🇩🇪
pltcldvlpr
2026-11-12 01:49:39
UTC ·
(2 days ago)
CMS/framework probe: 34.96.204.48 - - [12/Nov/2026:02:49:39 +0100] "GET /.git/config HTTP/1.1" 404 1499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" asn=396982 org="Google LLC" ...
show more
CMS/framework probe: 34.96.204.48 - - [12/Nov/2026:02:49:39 +0100] "GET /.git/config HTTP/1.1" 404 1499 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" asn=396982 org="Google LLC" country=HK
...
show less
Web App Attack
🇪🇸
tutaim.com
2026-11-11 23:00:02
UTC ·
(2 days ago)
⛔ [12/11/26] This IP has been detected performing multiple attacks on websites (638 attempts blocked). Potential malicious activity.
Brute-Force
SSH
Web App Attack
FTP Brute-Force
🇧🇷
ICS Labs
2026-11-11 17:16:22
UTC ·
(3 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-11 UTC.
Brute-Force
🇫🇷
masterguru
2026-11-11 15:19:36
UTC ·
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 12:12:33
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.96.204.48 (48.204.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:12:28.269983 2026] [security2:error] [pid 21825:tid 21 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.204.48 (48.204.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:12:28.269983 2026] [security2:error] [pid 21825:tid 21825] [client 34.96.204.48:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uni-plan.com"] [uri "/.git/config"] [unique_id "avRbrLfmsiCRWDAEKIF9pwAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-11 10:50:58
UTC ·
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇩🇪
ghostwarriors
2026-11-11 10:50:11
UTC ·
(3 days ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-11 09:56:30
UTC ·
(3 days ago)
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})| (932130-135)
Hacking
🇩🇪
iNetWorker
2026-11-11 08:46:21
UTC ·
(3 days ago)
trolling for resource vulnerabilities
Web App Attack
🇩🇪
4server
2026-11-11 07:50:26
UTC ·
(3 days ago)
[WedNov1108:50:20.1224042026][security2:error][pid3870643:tid3870670][client34.96.204.48:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacce ...
show more
[WedNov1108:50:20.1224042026][security2:error][pid3870643:tid3870670][client34.96.204.48:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.ecosuber.com\"][uri\"/.env.bak\"][unique_id\"avQePCPhkxvs0g4-PoJZegAAAAY\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-11-11 05:13:09
UTC ·
(3 days ago)
34.96.204.48 - - [11/Nov/2026:07:13:03 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.204.48 - - [11/Nov/2026:07:13:04 +0200] "POST / HTTP/1 ...
show more
34.96.204.48 - - [11/Nov/2026:07:13:03 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.204.48 - - [11/Nov/2026:07:13:04 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.204.48 - - [11/Nov/2026:07:13:04 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.204.48 - - [11/Nov/2026:07:13:04 +0200] "GET /.git/config HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.204.48 - - [11/Nov/2026:07:13:05 +0200] "GET /.env HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.204.48 - - [11/Nov/2026:07:13:0
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-11 04:53:11
UTC ·
(3 days ago)
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.96.204.48 - - [11/Nov/2026:05:52:59 +0100] "GET /.git/config HTTP/1.1" 301 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ...
show more
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.96.204.48 - - [11/Nov/2026:05:52:59 +0100] "GET /.git/config HTTP/1.1" 301 552 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-11 03:15:03
UTC ·
(3 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇳🇱
ConsulHosting
2026-11-11 02:43:13
UTC ·
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇬🇧
consul.to
2026-11-11 02:25:44
UTC ·
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
