🇺🇸
francelink.fr
2026-10-17 00:03:28
(12 hours ago)
Azure WAF blocked a request. Rule: 100300. Observed at: 2026-10-16T12:34:51.000Z.
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-16 21:59:29
(14 hours ago)
Auto-ban: >3000 req/min op 2026-10-16
Web App Attack
SSH
Hacking
🇺🇸
Lea
2026-10-16 12:51:40
(23 hours ago)
Malicious web probe on bearstool.com: 136.70.115.203 - - [16/Oct/2026:08:51:40 -0400] "GET /.git/con ...
show more
Malicious web probe on bearstool.com: 136.70.115.203 - - [16/Oct/2026:08:51:40 -0400] "GET /.git/config HTTP/1.1" 444 0 "" "-"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 12:48:33
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.70.115.203 (203.115.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.115.203 (203.115.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:48:25.841844 2026] [security2:error] [pid 13874:tid 13874] [client 136.70.115.203:57368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lenorasflowers.lahamradio.com"] [uri "/.git/config"] [unique_id "atIdGW9P0Eitr0dA4CpqRAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
yitzhaq
2026-10-16 12:40:50
(23 hours ago)
136.70.115.203 - - [16/Oct/2026:14:40:46 +0200] "GET /.git/config HTTP/1.1" 403 4564 "-" "-"
136.70. ...
show more
136.70.115.203 - - [16/Oct/2026:14:40:46 +0200] "GET /.git/config HTTP/1.1" 403 4564 "-" "-"
136.70.115.203 - - [16/Oct/2026:14:40:46 +0200] "GET /.git/config HTTP/1.1" 403 4563 "-" "-"
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-16 12:31:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.70.115.203 (203.115.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.115.203 (203.115.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 08:31:36.751343 2026] [security2:error] [pid 14744:tid 14744] [client 136.70.115.203:37416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lekacos.com"] [uri "/.git/config"] [unique_id "atIZKM9n8oh7oThJPxXeJwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-16 12:30:45
(1 day ago)
[da.kdns.gr] httpd-config-scan: sites=leitz.gr; logs=/var/log/httpd/domains/leitz.gr.log; samples=/. ...
show more
[da.kdns.gr] httpd-config-scan: sites=leitz.gr; logs=/var/log/httpd/domains/leitz.gr.log; samples=/.git/config | fast_lane=true kernel_at=2026-10-16T12:30:13+00:00 | requests=1
show less
Hacking
Web App Attack
2026-10-16 12:26:03
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇩🇪
Lino Project
2026-10-16 12:18:36
(1 day ago)
136.70.115.203 - - [16/Oct/2026:14:18:32 +0200] "GET /.git/config HTTP/1.1" 403 5299 "-" "-"
...
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-10-16 12:14:26
(1 day ago)
136.70.115.203 - - [16/Oct/2026:14:14:25 +0200] "GET /.git/config HTTP/1.1" 403 5052 "-" "-"
...
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
kranem
2026-10-16 12:00:22
(1 day ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (G ...
show more
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
Timestamp: 2026-10-16T10:32:28Z
User-Agent: empty
show less
Bad Web Bot
🇳🇱
Alt255
2026-10-16 11:58:17
(1 day ago)
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 13 ...
show more
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 136.70.115.203 - - \[16/Oct/2026:13:58:04 +0200\] "GET /.git/config HTTP/1.1" 403 7479 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇨🇦
Anytech
2026-10-16 11:56:55
(1 day ago)
Blocked by ConnMonitor
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 11:56:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.70.115.203 (203.115.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.115.203 (203.115.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:56:25.646338 2026] [security2:error] [pid 4417:tid 4417] [client 136.70.115.203:44072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leeknight.com"] [uri "/.git/config"] [unique_id "atIQ6SFBMgLIJ9Kz3WjJCwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-10-16 11:53:10
(1 day ago)
(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 136.70.115.203 (US/United States ...
show more
(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 136.70.115.203 (US/United States/203.115.70.136.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack