🇧🇾
lns.bz
2026-09-29 18:05:36
(1 week ago)
Too many 404 requests [BY]
Web App Attack
🇳🇱
Site.eu
2026-09-29 05:31:04
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-28 23:20:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 19:20:17.089974 2026] [security2:error] [pid 10274:tid 10302] [client 34.185.193.132:56984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ergpd.com"] [uri "/.git/config"] [unique_id "arr2Mb2I-h9DjRcoB__mjwAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 16:39:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 12:39:43.981038 2026] [security2:error] [pid 11321:tid 11321] [client 34.185.193.132:53934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harintonmechanical.com"] [uri "/.git/config"] [unique_id "arqYT6yPhBUmPO1hQBpFugAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-28 14:01:19
(1 week ago)
Multiple WAF Violations
Web App Attack
🇩🇪
Hary74656
2026-09-27 14:38:11
(1 week ago)
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.185.193.132] [realclien ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.185.193.132] [realclient 34.185.193.132] [27/Sep/2026:16:38:10 +0200] [vhost imgsearch.aschi.at] 403 "GET /.git/config HTTP/1.1"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 15:41:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:41:00.820340 2026] [security2:error] [pid 16129:tid 16169] [client 34.185.193.132:33404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barnettbusinessgroup.com"] [uri "/.git/config"] [unique_id "arfnjBJayclhWhJiGi4aCwAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 19:14:54
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 15:14:52.769353 2026] [security2:error] [pid 18715:tid 18715] [client 34.185.193.132:55438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilovecoffeegroup.com"] [uri "/.git/config"] [unique_id "arbILDuZlQMmWraIiqjmYAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-25 02:13:30
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 17:46:14
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:46:08.573547 2026] [security2:error] [pid 7113:tid 7113] [client 34.185.193.132:56544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.livinghopehighschool.org"] [uri "/.git/config"] [unique_id "arVh4BD3N1InJjMYrqM__gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-09-24 15:49:47
(2 weeks ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.185.193.132 (DE/Germany/132.193.185.34 ...
show more
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.185.193.132 (DE/Germany/132.193.185.34.bc.googleusercontent.com)
show less
Hacking
🇧🇪
Saec
2026-09-22 07:25:00
(2 weeks ago)
Jarvis auto-ban: Honeypot /.git/config via infra.saec.me [DE] ASN:Google LLC
Port Scan
Web App Attack
🇳🇱
Savvii
2026-09-21 23:28:32
(2 weeks ago)
20 attempts against mh_ha-misbehave-ban on pf221113
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 18:09:07
(2 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 16:41:41
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.193.132 (132.193.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 12:41:34.741460 2026] [security2:error] [pid 30156:tid 30156] [client 34.185.193.132:39792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iclog.us"] [uri "/.git/config"] [unique_id "arFePs4k-8wK3i14mM_DpgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
