๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:00:38
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 14:28:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:28:24.791464 2026] [security2:error] [pid 21617:tid 21617] [client 136.107.142.224:48758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crm.kircali.net"] [uri "/.git/config"] [unique_id "aigjCLlxZ9U_eg58SGHX3wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 13:16:52
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:16:46.919112 2026] [security2:error] [pid 22415:tid 22415] [client 136.107.142.224:46328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fiestadj.com.mx"] [uri "/.git/config"] [unique_id "aigSPkKpzSxzSHqPAIQXZAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 12:25:00
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:949110) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:24:55.426598 2026] [security2:error] [pid 15574:tid 15574] [client 136.107.142.224:55984] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.animation.freedrm.org"] [uri "/.git/config"] [unique_id "aigGFx9K4S_13Y5VvYicYwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 12:13:00
(1 week ago)
IM360 WAF: Direct access to sensitive file or dotfile
Hacking
๐ซ๐ท
Little Iguana
2026-06-09 11:38:42
(1 week ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 10:12:08
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:12:04.207968 2026] [security2:error] [pid 22371:tid 22371] [client 136.107.142.224:49804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spacebooger.com.mms-boss.net"] [uri "/.git/config"] [unique_id "aifm9MmpbX1u4sQ3OB1qiQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-06-09 08:47:22
(1 week ago)
12.800 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-09 06:24:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:24:09.477645 2026] [security2:error] [pid 28497:tid 28497] [client 136.107.142.224:43214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestcountryclubs.com"] [uri "/.git/config"] [unique_id "aiexiaj7I-oGVx9MeWLR5QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:00:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:00:25.946607 2026] [security2:error] [pid 9175:tid 9175] [client 136.107.142.224:48982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zmgmt.com"] [uri "/.git/config"] [unique_id "aied6TnyLl4dcv8qKSo9LgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 03:03:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:03:25.667785 2026] [security2:error] [pid 8286:tid 8286] [client 136.107.142.224:44176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jennyfiore.com"] [uri "/.git/config"] [unique_id "aieCfTBr4qdjBKtY3U3nxQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 01:10:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:10:23.385495 2026] [security2:error] [pid 7407:tid 7407] [client 136.107.142.224:58248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qavideo.com"] [uri "/.git/config"] [unique_id "aidn_y7OU_xggrZs8eEz8wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 00:51:34
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:51:30.726820 2026] [security2:error] [pid 26499:tid 26499] [client 136.107.142.224:40100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zpepg.xyz.justmakingitbetter.com"] [uri "/.git/config"] [unique_id "aidjkt1QiZpAvIBCYLGJVwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 00:20:07
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.142.224 (224.142.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:20:00.386939 2026] [security2:error] [pid 8056:tid 8062] [client 136.107.142.224:55148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swizzlestick.com"] [uri "/.git/config"] [unique_id "aidcMGP-zBC-XHM1teAYRAAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-08 22:01:31
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking