๐ณ๐ฑ
homeshowdomain.nl
2026-08-05 22:00:59
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-04.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-04 23:55:52
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 19:55:46.408239 2026] [security2:error] [pid 22947:tid 22947] [client 136.67.95.223:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ruralcommunitycare.org"] [uri "/.git/config"] [unique_id "anJ8Ai2tP4pm_E4GrI7J7QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
Olexiy Backend
2026-08-04 23:30:08
(2 weeks ago)
136.67.95.223
...
Bad Web Bot
Web App Attack
๐ต๐ฑ
nakordoni.eu
2026-08-04 23:30:06
(2 weeks ago)
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ...
show more
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Google LLC (US), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 79/100.
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-04 23:22:02
(2 weeks ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-04 23:14:31
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 19:14:24.346272 2026] [security2:error] [pid 2815250:tid 2815250] [client 136.67.95.223:54010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hsoftwaresystems.net"] [uri "/.git/config"] [unique_id "anJyUObHmDI3aVOEnooy_AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
SCHAPPY
2026-08-04 23:07:39
(2 weeks ago)
Probing for non-installed web apps or current vulnerabilities.
Hacking
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-08-04 23:03:17
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-04 22:52:36
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 18:52:31.086729 2026] [security2:error] [pid 610750:tid 610750] [client 136.67.95.223:40364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "texascottagebakers.com"] [uri "/.git/config"] [unique_id "anJtL0E_GCnUmmz9E9wXfgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-08-04 22:45:52
(2 weeks ago)
2.036 requests with url.path *.git/*
1.984 requests with url.path */.git/config
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-08-04 22:22:03
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 18:21:55.895811 2026] [security2:error] [pid 4603:tid 4611] [client 136.67.95.223:38686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lbakkercpa.com"] [uri "/.git/config"] [unique_id "anJmAyWVdSg82_E-r2hclQAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
gadix
2026-08-04 22:06:53
(2 weeks ago)
[05/Aug/2026:00:04:04.722250 +0200] anJh1HvMKsFQ1gbE9EiqLwAAAAU 136.67.95.223 43340 127.0.0.1 7081
[ ...
show more
[05/Aug/2026:00:04:04.722250 +0200] anJh1HvMKsFQ1gbE9EiqLwAAAAU 136.67.95.223 43340 127.0.0.1 7081
[05/Aug/2026:00:06:49.737051 +0200] anJiebk5EUIeTN91yIETGAAAARI 136.67.95.223 45230 127.0.0.1 7081
[05/Aug/2026:00:06:50.390876 +0200] anJienvMKsFQ1gbE9EiqPwAAAAw 136.67.95.223 45238 127.0.0.1 7081
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-04 21:48:31
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.95.223 (223.95.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 17:48:26.913815 2026] [security2:error] [pid 1721:tid 1721] [client 136.67.95.223:55282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.easttnpros.com.savingshvac.com"] [uri "/.git/config"] [unique_id "anJeKoAete4lI8UYcVOOKgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-04 21:38:41
(2 weeks ago)
136.67.95.223 - - [04/Aug/2026:23:38:40 +0200] "GET /.git/config HTTP/1.1" 403 2367 "-" "-"
...
Brute-Force
Web App Attack
๐ฉ๐ช
Hagen Schoebel
2026-08-04 21:22:41
(2 weeks ago)
Blocked by CrowdSec - anomaly score block: lfi: 5, anomaly: 5, (US)
Port Scan
Brute-Force
Web App Attack
SSH