🇺🇸
TPI-Abuse
2026-09-10 04:28:47
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.88.158.130 (130.158.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.158.130 (130.158.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 00:28:40.569711 2026] [security2:error] [pid 19393:tid 19401] [client 34.88.158.130:51452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebgs.net"] [uri "/.git/config"] [unique_id "aqIx-FUrMEBQdR1DaPa4VgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 02:14:38
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.158.130 (130.158.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.158.130 (130.158.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 22:14:30.889741 2026] [security2:error] [pid 4842:tid 4842] [client 34.88.158.130:33400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "streamlinenz.com"] [uri "/.git/config"] [unique_id "aqIShpY2yjFcm0dSEBtswAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 00:55:46
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.158.130 (130.158.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.158.130 (130.158.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 20:55:41.265485 2026] [security2:error] [pid 4223:tid 4223] [client 34.88.158.130:35074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realestateinpalmbeachflorida.com"] [uri "/.git/config"] [unique_id "aqIADcTuy5nqdhD5DlDUxgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-09-09 23:11:36
(7 hours ago)
34.88.158.130 - - [09/Sep/2026:19:11:26 -0400] "GET /.git/config HTTP/1.1" 404 42543 "-" "Mozilla/5. ...
show more
34.88.158.130 - - [09/Sep/2026:19:11:26 -0400] "GET /.git/config HTTP/1.1" 404 42543 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.158.130 - - [09/Sep/2026:19:11:27 -0400] "GET /.env HTTP/1.1" 404 42543 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.158.130 - - [09/Sep/2026:19:11:35 -0400] "GET /app/.env HTTP/1.1" 404 42543 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-09-09 23:00:19
(7 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
paissangroup
2026-09-09 21:23:03
(9 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
IndigoRidge
2026-09-09 21:21:28
(9 hours ago)
[09/Sep/2026:17:21:26.897805 --0400] aqHN1lLcuLS3DUoz7u6vEgAAAAI 34.88.158.130 37824 205.233.18.17 7 ...
show more
[09/Sep/2026:17:21:26.897805 --0400] aqHN1lLcuLS3DUoz7u6vEgAAAAI 34.88.158.130 37824 205.233.18.17 7081
[09/Sep/2026:17:21:27.231296 --0400] aqHN19MDQJldJu1DqP6togAAAEQ 34.88.158.130 37864 205.233.18.17 7081
[09/Sep/2026:17:21:27.389463 --0400] aqHN121ktmVvjqQRM2VYKAAAAJE 34.88.158.130 50142 205.233.18.17 7081
[09/Sep/2026:17:21:27.548929 --0400] aqHN19MDQJldJu1DqP6towAAAEk 34.88.158.130 50162 205.233.18.17 7081
[09/Sep/2026:17:21:27.710700 --0400] aqHN1z4o-bCTZ6sWubP@pQAAANU 34.88.158.130 50174 205.233.18.17 7081
...
show less
Hacking
🇸🇪
vaia.cloud
2026-09-09 21:00:02
(9 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-09 18:54:12
(11 hours ago)
(modsecurity) srv104 ModSecurity 34.88.158.130 (130.158.88.34.bc.googleusercontent.com): 30 in the l ...
show more
(modsecurity) srv104 ModSecurity 34.88.158.130 (130.158.88.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇬🇧
consul.to
2026-09-09 13:58:35
(16 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Savvii
2026-09-09 13:47:09
(16 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-09 11:38:52
(18 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-09 11:15:03
(19 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 09:43:34
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.158.130 (130.158.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.158.130 (130.158.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 05:43:30.469856 2026] [security2:error] [pid 11054:tid 11054] [client 34.88.158.130:57594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ispeakmusic.com"] [uri "/.git/config"] [unique_id "aqEqQnEdRj-Mj0QL9Iwi6QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-09 09:19:00
(21 hours ago)
(modsecurity) srv201 ModSecurity 34.88.158.130 (130.158.88.34.bc.googleusercontent.com): 30 in the l ...
show more
(modsecurity) srv201 ModSecurity 34.88.158.130 (130.158.88.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack