|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.86.141.149 (149.141.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:25:26.131239 2026] [security2:error] [pid 4652:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.141.149 (149.141.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:25:26.131239 2026] [security2:error] [pid 4652:tid 4652] [client 34.86.141.149:40176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.patrickstrain.com"] [uri "/.git/config"] [unique_id "arsFdiT57FY991u0XCmbiwAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.86.141.149 (149.141.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:08:26.308148 2026] [security2:error] [pid 16150:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.141.149 (149.141.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:08:26.308148 2026] [security2:error] [pid 16150:tid 16150] [client 34.86.141.149:54186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.patrickodougherty.com"] [uri "/.git/config"] [unique_id "arsBejOH8YYJ4QVDZVT3jwAAACk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.86.141.149 (149.141.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 10:08:16.166245 2026] [security2:error] [pid 23158:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.141.149 (149.141.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 10:08:16.166245 2026] [security2:error] [pid 23158:tid 23158] [client 34.86.141.149:57518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flanav1.yankeetownfishing.com"] [uri "/.git/config"] [unique_id "arp00JGkOdeG-J6on0YUXAAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇭
zynex
|
|
URL Probing: /server/.env
|
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive 404/403 errors
|
Brute-Force
|
|
🇩🇪
EGP Abuse Dept
|
|
Scanning for web/db/file exploits on s16.sellwi.se
|
SQL Injection
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
CrowdSec decision: crowdsecurity/http-admin-interface-probing (origin: crowdsec)
|
Web App Attack
|
|
🇵🇱
Budyn
|
|
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.astropot.online | URI: /.git/config | UA: Mozi ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.astropot.online | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive 404/403 errors
|
Brute-Force
|
|
🇺🇸
BSG Webmaster
|
|
Port scanning (Port 3306)
|
Port Scan
Hacking
|
|
🇩🇪
Grizzlytools
|
|
Kingcopy(AI-IDS)RouterOS: Portscanner detected.
|
Port Scan
|
|
🇹🇷
rtbh.com.tr
|
|
list.rtbh.com.tr report: tcp/3306
|
Brute-Force
|
|
🇳🇱
ATV
|
|
Unsolicited connection attempts to port 3306
|
Port Scan
|
|
🇳🇱
Study Bitcoin 🤗
|
|
2 port probes: 2x tcp/3306 (mysql)
[srv132,srv128]
|
Port Scan
|
|
🇧🇷
diego
|
|
[rede-44-49] 09/16/2025-23:34:41.765921, 34.86.141.149, Protocol: 6, ET SCAN Suspicious inbound to mySQL port 3306
|
Hacking
|
