🇮🇳
evicky2002
2026-05-14 06:00:00
UTC ·
(5 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2026-05-10 22:00:24
UTC ·
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-09.
Web App Attack
SSH
Hacking
Anonymous
2026-05-10 04:31:53
UTC ·
(6 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇧🇪
cmbplf
2026-05-10 01:48:52
UTC ·
(6 months ago)
561 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-10 01:19:23
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 21:19:15.786734 2026] [security2:error] [pid 8207:tid 8207] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 21:19:15.786734 2026] [security2:error] [pid 8207:tid 8207] [client 34.12.90.8:33414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nagareinkpaper.ahijado.org"] [uri "/.git/config"] [unique_id "af_dE5XsjW68CqqYUmCy9AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 01:03:42
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 21:03:35.326739 2026] [security2:error] [pid 31400:tid 31400] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 21:03:35.326739 2026] [security2:error] [pid 31400:tid 31400] [client 34.12.90.8:46130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mexicanfriedicecream.com"] [uri "/.git/config"] [unique_id "af_ZZ98ZgEHJI82L3An9NgAAADo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-05-10 00:39:22
UTC ·
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.12.90.8 (NL/Netherlands/8.90.12.34.bc.googleusercontent.com): 2 in the last 3600 secs
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 00:08:25
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 20:08:20.004272 2026] [security2:error] [pid 16174:tid 16174] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 20:08:20.004272 2026] [security2:error] [pid 16174:tid 16174] [client 34.12.90.8:50140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brunerpamela.com"] [uri "/.git/config"] [unique_id "af_MdJQXIg7Ik01w5x5JtgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-09 23:54:02
UTC ·
(6 months ago)
34.12.90.8 - - [10/May/2026:01:54:01 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 6.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 22:57:28
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 18:57:24.606644 2026] [security2:error] [pid 32575:tid 32575] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 18:57:24.606644 2026] [security2:error] [pid 32575:tid 32575] [client 34.12.90.8:46422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "parasolia.angelabcomics.com"] [uri "/.git/config"] [unique_id "af-71DFmksnT_LLs8-4L8wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-05-09 22:46:44
UTC ·
(6 months ago)
[SunMay1000:46:39.5992192026][security2:error][pid32090:tid32222][client34.12.90.8:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING ...
show more
[SunMay1000:46:39.5992192026][security2:error][pid32090:tid32222][client34.12.90.8:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"tcservices.ch\"][uri\"/.git/config\"][unique_id\"af-5T0nq2QDwb6OSSh4dawAAARE\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 22:36:33
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 18:36:26.896438 2026] [security2:error] [pid 31025:tid 31025] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 18:36:26.896438 2026] [security2:error] [pid 31025:tid 31025] [client 34.12.90.8:60306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cuteswimwear.brazilianbottom.com"] [uri "/.git/config"] [unique_id "af-26uhp3ydmQdyTOcv5xQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-05-09 21:59:44
UTC ·
(6 months ago)
Auto-ban: >3000 req/min op 2026-05-09
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-09 21:46:36
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 17:46:30.615502 2026] [security2:error] [pid 6824:tid 6824] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.90.8 (8.90.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 17:46:30.615502 2026] [security2:error] [pid 6824:tid 6824] [client 34.12.90.8:41322] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hakanbasboga.com.amybeam.com"] [uri "/.git/config"] [unique_id "af-rNgPXJbc7NPQFY8GujQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-09 21:40:08
UTC ·
(6 months ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot