:13
(3 weeks ago)
Multiple WAF Violations
Web App Attack
๐จ๐ฆ
TechnoSolutions CL
2026-09-26 16:32:58
(3 weeks ago)
34.84.31.116 - - [26/Sep/2026:16:32:45 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X1 ...
show more
34.84.31.116 - - [26/Sep/2026:16:32:45 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.31.116 - - [26/Sep/2026:16:32:57 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-09-25 17:32:12
(3 weeks ago)
(mod_security) mod_security (id:949110) triggered by 34.84.31.116 (JP/Japan/116.31.84.34.bc.googleus ...
show more
(mod_security) mod_security (id:949110) triggered by 34.84.31.116 (JP/Japan/116.31.84.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ซ๐ท
masterguru
2026-09-25 10:47:32
(3 weeks ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-25 04:40:01
(4 weeks ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
Hazzard
2026-09-24 17:24:39
(4 weeks ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐ฉ๐ช
FD-IX
2026-09-24 16:07:51
(4 weeks ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ท๐บ
DZBOT
2026-09-23 14:01:54
(4 weeks ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack