🇮🇳
evicky2002
2026-05-20 04:30:47
UTC ·
(5 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2026-05-09 21:59:13
UTC ·
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-08.
Web App Attack
SSH
Hacking
Anonymous
2026-05-08 06:48:36
UTC ·
(6 months ago)
Drop from IP address 34.84.121.90 to tcp-port 443
Port Scan
🇺🇸
TPI-Abuse
2026-05-08 06:38:35
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 02:38:29.713655 2026] [security2:error] [pid 5489:tid 548 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 02:38:29.713655 2026] [security2:error] [pid 5489:tid 5489] [client 34.84.121.90:34874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.askthetarotcards.com"] [uri "/.git/config"] [unique_id "af2E5eU_2e1epRUUy-m8QAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-05-08 06:08:38
UTC ·
(6 months ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-05-08 05:38:46
UTC ·
(6 months ago)
34.84.121.90 - - [07/May/2026:23:38:46 -0600] "GET /.git/config HTTP/1.1" 301 7288 "-" "Roku/DVP-4.1 (024.01E01250A)"
...
Web App Attack
Anonymous
2026-05-08 04:42:02
UTC ·
(6 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
Anonymous
2026-05-08 04:32:35
UTC ·
(6 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-05-08 03:54:48
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 23:54:45.481820 2026] [security2:error] [pid 28976:tid 28 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 23:54:45.481820 2026] [security2:error] [pid 28976:tid 28976] [client 34.84.121.90:51898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.trendingnowsales.com.wholesalelivelobsters.com"] [uri "/.git/config"] [unique_id "af1ehZL7Nh3F_H4iom5hZAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 03:14:10
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 23:14:06.065292 2026] [security2:error] [pid 8760:tid 876 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 23:14:06.065292 2026] [security2:error] [pid 8760:tid 8760] [client 34.84.121.90:45510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.skintormint.com"] [uri "/.git/config"] [unique_id "af1U_i-EpL8uwEqGCnXp8wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 02:30:55
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 22:30:51.835131 2026] [security2:error] [pid 16183:tid 16 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 22:30:51.835131 2026] [security2:error] [pid 16183:tid 16183] [client 34.84.121.90:52706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.transport.ic1.biz"] [uri "/.git/config"] [unique_id "af1K26wQLc3zqSnsEIfLcgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Mundo Bueno
2026-05-08 02:10:23
UTC ·
(6 months ago)
[ISILIA Protection v2.1] Tentative d'accès: /.git/config | Pays: JP | UA: Mozilla/5.0 (Windows NT 5.1; rv:31.0) Gecko/20100101 Firefox/31.0
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 01:50:33
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 21:50:29.278914 2026] [security2:error] [pid 27273:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.121.90 (90.121.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 21:50:29.278914 2026] [security2:error] [pid 27273:tid 27273] [client 34.84.121.90:36448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lovebuilds.com"] [uri "/.git/config"] [unique_id "af1BZYUFn2OjNNL8d3nYBQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-05-08 01:40:55
UTC ·
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.84.121.90 (JP/Japan/90.121.84.34.bc.googleusercontent.com): 1 in the last 3600 secs
Web App Attack
🇫🇷
✨
2026-05-08 01:32:14
UTC ·
(6 months ago)
Domain : MailEnable WebMail
Rule : config
2026-05-08 01:30:45 ***hidden-privacy*** GET /.git/config - 443 - 34.84.121.90 Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 Nokia6120c/3.70; Profile/MIDP-2.0 Configuration/CLDC-1.1) AppleWebKit/413 (KHTML, lik ...
show more
Domain : MailEnable WebMail
Rule : config
2026-05-08 01:30:45 ***hidden-privacy*** GET /.git/config - 443 - 34.84.121.90 Mozilla/5.0 (SymbianOS/9.2; U; Series60/3.1 Nokia6120c/3.70; Profile/MIDP-2.0 Configuration/CLDC-1.1) AppleWebKit/413 (KHTML, like Gecko) Safari/413 - 404 8 0 1403 284 1589 - -
show less
Hacking
SQL Injection