๐ง๐ช
cmbplf
2026-09-24 06:02:57
(6 hours ago)
2.488 requests from abuseipdb.com blacklisted IP (2mos2w4d)
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-24 02:43:15
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 22:43:09.142875 2026] [security2:error] [pid 4863:tid 4863] [client 136.66.170.126:51878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.teghekatu24.am"] [uri "/.git/config"] [unique_id "arSOPawUunh_kGpLljTNlAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-23 23:35:02
(13 hours ago)
suspicious request in access.log
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-23 22:08:10
(14 hours ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.66.170.126 - - [24/Sep/2026:00:07:52 +0200] "GET /.git/config HTTP/2.0" 403 401 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-23 21:59:40
(15 hours ago)
Auto-ban: >3000 req/min op 2026-09-23
Web App Attack
SSH
Hacking
๐บ๐ธ
abuse-opdc
2026-09-23 21:35:42
(15 hours ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force
๐ฉ๐ช
FD-IX
2026-09-23 21:18:45
(15 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-09-23 20:06:00
(16 hours ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 15:24:35
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 11:24:29.561759 2026] [security2:error] [pid 12003:tid 12003] [client 136.66.170.126:57490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "budpowellbio.com"] [uri "/wordpress/.git/config"] [unique_id "arPvLbsoI56F1wIZwlT7RwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 14:06:07
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 10:06:02.934371 2026] [security2:error] [pid 31510:tid 31510] [client 136.66.170.126:54634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonnesfrequences.com"] [uri "/site/.git/config"] [unique_id "arPcyrJvPFQBdteyG6MY3QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 10:37:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 06:37:31.092528 2026] [security2:error] [pid 24291:tid 24291] [client 136.66.170.126:51070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bcbikini.com.puckerbikini.com"] [uri "/.git/config"] [unique_id "arOr60HNi9j6-EMDGMO0PAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 09:57:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.170.126 (126.170.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 05:57:28.906105 2026] [security2:error] [pid 2240900:tid 2240900] [client 136.66.170.126:44272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "balmedia.com"] [uri "/www/.git/config"] [unique_id "arOiiJi_UZzuWrFPRjFcYQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ญ๐บ
bcsaba
2026-09-23 09:56:32
(1 day ago)
Probing for .git:
136.66.170.126 - - [23/Sep/2026:11:56:26 +0200] "GET /.git/config HTTP/1.1" 403 14 ...
show more
Probing for .git:
136.66.170.126 - - [23/Sep/2026:11:56:26 +0200] "GET /.git/config HTTP/1.1" 403 146 "-" "crusader-worker/1.0"
show less
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-23 09:48:16
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
๐ฉ๐ช
LRob
2026-09-23 08:05:40
(1 day ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /wordpress/.git/config (+8 more) | 2026-09-23 08:05 UTC
show less
Hacking
Web App Attack