๐จ๐ญ
TheCoon
2026-05-28 17:15:01
(1 week ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-05-26 22:02:35
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-25.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-05-25 22:02:19
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-05-25
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-05-25 18:38:46
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 14:38:41.148188 2026] [security2:error] [pid 17510:tid 17510] [client 136.109.212.151:40610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.caribbeancoders.com"] [uri "/.git/config"] [unique_id "ahSXMdsT_KLxUG6oPR8WhQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-25 18:23:31
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 14:23:26.948476 2026] [security2:error] [pid 31965:tid 31965] [client 136.109.212.151:41968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.carefreesol.com"] [uri "/.git/config"] [unique_id "ahSTnqNArKS_4uncpIXQEQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
bescared
2026-05-25 18:22:32
(2 weeks ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
๐ง๐ท
Sabrina Soto
2026-05-25 18:10:01
(2 weeks ago)
Probe for vulnerabilities. Path attempted: /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-25 17:15:20
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 13:15:08.746711 2026] [security2:error] [pid 18713:tid 18713] [client 136.109.212.151:52616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.carboncreekwood.com"] [uri "/.git/config"] [unique_id "ahSDnCmsp0k7Bng7PREEyQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-25 16:43:14
(2 weeks ago)
(mod_security) mod_security (id:949110) triggered by 136.109.212.151 (151.212.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:949110) triggered by 136.109.212.151 (151.212.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 12:43:09.890965 2026] [security2:error] [pid 5140:tid 5140] [client 136.109.212.151:40010] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.captaincookfj.com"] [uri "/.git/config"] [unique_id "ahR8HQuBlp9zl7mFfak99QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-25 16:15:02
(2 weeks ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-25 16:03:21
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 12:03:14.893166 2026] [security2:error] [pid 14409:tid 14409] [client 136.109.212.151:53364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.capassoart.com"] [uri "/.git/config"] [unique_id "ahRywv32KdHNxyqqck1QuQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-25 15:38:38
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 11:38:35.149770 2026] [security2:error] [pid 11108:tid 11108] [client 136.109.212.151:39680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cannabizcorp.org.pellman-world.com"] [uri "/.git/config"] [unique_id "ahRs-65aQYkemtGe6qPctgAAAD8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-05-25 15:38:33
(2 weeks ago)
189 requests with url.path */.git/config
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-05-25 15:08:16
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 11:08:12.411976 2026] [security2:error] [pid 29128:tid 29128] [client 136.109.212.151:37968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.candlecrawler.trade"] [uri "/.git/config"] [unique_id "ahRl3FVBqmg_l4OoFU2UzgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-25 14:48:44
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.109.212.151 (151.212.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 25 10:48:37.129161 2026] [security2:error] [pid 11968:tid 11968] [client 136.109.212.151:40314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.canadianprimarysources.org"] [uri "/.git/config"] [unique_id "ahRhRT2r4YL5LD3I5RCJTAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack