๐ฉ๐ช
iNetWorker
2026-09-04 01:39:10
(6 minutes ago)
trolling for resource vulnerabilities
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-04 01:26:43
(19 minutes ago)
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 21:26:36.485965 2026] [security2:error] [pid 20522:tid 20522] [client 136.108.54.95:8976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flightclaimservices.com"] [uri "/.git/config"] [unique_id "apoeTIUzn3CriaeJOJCzbgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-04 00:38:50
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 20:38:45.551876 2026] [security2:error] [pid 14056:tid 14056] [client 136.108.54.95:38498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gdpeters.com"] [uri "/.git/config"] [unique_id "apoTFaFjzP6VkVAOgnbEmgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 23:22:02
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:21:54.895262 2026] [security2:error] [pid 6810:tid 6810] [client 136.108.54.95:63972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exploratorymusic.net"] [uri "/.git/config"] [unique_id "apoBEleL-lQqEX4IFfYprwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-09-03 23:20:04
(2 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-03 22:53:42
(2 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-03 22:53:40
(2 hours ago)
136.108.54.95 - - [04/Sep/2026:00:53:37 +0200] "GET /.git/config HTTP/1.1" 403 4517 "-" "Mozilla/5.0 ...
show more
136.108.54.95 - - [04/Sep/2026:00:53:37 +0200] "GET /.git/config HTTP/1.1" 403 4517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
136.108.54.95 - - [03/Sep/2026:23:06:15 +0200] "GET /.git/config HTTP/1.1" 403 4469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
136.108.54.95 - - [03/Sep/2026:22:25:27 +0200] "GET /.git/config HTTP/1.1" 403 4431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
show less
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-03 22:08:14
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:08:07.993589 2026] [security2:error] [pid 26790:tid 26790] [client 136.108.54.95:9140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dunnretired.com"] [uri "/.git/config"] [unique_id "apnvxxxu4ZpcVPoj1IVtYgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 21:44:32
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:44:27.793442 2026] [security2:error] [pid 10629:tid 10629] [client 136.108.54.95:14596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gmacguffin.com"] [uri "/.git/config"] [unique_id "apnqO6DGnT9T2BfIDdODPwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-09-03 21:18:18
(4 hours ago)
CMS/framework probe: 136.108.54.95 - - [03/Sep/2026:23:18:17 +0200] "GET /.git/config HTTP/1.1" 444 ...
show more
CMS/framework probe: 136.108.54.95 - - [03/Sep/2026:23:18:17 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" asn=396982 org="Google LLC" country=US
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 20:30:35
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 16:30:29.442322 2026] [security2:error] [pid 11748:tid 11748] [client 136.108.54.95:61776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fedeolivaperu.com"] [uri "/.git/config"] [unique_id "apnY5dLpYPirNIu3bo_regAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-03 20:04:02
(5 hours ago)
cloudlinux2 fail2ban: 2026-09-03 21:58:52,536 fail2ban.filter [1472]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-03 21:58:52,536 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 136.108.54.95 - 2026-09-03 21:58:52cloudlinux2 fail2ban: 2026-09-03 21:58:47,302 fail2ban.filter [1472]: INFO [plesk-wordpress] Found 172.98.33.18 - 2026-09-03 21:58:45cloudlinux2 fail2ban: 2026-09-03 21:59:08,142 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 35.240.213.148 - 2026-09-03 21:59:08cloudlinux2 fail2ban: 2026-09-03 21:59:08,065 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 35.240.213.148 - 2026-09-03 21:59:07cloudlinux2 fail2ban: 2026-09-03 21:59:18,536 fail2ban.actions [1472]: NOTICE [recidive] Ban 195.178.110.22cloudlinux2 fail2ban: 2026-09-03 21:59:18,325 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 195.178.110.22 - 2026-09-03 21:59:18cloudlinux2 fail2ban: 2026-09-03 21:59:18,195 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 195.178.110.22 - 2026-09-03 21:59:18cloudlinux2 fail2ban: 2026
show less
Web App Attack
Anonymous
2026-09-03 19:57:02
(5 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 19:48:38
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.54.95 (95.54.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:48:33.079801 2026] [security2:error] [pid 31249:tid 31273] [client 136.108.54.95:64018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "garyjahrig.com"] [uri "/.git/config"] [unique_id "apnPEQyTSOV41p3JP_a2WgAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
MM-bot
2026-09-03 19:44:28
(6 hours ago)
URL-probe: HTTP/1.1 GET request on /.git/config (2026-09-03 21:44:28 UTC+2)
Web App Attack
Hacking