🇮🇳
evicky2002
2026-05-20 04:30:47
UTC ·
(5 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2026-05-09 21:59:24
UTC ·
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-08.
Web App Attack
SSH
Hacking
🇨🇦
polycoda
2026-05-08 07:14:40
UTC ·
(6 months ago)
AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
🇷🇴
INTEQ
2026-05-08 06:56:24
UTC ·
(6 months ago)
Web attack from 34.18.19.141
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 06:46:21
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 02:46:17.802537 2026] [security2:error] [pid 29007:tid 29 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 02:46:17.802537 2026] [security2:error] [pid 29007:tid 29007] [client 34.18.19.141:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.distro.media"] [uri "/.git/config"] [unique_id "af2GuYKXRRnugvsm17q27wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 06:29:44
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 02:29:41.116395 2026] [security2:error] [pid 20164:tid 20 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 02:29:41.116395 2026] [security2:error] [pid 20164:tid 20164] [client 34.18.19.141:56376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lphalloweenparty.joesteiner.com"] [uri "/.git/config"] [unique_id "af2C1S7-qX5gDgo6b5QBugAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 05:39:46
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 01:39:40.112070 2026] [security2:error] [pid 31407:tid 31 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 01:39:40.112070 2026] [security2:error] [pid 31407:tid 31407] [client 34.18.19.141:48612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "revision.ws"] [uri "/.git/config"] [unique_id "af13HHG8VODUmTRBPuhyWgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 05:19:39
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 01:19:33.974033 2026] [security2:error] [pid 14049:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 01:19:33.974033 2026] [security2:error] [pid 14049:tid 14049] [client 34.18.19.141:35344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "escondido-columbusclub.com"] [uri "/.git/config"] [unique_id "af1yZbI8dG3DA98TS8EJ4AAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
6kilowatti
2026-05-08 04:56:14
UTC ·
(6 months ago)
34.18.19.141 - - [08/May/2026:07:56:13 +0300] "GET /.git/config HTTP/1.1" 404 60 "-" "Opera/7.50 (Windows ME; U) [en]"
...
Web App Attack
Anonymous
2026-05-08 04:47:12
UTC ·
(6 months ago)
Bot / seems abusive / Apache connections: 49
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 04:36:49
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 00:36:41.975779 2026] [security2:error] [pid 22053:tid 22 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 00:36:41.975779 2026] [security2:error] [pid 22053:tid 22053] [client 34.18.19.141:43336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "partybusdet.com"] [uri "/.git/config"] [unique_id "af1oWY-k0-6aZ3AIGwIHygAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
octageeks.com
2026-05-08 04:07:03
UTC ·
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 03:42:53
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 23:42:49.268347 2026] [security2:error] [pid 11878:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.18.19.141 (141.19.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 23:42:49.268347 2026] [security2:error] [pid 11878:tid 11878] [client 34.18.19.141:49664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.delidalga.chevronparkett.com"] [uri "/.git/config"] [unique_id "af1buejTyL2MXeAMWBT16QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-05-08 03:42:46
UTC ·
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.18.19.141 (QA/Qatar/141.19.18.34.bc.googleusercontent.com): 1 in the last 3600 secs
Web App Attack
🇩🇪
4server
2026-05-08 03:09:33
UTC ·
(6 months ago)
[FriMay0805:09:26.4349252026][security2:error][pid1304558:tid1304612][client34.18.19.141:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[FriMay0805:09:26.4349252026][security2:error][pid1304558:tid1304612][client34.18.19.141:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"sanierung-pilzen-schimmel.ch\"][uri\"/.git/config\"][unique_id\"af1T5irTk90OQHLLMKL0UgAAAFI\"]
show less
Port Scan
Brute-Force
Web App Attack