๐บ๐ธ
TPI-Abuse
2026-09-29 00:07:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.114.14.35 (35.14.114.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.14.35 (35.14.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:07:00.669739 2026] [security2:error] [pid 498:tid 498] [client 136.114.14.35:46826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.teachingthestars.com"] [uri "/.git/config"] [unique_id "arsBJMr0PpAv1cqIITu4eAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-28 08:33:17
(1 day ago)
2026/09/28 08:33:15 [error] 2479712#2479712: *387272 [client 136.114.14.35] ModSecurity: Access deni ...
show more
2026/09/28 08:33:15 [error] 2479712#2479712: *387272 [client 136.114.14.35] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `55' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.29.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "dockerhub.ingeltechgh.com"] [uri "/"] [unique_id "179058439586.468968"] [ref ""], client: 136.114.14.35, server: srv.ingeltechgh.com, request: "POST / HTTP/1.1", host: "dockerhub.ingeltechgh.com"
2026/09/28 08:33:15 [error] 2479712#2479712: *387272 [client 136.114.14.35] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `55' ) [file "/usr/l
...
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-28 04:33:34
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.114.14.35 (35.14.114.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.14.35 (35.14.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 00:33:27.294227 2026] [security2:error] [pid 13479:tid 13479] [client 136.114.14.35:35478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tt-w.com"] [uri "/.git/config"] [unique_id "arnuF6SKoP8-g7A--xHS3gAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 03:27:27
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.114.14.35 (35.14.114.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.14.35 (35.14.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 23:27:23.144119 2026] [security2:error] [pid 22570:tid 22570] [client 136.114.14.35:49998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tttns.com"] [uri "/.git/config"] [unique_id "arnem69WWNhYhmYaVN1UdgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 20:20:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 136.114.14.35 (35.14.114.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.14.35 (35.14.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 16:20:51.999226 2026] [security2:error] [pid 28404:tid 28404] [client 136.114.14.35:34568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.1954topresent.com"] [uri "/.git/config"] [unique_id "argpIwv5JUSr_f37kM6FxAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-22 22:02:27
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-21.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-09-21 22:02:59
(1 week ago)
Auto-ban: >3000 req/min op 2026-09-21
Web App Attack
SSH
Hacking
๐ณ๐ฑ
Alt255
2026-09-21 09:06:53
(1 week ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 136 ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 136.114.14.35 - - \[21/Sep/2026:11:06:46 +0200\] "GET /.git/config HTTP/1.1" 301 663 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-21 08:35:00
(1 week ago)
136.114.14.35 - - [21/Sep/2026:10:34:58 +0200] "GET /.git/config HTTP/1.1" 404 6895 "-" "Mozilla/5.0 ...
show more
136.114.14.35 - - [21/Sep/2026:10:34:58 +0200] "GET /.git/config HTTP/1.1" 404 6895 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Hazzard
2026-09-20 19:36:59
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐ฎ๐น
VHosting
2026-09-20 19:00:11
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack