🇺🇸
TPI-Abuse
2026-09-21 00:17:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 20:17:39.638749 2026] [security2:error] [pid 12091:tid 12091] [client 34.88.114.148:44122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thecalls.net"] [uri "/.git/config"] [unique_id "arB3o2Hk_2qIm9nx5uO93gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 23:22:05
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 19:21:58.453717 2026] [security2:error] [pid 32739:tid 32739] [client 34.88.114.148:58628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebumans.com"] [uri "/.git/config"] [unique_id "arBqlhR9dk8CZ6YIdTP96wAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 22:47:33
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:47:26.487358 2026] [security2:error] [pid 9001:tid 9001] [client 34.88.114.148:46268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebronsons.com"] [uri "/.git/config"] [unique_id "arBifsQ0zHmP0yFu6BdpzwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-09-20 22:26:55
(2 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 21:43:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:43:46.390141 2026] [security2:error] [pid 18173:tid 18173] [client 34.88.114.148:55110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebradleyclinic.com"] [uri "/.git/config"] [unique_id "arBTkrfOkfORTytTOlEn9AAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-09-20 20:46:05
(2 days ago)
34.88.114.148 - - [20/Sep/2026:22:46:04 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 ...
show more
34.88.114.148 - - [20/Sep/2026:22:46:04 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇦🇺
rubixstudios
2026-09-20 20:39:02
(2 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇳🇱
maxxsense
2026-09-20 20:11:21
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.88.114.148 (FI/Finland/148.114.88.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.88.114.148 (FI/Finland/148.114.88.34.bc.googleusercontent.com)
show less
SQL Injection
🇬🇧
Aetherweb Ark
2026-09-20 19:32:33
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.88.114.148 (FI/Finland/148.114.88.34.bc.goog ...
show more
(mod_security) mod_security (id:949110) triggered by 34.88.114.148 (FI/Finland/148.114.88.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 18:33:06
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 14:32:58.406667 2026] [security2:error] [pid 15190:tid 15200] [client 34.88.114.148:53388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebiglies.com"] [uri "/.git/config"] [unique_id "arAm2vZwOhW-Odp13o1IZgAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-09-20 18:15:05
(2 days ago)
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla ...
show more
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 17:52:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 13:52:35.369415 2026] [security2:error] [pid 20026:tid 20026] [client 34.88.114.148:45446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebestproduct.guru"] [uri "/.git/config"] [unique_id "arAdY0upbW2Q1DJ1wMp3QwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
thesimonmanuel
2026-09-20 16:26:47
(2 days ago)
34.88.114.148 - - [20/Sep/2026:21:56:45 +0530] "GET /.git/config HTTP/1.1" 404 13392 "-" "Mozilla/5. ...
show more
34.88.114.148 - - [20/Sep/2026:21:56:45 +0530] "GET /.git/config HTTP/1.1" 404 13392 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 16:22:14
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.88.114.148 (148.114.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.88.114.148 (148.114.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:22:11.372921 2026] [security2:error] [pid 23860:tid 23860] [client 34.88.114.148:44290] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "thebealcompany.net.armstrongenvironmental.com"] [uri "/.git/config"] [unique_id "arAIM7EwzAVipn-7LMA31AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 15:47:33
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.114.148 (148.114.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 11:47:25.667934 2026] [security2:error] [pid 31056:tid 31056] [client 34.88.114.148:37682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebarringtongroup.org"] [uri "/.git/config"] [unique_id "arAADYO3cbGfvzE5myxMJwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
