🇺🇸
TPI-Abuse
2026-09-16 02:45:17
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.4.162 (162.4.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.4.162 (162.4.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:45:13.570319 2026] [security2:error] [pid 8933:tid 8933] [client 34.88.4.162:34458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graftandcorruption.net"] [uri "/.git/config"] [unique_id "aqoCuXGms619gyMnoDlqRQAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-09-16 00:05:14
(12 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: grafana.sweetpuddingtrap.top | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
2026-09-15 23:41:10
(12 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-09-15 23:25:53
(12 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 23:21:15
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.4.162 (162.4.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.4.162 (162.4.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:21:07.062024 2026] [security2:error] [pid 30528:tid 30528] [client 34.88.4.162:50338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kruizekontrhl.com"] [uri "/.git/config"] [unique_id "aqnS41cOafxxJcFQqy0MzwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-15 19:12:40
(16 hours ago)
(modsecurity) srv101 ModSecurity 34.88.4.162 (162.4.88.34.bc.googleusercontent.com): 30 in the last ...
show more
(modsecurity) srv101 ModSecurity 34.88.4.162 (162.4.88.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇫🇷
dynamix
2026-09-15 16:09:15
(20 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 13:41:27
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.4.162 (162.4.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.4.162 (162.4.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:41:20.760701 2026] [security2:error] [pid 23776:tid 23776] [client 34.88.4.162:36010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "instepdogobedience.com"] [uri "/.git/config"] [unique_id "aqlLAEXkPpmmxVL5kV-55AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
a s
2025-05-26 19:10:47
(1 year ago)
Automated report: Observed suspicious network activity.
Port Scan