🇳🇱
homeshowdomain.nl
2026-08-27 21:59:39
(13 hours ago)
Auto-ban: >3000 req/min op 2026-08-27
Web App Attack
SSH
Hacking
🇳🇴
Abuse Buster
2026-08-27 20:32:43
(14 hours ago)
136.70.153.113 - - [27/Aug/2026:22:32:41 +0200] "GET /site/.git/config HTTP/1.1" 404 22 "-" "crusade ...
show more
136.70.153.113 - - [27/Aug/2026:22:32:41 +0200] "GET /site/.git/config HTTP/1.1" 404 22 "-" "crusader-worker/1.0"
136.70.153.113 - - [27/Aug/2026:22:32:41 +0200] "GET /backend/.git/config HTTP/1.1" 404 22 "-" "crusader-worker/1.0"
...
show less
Web App Attack
🇫🇷
dynamix
2026-08-27 20:27:33
(15 hours ago)
Multiple WAF Violations
Web App Attack
2026-08-27 19:56:28
(15 hours ago)
tls scan
Port Scan
🇬🇧
gws-hostmaster
2026-08-27 19:10:48
(16 hours ago)
ModSecurity OWASP CRS (Anomaly Score: 5): Restricted File Access Attempt;
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 15:34:52
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.70.153.113 (113.153.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.153.113 (113.153.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:34:45.802077 2026] [security2:error] [pid 23973:tid 23973] [client 136.70.153.113:52930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barriebrown.com"] [uri "/api/.git/config"] [unique_id "apBZFX8188YyG0391gyQFwAAADo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-27 14:55:03
(20 hours ago)
suspicious request in access.log
Web App Attack
🇫🇷
masterguru
2026-08-27 10:30:04
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇫🇷
masterguru
2026-08-27 07:58:24
(1 day ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.70.153.113 (US/United States/113. ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.70.153.113 (US/United States/113.153.70.136.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-08-27 07:38:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.70.153.113 (113.153.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.153.113 (113.153.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 03:38:44.387490 2026] [security2:error] [pid 24858:tid 24858] [client 136.70.153.113:59794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexsource.com"] [uri "/public/.git/config"] [unique_id "ao_phD6ga739TalcmUbyLAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-27 05:30:08
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-27 02:19:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.70.153.113 (113.153.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.153.113 (113.153.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 22:19:46.345981 2026] [security2:error] [pid 6662:tid 6662] [client 136.70.153.113:44862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bknj2.org"] [uri "/public/.git/config"] [unique_id "ao-ewjWqcU6QKQ4WgE1I1QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-08-27 02:15:53
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 136.70.153.113 (US/United States/113.15 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 136.70.153.113 (US/United States/113.153.70.136.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-08-27 01:47:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.70.153.113 (113.153.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.153.113 (113.153.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 21:47:00.390342 2026] [security2:error] [pid 17727:tid 17727] [client 136.70.153.113:35024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.glamorgirl.net"] [uri "/.git/config"] [unique_id "ao-XFBiHFMGZ8cdFWqkAOAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-27 01:45:03
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack