🇳🇱
homeshowdomain.nl
2026-11-05 23:01:22
UTC ·
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
Web App Attack
SSH
Hacking
🇧🇷
ICS Labs
2026-11-05 13:22:52
UTC ·
(3 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-05 UTC.
Brute-Force
Anonymous
2026-11-05 01:28:31
UTC ·
(3 days ago)
fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.git/config"]
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-05 00:40:25
UTC ·
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T23:24:57.000Z.
Web App Attack
🇩🇪
SCHAPPY
2026-11-05 00:07:58
UTC ·
(3 days ago)
Probing for non-installed web apps or current vulnerabilities.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 23:57:37
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:57:30.198534 2026] [security2:error] [pid 23621:tid 2362 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:57:30.198534 2026] [security2:error] [pid 23621:tid 23621] [client 34.86.74.48:38250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.akillitarifler.lobibilisim.com"] [uri "/.git/config"] [unique_id "auvGagURVI-sLhmV_R-5BAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 23:31:42
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:31:36.816099 2026] [security2:error] [pid 13176:tid 1317 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:31:36.816099 2026] [security2:error] [pid 13176:tid 13176] [client 34.86.74.48:46238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aivosminerals.soviaenterprises.com"] [uri "/.git/config"] [unique_id "auvAWK62xYCvEyyykXzGiwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-04 22:54:03
UTC ·
(3 days ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 22:34:13
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:34:08.432503 2026] [security2:error] [pid 3402:tid 3402] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:34:08.432503 2026] [security2:error] [pid 3402:tid 3402] [client 34.86.74.48:54124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agristor.totalstorage.solutions"] [uri "/.git/config"] [unique_id "auuy4HQfP7WKaUn1IjBPdwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 21:42:13
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:42:10.279316 2026] [security2:error] [pid 24014:tid 2401 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:42:10.279316 2026] [security2:error] [pid 24014:tid 24014] [client 34.86.74.48:56400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.agapeaccounting.com.agapeaccountingllc.com"] [uri "/.git/config"] [unique_id "auumsu8iwQh2wc4_BVoZHQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-04 21:34:26
UTC ·
(3 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-04T21:31:21.000Z.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 21:19:47
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:19:43.759432 2026] [security2:error] [pid 10181:tid 1018 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 16:19:43.759432 2026] [security2:error] [pid 10181:tid 10181] [client 34.86.74.48:48862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.admin.marisetravel.com"] [uri "/.git/config"] [unique_id "auuhb_JY0WdBlEdKNae9mgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-04 21:12:08
UTC ·
(3 days ago)
2.371 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇳🇱
Alt255
2026-11-04 21:08:00
UTC ·
(3 days ago)
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.86.74.48 - - \[04/Nov/2026:22:07:52 +0100\] "GET /.git/config HTTP/1.1" 404 7412 "-" "-"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 20:45:30
UTC ·
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:45:26.195096 2026] [security2:error] [pid 11507:tid 1150 ...
show more
(mod_security) mod_security (id:949110) triggered by 34.86.74.48 (48.74.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:45:26.195096 2026] [security2:error] [pid 11507:tid 11507] [client 34.86.74.48:42452] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.advancedrentalandservice.com.crazycontrols.com"] [uri "/.git/config"] [unique_id "auuZZmKHxLIApW5tiXtTgAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack