🇮🇳
evicky2002
2026-07-06 15:38:20
UTC ·
(4 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇷🇴
/dev/null
2026-05-31 22:25:55
UTC ·
(5 months ago)
RouterOS: Portscanner detected.
Port Scan
Brute-Force
🇷🇴
/dev/null
2026-05-28 22:25:55
UTC ·
(5 months ago)
RouterOS: Portscanner detected.
Port Scan
Brute-Force
🇷🇴
/dev/null
2026-05-22 22:25:57
UTC ·
(5 months ago)
RouterOS: Portscanner detected.
Port Scan
Brute-Force
🇷🇴
/dev/null
2026-05-19 22:25:57
UTC ·
(5 months ago)
RouterOS: Portscanner detected.
Port Scan
Brute-Force
🇺🇸
Cyber Crusader
2026-05-18 17:56:27
UTC ·
(5 months ago)
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan
Hacking
Brute-Force
🇨🇳
ThreatBook.io
2026-05-16 00:20:41
UTC ·
(5 months ago)
ThreatBook Intelligence: Info more details on http://threatbook.io/ip/136.117.32.78
2026-05-15 17:27:54 /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 10:47:59
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 136.117.32.78 (78.32.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 06:47:52.088602 2026] [security2:error] [pid 6557:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.117.32.78 (78.32.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 06:47:52.088602 2026] [security2:error] [pid 6557:tid 6557] [client 136.117.32.78:41110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "healingworksmassage.studio"] [uri "/.git/config"] [unique_id "agb52MDrS7OpsCkR_E-dzQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Teufel100
2026-05-15 09:28:16
UTC ·
(5 months ago)
ModSecurity rejected a query'
Brute-Force
Hacking
Web App Attack
🇧🇪
cmbplf
2026-05-15 08:42:51
UTC ·
(5 months ago)
816 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-15 07:47:32
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 136.117.32.78 (78.32.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:47:26.318657 2026] [security2:error] [pid 5248:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.117.32.78 (78.32.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:47:26.318657 2026] [security2:error] [pid 5248:tid 5248] [client 136.117.32.78:54726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wordpress.martinka.org"] [uri "/.git/config"] [unique_id "agbPjgsRRbGfFkGfn0JHkQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 06:41:46
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 136.117.32.78 (78.32.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:41:38.624098 2026] [security2:error] [pid 3523:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.117.32.78 (78.32.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:41:38.624098 2026] [security2:error] [pid 3523:tid 3563] [client 136.117.32.78:37958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vinylnotespodcast.com.104ventures.com"] [uri "/.git/config"] [unique_id "agbAIoo7ma7D-wS9MqOHJgAAAYQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-05-15 05:59:10
UTC ·
(5 months ago)
[FriMay1507:59:04.4111972026][security2:error][pid290387:tid290499][client136.117.32.78:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLO ...
show more
[FriMay1507:59:04.4111972026][security2:error][pid290387:tid290499][client136.117.32.78:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.parrocchiaditesserete.ch.136-243-54-122.cpanel.site\"][uri\"/.git/config\"][unique_id\"aga2KDtE7Q3o-EsIvfkMKAAAAJc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 05:36:13
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 136.117.32.78 (78.32.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 01:36:09.414895 2026] [security2:error] [pid 7780:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.117.32.78 (78.32.117.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 01:36:09.414895 2026] [security2:error] [pid 7780:tid 7780] [client 136.117.32.78:47838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kitchen.pizzadata.com"] [uri "/.git/config"] [unique_id "agawyfrS7urxcGDOzdpYugAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-05-15 05:15:04
UTC ·
(5 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack