🇳🇱
homeshowdomain.nl
2025-12-16 22:59:44
UTC ·
(10 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-12-15.
Hacking
Web App Attack
SSH
🇬🇧
[email protected]
2025-12-16 00:40:22
UTC ·
(10 months ago)
...
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2025-12-15 22:59:31
UTC ·
(10 months ago)
Auto-ban: >3000 req/min op 2025-12-15
Hacking
Web App Attack
SSH
Anonymous
2025-12-15 19:14:33
UTC ·
(10 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 19:07:23
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 14:07:19.610290 2025] [security2:error] [pid 11454: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 14:07:19.610290 2025] [security2:error] [pid 11454:tid 11454] [client 136.112.133.239:44094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plugsinc.com"] [uri "/.git/config"] [unique_id "aUBcZ6vE1jVItFhvALS45wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-12-15 18:55:00
UTC ·
(10 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 136.112.133.239 (US/United States/239.133.112.136.bc.googleusercontent.com): 2 in the last 3600 secs
Web App Attack
Anonymous
2025-12-15 18:44:10
UTC ·
(10 months ago)
$f2bV_matches
Brute-Force
🇺🇸
TPI-Abuse
2025-12-15 18:35:54
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 13:35:51.112587 2025] [security2:error] [pid 12283: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 13:35:51.112587 2025] [security2:error] [pid 12283:tid 12283] [client 136.112.133.239:56530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plazahacienda.com"] [uri "/.git/config"] [unique_id "aUBVB1lFqAHDKI3qxkJZ8AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 18:01:54
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 13:01:48.199052 2025] [security2:error] [pid 20344: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 13:01:48.199052 2025] [security2:error] [pid 20344:tid 20344] [client 136.112.133.239:34796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "platformintelligence.com"] [uri "/.git/config"] [unique_id "aUBNDI6dLwazM5xKk7M9fgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2025-12-15 17:48:49
UTC ·
(10 months ago)
Login credentials theft attempt
Hacking
🇺🇸
TPI-Abuse
2025-12-15 17:36:51
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 12:36:44.093429 2025] [security2:error] [pid 24039: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 12:36:44.093429 2025] [security2:error] [pid 24039:tid 24058] [client 136.112.133.239:38948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "planillas.net"] [uri "/.git/config"] [unique_id "aUBHLApKqJk7FDkP4EdS-gAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2025-12-15 17:25:07
UTC ·
(10 months ago)
Multiple WAF Violations
Web App Attack
🇩🇪
big-cloud.nl
2025-12-15 16:45:49
UTC ·
(10 months ago)
Try to access /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2025-12-15 16:45:26
UTC ·
(10 months ago)
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 11:45:18.869841 2025] [security2:error] [pid 26488: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.112.133.239 (239.133.112.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 15 11:45:18.869841 2025] [security2:error] [pid 26488:tid 26488] [client 136.112.133.239:60860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pkmachine.com"] [uri "/.git/config"] [unique_id "aUA7HvjYXNfCJn9_AXfa8QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
piticu iuli
2025-12-15 16:42:13
UTC ·
(10 months ago)
(mod_security) mod_security triggered on hostname [redacted] 136.112.133.239 (US/United States/239.133.112.136.bc.googleusercontent.com)
SQL Injection