🇺🇸
TPI-Abuse
2026-09-16 02:08:52
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.176.53 (53.176.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.176.53 (53.176.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:08:47.016727 2026] [security2:error] [pid 9904:tid 9904] [client 34.17.176.53:35850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "investorsfundingusa.com"] [uri "/.git/config"] [unique_id "aqn6L8vkL2oCFKNQZky4vQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:27:14
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.176.53 (53.176.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.176.53 (53.176.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:27:06.254412 2026] [security2:error] [pid 13263:tid 13263] [client 34.17.176.53:39358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inverzona.com"] [uri "/.git/config"] [unique_id "aqm4KuS9e_8cSVo_A0ZViwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
bigscoots.com
2026-09-15 20:35:49
(3 days ago)
(PERMBLOCK) 34.17.176.53 (IT/Italy/53.176.17.34.bc.googleusercontent.com) has had more than 4 temp b ...
show more
(PERMBLOCK) 34.17.176.53 (IT/Italy/53.176.17.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
show less
Brute-Force
SSH
🇨🇭
Ribeye375
2026-09-15 19:38:43
(3 days ago)
HIPS web-exfiltration - Block tcp/0:65535
Web App Attack
🇮🇩
Burayot
2026-09-15 18:01:28
(3 days ago)
LF_APACHE_403: 34.17.176.53 (IT/Italy/53.176.17.34.bc.googleusercontent.com), more than 10 Apache 40 ...
show more
LF_APACHE_403: 34.17.176.53 (IT/Italy/53.176.17.34.bc.googleusercontent.com), more than 10 Apache 403 hits in the last 3600 secs
show less
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-15 15:44:21
(3 days ago)
(modsecurity) srv103 ModSecurity 34.17.176.53 (IT/Italy/53.176.17.34.bc.googleusercontent.com): 30 i ...
show more
(modsecurity) srv103 ModSecurity 34.17.176.53 (IT/Italy/53.176.17.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇩🇪
Hazzard
2026-09-15 13:54:27
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇳🇱
ConsulHosting
2026-09-15 12:41:09
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 10:15:13
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.17.176.53 (53.176.17.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.176.53 (53.176.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:15:08.911756 2026] [security2:error] [pid 2762:tid 2762] [client 34.17.176.53:39588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.businessgetwellcards.com"] [uri "/.git/config"] [unique_id "aqkarDQCuo3jemah59H--AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-15 09:09:36
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-09-15 07:48:53
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: mail.budyn.ovh | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-15 07:25:47
(3 days ago)
20 attempts against mh-misbehave-ban on ficus
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-15 06:42:29
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇮🇹
VHosting
2026-09-15 03:50:03
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-15 03:50:02
(4 days ago)
Web attack/malicious scanning detected
Web App Attack