🇺🇸
francelink.fr
2026-11-04 00:07:25
UTC ·
(4 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-03T01:55:44.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 21:19:35
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:19:29.411247 2026] [security2:error] [pid 6826:tid 682 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:19:29.411247 2026] [security2:error] [pid 6826:tid 6826] [client 34.64.68.184:56774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smokehouseeatery.ca"] [uri "/.git/config"] [unique_id "aupP4YUZ89g6NlfTvwfH-AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-03 19:54:02
UTC ·
(4 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 16:09:26
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:09:19.502600 2026] [security2:error] [pid 12219:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:09:19.502600 2026] [security2:error] [pid 12219:tid 12219] [client 34.64.68.184:37284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smogsandiego.com"] [uri "/.git/config"] [unique_id "auoHLyL1YgP0JxUcZ-_PlAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-11-03 16:02:42
UTC ·
(4 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
Anonymous
2026-11-03 12:24:08
UTC ·
(4 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 07:48:35
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:48:28.352958 2026] [security2:error] [pid 5267:tid 526 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:48:28.352958 2026] [security2:error] [pid 5267:tid 5267] [client 34.64.68.184:47518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solvebrandcenter.com"] [uri "/.git/config"] [unique_id "aumRzHEvqugGrKKekolunQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 07:31:45
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:31:40.890340 2026] [security2:error] [pid 26593:tid 26 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:31:40.890340 2026] [security2:error] [pid 26593:tid 26593] [client 34.64.68.184:42812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solve4this.com"] [uri "/.git/config"] [unique_id "aumN3Kmp6tv-Rf2sjt0z0gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-03 00:54:22
UTC ·
(5 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-02T20:16:46.000Z.
Web App Attack
Anonymous
2026-11-02 23:35:58
UTC ·
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
iwle
2026-11-02 18:33:38
UTC ·
(5 days ago)
[Mon Nov 02 13:33:35.206469 2026] [:error] [pid 1541:tid 1686] [client 34.64.68.184:0] [client 34.64.68.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)? ...
show more
[Mon Nov 02 13:33:35.206469 2026] [:error] [pid 1541:tid 1686] [client 34.64.68.184:0] [client 34.64.68.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "webmail.iwle.com"] [uri "/.env"] [unique_id "aujXfxoHlxoUWOIEWDYY8wAAAAg"]
[Mon Nov 02 13:33:35.969453 2026] [:error] [pid 5419:tid 5457] [client 34.64.68.184:0] [client 34.64.68.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-02 18:17:11
UTC ·
(5 days ago)
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.64.68.184 - - [02/Nov/2026:19:16:56 +0100] "GET /.git/config HTTP/1.1" 404 1370 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ...
show more
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.64.68.184 - - [02/Nov/2026:19:16:56 +0100] "GET /.git/config HTTP/1.1" 404 1370 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 14:24:25
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:24:18.664980 2026] [security2:error] [pid 10418:tid 10 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.68.184 (184.68.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:24:18.664980 2026] [security2:error] [pid 10418:tid 10418] [client 34.64.68.184:44728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solutiongroove.com"] [uri "/.git/config"] [unique_id "auidEn_0YxkgacT8jgbG6wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-02 13:53:24
UTC ·
(5 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-02T13:50:05.000Z.
Web App Attack
🇨🇭
Origon
2026-11-02 10:59:13
UTC ·
(5 days ago)
plesk-modsecurity - IP: 34.64.68.184 - [02/Nov/2026:11:59:12.257751 +0100] auhtAN2WDIxbz-hrjhGstQAAAIE 34.64.68.184 38878 127.0.0.1 7081 [02/Nov/2026:11:59:12.731092 +0100] auhtABIHVEFdQtfzqNiDtwAAAAY 34.64.68.184 38894 127.0.0.1 7081 [02/Nov/2026:1 ...
show more
plesk-modsecurity - IP: 34.64.68.184 - [02/Nov/2026:11:59:12.257751 +0100] auhtAN2WDIxbz-hrjhGstQAAAIE 34.64.68.184 38878 127.0.0.1 7081 [02/Nov/2026:11:59:12.731092 +0100] auhtABIHVEFdQtfzqNiDtwAAAAY 34.64.68.184 38894 127.0.0.1 7081 [02/Nov/2026:11:59:12.963465 +0100] auhtAN2WDIxbz-hrjhGstwAAAI0 34.64.68.184 38922 127.0.0.1 7081 [02/Nov/2026:11:59:13.197047 +0100] auhtARIHVEFdQtfzqNiDuQAAAAE 34.64.68.184 38938 127.0.0.1 7081
show less
Web App Attack