🇳🇱
homeshowdomain.nl
2026-05-02 22:08:49
UTC ·
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-01.
Web App Attack
SSH
Hacking
🇺🇸
itabu
2026-05-02 07:00:14
UTC ·
(6 months ago)
Malicious web scanner/bot detected.
Bad Web Bot
Web App Attack
🇮🇳
evicky2002
2026-05-02 06:00:00
UTC ·
(6 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-05-01 06:45:23
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 02:45:18.650826 2026] [security2:error] [pid 28366:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 02:45:18.650826 2026] [security2:error] [pid 28366:tid 28366] [client 34.174.67.188:57876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andiamorun.com"] [uri "/.git/config"] [unique_id "afRL_hD6bXtQoA0gKuWqEgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
itabu
2026-05-01 06:00:08
UTC ·
(6 months ago)
Malicious web scanner/bot detected.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 04:32:42
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 00:32:35.483529 2026] [security2:error] [pid 20153:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 00:32:35.483529 2026] [security2:error] [pid 20153:tid 20153] [client 34.174.67.188:54950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.candlecrawler.trade"] [uri "/.git/config"] [unique_id "afQs4w-jCI4-Zc4g1w_tqAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 04:11:45
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 00:11:42.235311 2026] [security2:error] [pid 17876:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 00:11:42.235311 2026] [security2:error] [pid 17876:tid 17876] [client 34.174.67.188:41792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "insidepublications.com"] [uri "/.git/config"] [unique_id "afQn_iGr-Zbokc4jsoia6AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Epimetheus
2026-05-01 03:58:36
UTC ·
(6 months ago)
Unauthorized access attempts:
[GET] /.git/config
UA: Mozilla/5.0 (iPad; CPU OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Mobile/15E148 Safari/604.1
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 03:43:21
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 23:43:16.977120 2026] [security2:error] [pid 5781:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 23:43:16.977120 2026] [security2:error] [pid 5781:tid 5790] [client 34.174.67.188:41564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "e-dome.co.jp"] [uri "/.git/config"] [unique_id "afQhVPJnTJYKnRRnjWOAIQAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 03:18:51
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 23:18:47.973197 2026] [security2:error] [pid 26106:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 23:18:47.973197 2026] [security2:error] [pid 26106:tid 26106] [client 34.174.67.188:39852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billthompsons.com"] [uri "/.git/config"] [unique_id "afQbl0WlEEtzsUjrhpeP_QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-01 02:16:02
UTC ·
(6 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 02:01:56
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 22:01:49.205825 2026] [security2:error] [pid 22637:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.174.67.188 (188.67.174.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 22:01:49.205825 2026] [security2:error] [pid 22637:tid 22637] [client 34.174.67.188:59628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "setx-law.com"] [uri "/.git/config"] [unique_id "afQJjeLUdkVpNoXgOajt_gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-05-01 01:23:08
UTC ·
(6 months ago)
34.174.67.188 - - [01/May/2026:03:23:07 +0200] "GET /.git/config HTTP/1.1" 403 3484 "-" "Mozilla/5.0 (Linux; Android 9; ASUS_X00QD) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
...
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-05-01 01:03:02
UTC ·
(6 months ago)
Accessed trap at '/.git/config'
Web App Attack
🇮🇩
Burayot
2026-05-01 01:02:33
UTC ·
(6 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.174.67.188 (US/United States/188.67.174.34.bc.googleusercontent.com): 2 in the last 3600 secs
Web App Attack