🇮🇳
evicky2002
2026-09-20 00:01:15
UTC ·
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇧🇪
madeit
2026-09-19 13:56:21
UTC ·
(1 month ago)
Web App Attack
🇩🇪
Viveronese
2026-09-19 13:02:23
UTC ·
(1 month ago)
HTTP vulnerability scanning
Web App Attack
🇫🇷
renzo64
2026-09-19 12:39:04
UTC ·
(1 month ago)
Domain : MailEnable WebMail
Rule : config
2026-09-19 12:36:58 ***hidden-privacy*** GET /.git/config - 443 - 34.96.229.215 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - 404 8 0 1403 3 ...
show more
Domain : MailEnable WebMail
Rule : config
2026-09-19 12:36:58 ***hidden-privacy*** GET /.git/config - 443 - 34.96.229.215 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - 404 8 0 1403 344 201 - -
show less
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-09-19 10:42:00
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.96.229.215 (215.229.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 06:41:52.483449 2026] [security2:error] [pid 19977:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.229.215 (215.229.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 06:41:52.483449 2026] [security2:error] [pid 19977:tid 19977] [client 34.96.229.215:49962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.myitalianlife.org"] [uri "/.git/config"] [unique_id "aq5m8I9yRY0pUsoYjgfO0AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-09-19 06:44:48
UTC ·
(1 month ago)
(PERMBLOCK) 34.96.229.215 (HK/Hong Kong/-/Hong Kong/215.229.96.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
Hacking
🇺🇸
TPI-Abuse
2026-09-19 06:11:37
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.96.229.215 (215.229.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 02:11:31.317900 2026] [security2:error] [pid 15103:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.229.215 (215.229.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 02:11:31.317900 2026] [security2:error] [pid 15103:tid 15103] [client 34.96.229.215:50242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mthoodautoandtire.com"] [uri "/.git/config"] [unique_id "aq4nkwxKfrKZFjw5k8--LwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
oja
2026-09-19 05:05:47
UTC ·
(1 month ago)
Aggressive web scanner
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 02:12:51
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.96.229.215 (215.229.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 22:12:43.837836 2026] [security2:error] [pid 30285:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.229.215 (215.229.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 22:12:43.837836 2026] [security2:error] [pid 30285:tid 30285] [client 34.96.229.215:36162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.more-grace.com"] [uri "/.git/config"] [unique_id "aq3vmyULozYMWRjIn9PCpAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-19 02:00:05
UTC ·
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-09-19 01:51:59
UTC ·
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇪🇸
elcruzado.es
2026-09-19 01:48:14
UTC ·
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 34.96.229.215 (HK/Hong Kong/215.229.96.34.bc.googleusercontent.com)
SQL Injection
🇺🇸
TPI-Abuse
2026-09-18 23:09:15
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.96.229.215 (215.229.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 19:09:08.972415 2026] [security2:error] [pid 24123:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.229.215 (215.229.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 19:09:08.972415 2026] [security2:error] [pid 24123:tid 24123] [client 34.96.229.215:49522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.moaarmorer.com"] [uri "/.git/config"] [unique_id "aq3ElEja1wblE1OtePIIdQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-18 21:52:35
UTC ·
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 34.96.229.215 (HK/Hong Kong/215.229.96.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
4server
2026-09-18 21:20:39
UTC ·
(1 month ago)
[FriSep1823:20:34.2291672026][security2:error][pid4131448:tid4131529][client34.96.229.215:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacc ...
show more
[FriSep1823:20:34.2291672026][security2:error][pid4131448:tid4131529][client34.96.229.215:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.mjgold.ch\"][uri\"/.env.bak\"][unique_id\"aq2rIsS_SodKZV-1571pbQAAAZY\"]
show less
Port Scan
Brute-Force
Web App Attack
