|
🇿🇦
conure.sh
|
|
csagent: score 19.9: secrets grab x2; 1 domain(s) in 2s
|
Web App Attack
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 01:16:39.112638 2026] [security2:error] [pid 2316:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 01:16:39.112638 2026] [security2:error] [pid 2316:tid 2316] [client 34.92.170.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.psychoclast.com"] [uri "/.git/config"] [unique_id "aqeDNy6hg7L5RCzMBnEKYAAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇳
evicky2002
|
|
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking
Brute-Force
SSH
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 00:10:17.889422 2026] [security2:error] [pid 855:tid 85 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 13 00:10:17.889422 2026] [security2:error] [pid 855:tid 855] [client 34.92.170.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ndanetworks.com"] [uri "/.git/config"] [unique_id "aqYiKbiC6GUO2_mcT6Jt_QAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
itsolon
|
|
[13/Sep/2026:03:24:40 +0200] 17892626807.808703 34.92.170.188 40834 217.154.7.177 443
[13/Sep/2026:03:24:41 +0200] 178926268187.063405 34.92.170.188 40834 217.154.7.177 443
[13/Sep/2026:03:24:41 +0200] 178926268128.713005 34.92.170.188 40834 217.154. ...
show more
[13/Sep/2026:03:24:40 +0200] 17892626807.808703 34.92.170.188 40834 217.154.7.177 443
[13/Sep/2026:03:24:41 +0200] 178926268187.063405 34.92.170.188 40834 217.154.7.177 443
[13/Sep/2026:03:24:41 +0200] 178926268128.713005 34.92.170.188 40834 217.154.7.177 443
[13/Sep/2026:03:24:41 +0200] 178926268111.178190 34.92.170.188 40834 217.154.7.177 443
[13/Sep/2026:03:24:41 +0200] 178926268130.130987 34.92.170.188 40834 217.154.7.177 443
...
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
🇫🇷
renzo64
|
|
Domain : MailEnable WebMail
Rule : hack
2026-09-13 00:32:23 ***hidden-privacy*** GET /php.php - 443 - 34.92.170.188 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - 404 0 2 1524 330 202 - -
|
Hacking
SQL Injection
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 20:19:15.601924 2026] [security2:error] [pid 27830:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 20:19:15.601924 2026] [security2:error] [pid 27830:tid 27830] [client 34.92.170.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.luisguacache.com"] [uri "/.git/config"] [unique_id "aqXsA_wLVtsrPV-yGHU_-wAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing.
|
Web App Attack
|
|
🇩🇪
lolyay
|
|
34.92.170.188 - - [12/Sep/2026:20:36:24 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.92.170.188 - - [12/Sep/2026:20:36:25 +0000 ...
show more
34.92.170.188 - - [12/Sep/2026:20:36:24 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.92.170.188 - - [12/Sep/2026:20:36:25 +0000] "GET /.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 15:36:15.871845 2026] [security2:error] [pid 14233:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 15:36:15.871845 2026] [security2:error] [pid 14233:tid 14233] [client 34.92.170.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.local639.com"] [uri "/.git/config"] [unique_id "aqWpr3ZVrJ3OFS-6MU0MbAAAABg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇷🇴
gtheo99
|
|
(mod_security) mod_security (id:900006) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 3 in the last 900 secs (CF_ENABLE)
|
Port Scan
|
|
🇩🇪
rh24
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.92.170.188 (HK/Hong Kong/188.170.92.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 11:03:40.810756 2026] [security2:error] [pid 19979:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.170.188 (188.170.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 11:03:40.810756 2026] [security2:error] [pid 19979:tid 19979] [client 34.92.170.188:36384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.more-grace.com"] [uri "/.git/config"] [unique_id "aqVpzPQVU7GMwVKZzJ8YwwAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|