🇳🇱
homeshowdomain.nl
2026-01-27 22:59:53
UTC ·
(9 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-01-26.
Hacking
Web App Attack
SSH
🇺🇸
octageeks.com
2026-01-27 05:06:43
UTC ·
(9 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
jjnxpct
2026-01-27 04:46:58
UTC ·
(9 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config]
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-01-26 22:59:02
UTC ·
(9 months ago)
Auto-ban: >3000 req/min op 2026-01-26
Hacking
Web App Attack
SSH
🇧🇪
cmbplf
2026-01-26 22:39:31
UTC ·
(9 months ago)
170 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇫🇷
ingroscart.it
2026-01-26 20:17:37
UTC ·
(9 months ago)
(mod_security) mod_security triggered on hostname [redacted] 34.26.168.186 (US/United States/186.168.26.34.bc.googleusercontent.com)
SQL Injection
Anonymous
2026-01-26 19:24:03
UTC ·
(9 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 19:23:04
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 14:22:59.125317 2026] [security2:error] [pid 26600:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 14:22:59.125317 2026] [security2:error] [pid 26600:tid 26600] [client 34.26.168.186:36486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intnlc.org"] [uri "/.git/config"] [unique_id "aXe_E9nBMAXkR9a-9pCrrwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 19:04:53
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 14:04:48.597491 2026] [security2:error] [pid 2008:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 14:04:48.597491 2026] [security2:error] [pid 2008:tid 2008] [client 34.26.168.186:58282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internet-brochures.com"] [uri "/.git/config"] [unique_id "aXe60GBiDrsRHrQui4ct2AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-01-26 18:49:42
UTC ·
(9 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
etu brutus
2026-01-26 18:36:21
UTC ·
(9 months ago)
34.26.168.186 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 18:28:42
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 13:28:35.631138 2026] [security2:error] [pid 16510:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 13:28:35.631138 2026] [security2:error] [pid 16510:tid 16510] [client 34.26.168.186:38084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "interforce.com"] [uri "/.git/config"] [unique_id "aXeyU5_tJyPXXJ1knpB4rQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
INTEQ
2026-01-26 18:20:27
UTC ·
(9 months ago)
Web attack from 34.26.168.186
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 18:08:53
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 13:08:46.401639 2026] [security2:error] [pid 548:tid 54 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 13:08:46.401639 2026] [security2:error] [pid 548:tid 548] [client 34.26.168.186:38000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intellian.us"] [uri "/.git/config"] [unique_id "aXetrmuX6rFiNticXW1qQwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-26 17:53:35
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 12:53:29.081379 2026] [security2:error] [pid 22551:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.26.168.186 (186.168.26.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jan 26 12:53:29.081379 2026] [security2:error] [pid 22551:tid 22551] [client 34.26.168.186:55034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "integrabroadcast.com"] [uri "/.git/config"] [unique_id "aXeqGdI22qfyLp25R4t-wAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack