🇮🇳
evicky2002
2026-07-08 06:29:13
UTC ·
(4 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇹🇷
Threat.live
2026-05-19 00:00:13
UTC ·
(5 months ago)
Suspicious Connection Attempts
Brute-Force
🇫🇮
Maxetow
2026-05-18 23:45:15
UTC ·
(5 months ago)
Scan port: 8888 | 1 total | size=40B
Port Scan
Anonymous
2026-05-18 23:13:03
UTC ·
(5 months ago)
2026-05-19T00:13:03.274701+01:00 vps kernel: [40886165.251583] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=34.151.244.218 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=32534 PROTO=TCP SPT=45982 DPT=8001 ...
show more
2026-05-19T00:13:03.274701+01:00 vps kernel: [40886165.251583] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=34.151.244.218 DST=54.37.14.118 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=32534 PROTO=TCP SPT=45982 DPT=8001 WINDOW=1024 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
🇩🇪
Blexyel
2026-05-15 16:26:54
UTC ·
(5 months ago)
34.151.244.218 - - [15/May/2026:08:50:38 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG SM-N935F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537. ...
show more
34.151.244.218 - - [15/May/2026:08:50:38 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 8.0.0; SAMSUNG SM-N935F Build/R16NW) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/9.4 Chrome/67.0.3396.87 Mobile Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 09:21:14
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 05:21:07.113851 2026] [security2:error] [pid 24581:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 05:21:07.113851 2026] [security2:error] [pid 24581:tid 24581] [client 34.151.244.218:51684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rankinpollination.com"] [uri "/.git/config"] [unique_id "agblg-aLaywUJvm3_XsuiAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 08:50:39
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:50:32.919505 2026] [security2:error] [pid 13269:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:50:32.919505 2026] [security2:error] [pid 13269:tid 13269] [client 34.151.244.218:48068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lfrmtmorris.encoremtmorris.com"] [uri "/.git/config"] [unique_id "agbeWNVZTzYadv9iGPdnHwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
EDSL
2026-05-15 08:49:45
UTC ·
(5 months ago)
[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 443)
Web App Attack
Port Scan
Hacking
🇧🇪
cmbplf
2026-05-15 08:42:58
UTC ·
(5 months ago)
614 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-15 08:18:19
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:18:15.091570 2026] [security2:error] [pid 8675:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:18:15.091570 2026] [security2:error] [pid 8675:tid 8675] [client 34.151.244.218:60144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oakglenhouse.com.benchmarkbcs.com"] [uri "/.git/config"] [unique_id "agbWx6yQVRJs6TJ8zeWyngAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
INTEQ
2026-05-15 08:06:40
UTC ·
(5 months ago)
Web attack from 34.151.244.218
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 07:12:52
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:12:48.307894 2026] [security2:error] [pid 14057:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:12:48.307894 2026] [security2:error] [pid 14057:tid 14057] [client 34.151.244.218:32908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "houston-church-of-god.org"] [uri "/.git/config"] [unique_id "agbHcI-W8CJIkX5Y8ib5MgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 06:40:32
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:40:28.352583 2026] [security2:error] [pid 9532:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.244.218 (218.244.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:40:28.352583 2026] [security2:error] [pid 9532:tid 9532] [client 34.151.244.218:49424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thectegroup.chapa.net"] [uri "/.git/config"] [unique_id "aga_3P7LAhjrRzBUckJujwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-15 06:29:30
UTC ·
(5 months ago)
Crappy bot probing nonexistent /.git/config
Brute-Force
Bad Web Bot
Web App Attack
🇩🇰
ScamAware
2026-05-15 06:18:14
UTC ·
(5 months ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack