๐ณ๐ฑ
homeshowdomain.nl
2026-10-23 21:59:33
(14 hours ago)
Auto-ban: >3000 req/min op 2026-10-23
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-23 21:46:45
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:46:41.133504 2026] [security2:error] [pid 31159:tid 31159] [client 136.108.16.164:45336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thehandyfamily.net"] [uri "/.git/config"] [unique_id "atvVwUgx-Yv81sYOFAC3OQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
netlinkpro
2026-10-23 21:19:00
(15 hours ago)
Web scanning: probed for /.git/config. 1 request, all refused (HTTP 4xx), 2026-10-23 21:19โ21:19 UTC ...
show more
Web scanning: probed for /.git/config. 1 request, all refused (HTTP 4xx), 2026-10-23 21:19โ21:19 UTC.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 21:07:12
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 17:07:07.065335 2026] [security2:error] [pid 23083:tid 23115] [client 136.108.16.164:42818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theextraordinaryoffice.monopostoyachts.com"] [uri "/.git/config"] [unique_id "atvMe7CtF1xsC7-fWoeJ1gAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 20:45:53
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 16:45:49.229282 2026] [security2:error] [pid 18766:tid 18766] [client 136.108.16.164:42980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.the.dental"] [uri "/.git/config"] [unique_id "atvHfTy04JF3sCn7ALk_IAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ณ
TFG-Server
2026-10-23 20:40:18
(15 hours ago)
Automated block: File theft attempt - tried to download secret/backup file x1 (e.g. /.git/config)
Web App Attack
Hacking
๐บ๐ธ
kosada.com
2026-10-23 20:02:15
(16 hours ago)
Repeated exploit attempts, for example: /.git/config /.git/config (HTTP/1.1 port 443)
Web App Attack
๐ฉ๐ช
gurnip
2026-10-23 19:55:29
(16 hours ago)
Vulnerability probe of page /.git/config, not found on the server.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 19:53:54
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:53:48.381075 2026] [security2:error] [pid 12440:tid 12440] [client 136.108.16.164:38636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theboates.com"] [uri "/.git/config"] [unique_id "atu7TKtzubi4AUc6ZJfi9wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-10-23 19:43:27
(16 hours ago)
Scanning for exposed credentials and private keys
Hacking
๐ฎ๐น
CoreTech srl
2026-10-23 19:38:56
(16 hours ago)
cloudlinux2 fail2ban: 2026-10-23 21:34:26,112 fail2ban.filter [1633]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-10-23 21:34:26,112 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 112.0.138.132 - 2026-10-23 21:34:26cloudlinux2 fail2ban: 2026-10-23 21:34:45,354 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 136.108.16.164 - 2026-10-23 21:34:45cloudlinux2 fail2ban: 2026-10-23 21:34:58,487 fail2ban.actions [1633]: NOTICE [plesk-modsecurity] Unban 147.78.241.164cloudlinux2 fail2ban: 2026-10-23 21:34:57,966 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 1.194.59.15 - 2026-10-23 21:34:57cloudlinux2 fail2ban: 2026-10-23 21:35:15,964 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 115.60.90.198 - 2026-10-23 21:35:15cloudlinux2 fail2ban: 2026-10-23 21:35:17,582 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 112.48.92.73 - 2026-10-23 21:35:17cloudlinux2 fail2ban: 2026-10-23 21:36:15,236 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 111.166.158.64 - 2026-10-23 21:36:15cloudlinux2 fail2
show less
Brute-Force
Anonymous
2026-10-23 19:30:04
(16 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 19:29:07
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:28:59.737234 2026] [security2:error] [pid 25722:tid 25722] [client 136.108.16.164:60400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theastoria.com.globalweb123.com"] [uri "/.git/config"] [unique_id "atu1e2oPxXVfqnBPnyZFigAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐น๐ญ
thaizone.com
2026-10-23 18:55:19
(17 hours ago)
Brute Force Attack on a Web Resources (probe) #1
DDoS Attack
Web Spam
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 18:44:14
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.16.164 (164.16.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:44:09.986804 2026] [security2:error] [pid 15541:tid 15541] [client 136.108.16.164:47526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tgcindustrial.com"] [uri "/.git/config"] [unique_id "atuq-ZlwyQwwWIWJTqEJjQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack