🇩🇪
mondor.ro
2026-08-29 02:45:06
UTC ·
(2 months ago)
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.13.14.168, Reason:[(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (GB/United Kingdom/168.14.13.34.bc.googleusercontent.com): 3 in the last 3600 secs]; ...
show more
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.13.14.168, Reason:[(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (GB/United Kingdom/168.14.13.34.bc.googleusercontent.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
🇬🇧
consul.to
2026-08-29 01:33:11
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 00:38:11
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (168.14.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:38:05.419657 2026] [security2:error] [pid 29358:tid 29 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (168.14.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:38:05.419657 2026] [security2:error] [pid 29358:tid 29358] [client 34.13.14.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "betiqos.com"] [uri "/site/.git/config"] [unique_id "apIp7fXiaqnNZPecio-SmwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
OptimusGO
2026-08-28 22:05:07
UTC ·
(2 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-08-28 23:05:07 UTC
Log evidence:
34.13.14.168 - - [28/Aug/2026:23:05:05 +0100] "GET /site/.git/config HTTP/1.1" 404 146 "-" "crusader-wor ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-08-28 23:05:07 UTC
Log evidence:
34.13.14.168 - - [28/Aug/2026:23:05:05 +0100] "GET /site/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.13.14.168 - - [28/Aug/2026:23:05:05 +0100] "GET /wordpress/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.13.14.168 - - [28/Aug/2026:23:05:05 +0100] "GET /var/www/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
show less
Port Scan
Brute-Force
🇳🇱
homeshowdomain.nl
2026-08-28 22:00:38
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-28 19:16:40
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (168.14.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 15:16:33.842397 2026] [security2:error] [pid 19926:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (168.14.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 15:16:33.842397 2026] [security2:error] [pid 19926:tid 19926] [client 34.13.14.168:60992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ditchthediaper.com"] [uri "/.git/config"] [unique_id "apHekZcx9zouH0IkTljfZQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-08-28 17:45:25
UTC ·
(2 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.13.14.168 (GB/United Kingdom/168.14.13.34.bc.googleusercontent.com): 2 in the last 3600 secs
Web App Attack
🇳🇱
e.fierstra
2026-08-28 17:35:15
UTC ·
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-08-28 17:34:52
UTC ·
(2 months ago)
34.13.14.168 - - [28/Aug/2026:19:34:51 +0200] "GET /app/.git/config HTTP/1.1" 502 157 "-" "crusader-worker/1.0" "admin.pingusmc.org"
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 17:27:55
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (168.14.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:27:50.534432 2026] [security2:error] [pid 32691:tid 32 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (168.14.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:27:50.534432 2026] [security2:error] [pid 32691:tid 32691] [client 34.13.14.168:51552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "q-mice.com.qcyprus.com"] [uri "/public/.git/config"] [unique_id "apHFFoeuVYHWqZt0-gBSXwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
mscode.pl
2026-08-28 16:56:45
UTC ·
(2 months ago)
Triggered Cloudflare WAF (firewallManaged) from GB.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Zone: status.selify.io
Endpoint: /site/.git/config
UA: crusader-worker/1.0
Bad Web Bot
🇬🇧
Aetherweb Ark
2026-08-28 13:31:50
UTC ·
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.13.14.168 (GB/United Kingdom/168.14.13.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇷🇺
cnaize
2026-08-28 13:12:51
UTC ·
(2 months ago)
Malicious activity blocked by Meds firewall
Port Scan
🇫🇷
masterguru
2026-08-28 12:15:57
UTC ·
(2 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 11:21:45
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (168.14.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 07:21:39.471107 2026] [security2:error] [pid 7280:tid 728 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.13.14.168 (168.14.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 07:21:39.471107 2026] [security2:error] [pid 7280:tid 7280] [client 34.13.14.168:58468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wuijster.com"] [uri "/.git/config"] [unique_id "apFvQ4Wslixfo8md6drjKAAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack