🇧🇷
Peregrine
2026-11-04 03:09:02
(1 hour ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 136.80.166.30 104.22.56.161 - - [02/Nov/2026:21:05:26 -0300] "GET /.git/config HTTP/1.1" 404 414
Bad Web Bot
🇬🇧
openstrike.co.uk
2026-11-03 06:18:04
(22 hours ago)
5 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-11-03 00:43:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.80.166.30 (30.166.80.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:43:08.389939 2026] [security2:error] [pid 15098:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 136.80.166.30 (30.166.80.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:43:08.389939 2026] [security2:error] [pid 15098:tid 15098] [client 136.80.166.30:38424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.phalanxemail.axiomemail.net"] [uri "/.git/config"] [unique_id "aukuHD-VSNdtS8k5V5skDgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 00:29:50
(1 day ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
🇩🇪
iNetWorker
2026-11-03 00:29:09
(1 day ago)
trolling for resource vulnerabilities
Web App Attack
🇧🇷
Peregrine
2026-11-03 00:05:29
(1 day ago)
Fail2Ban Jail s2: tomcat-honeypot | Evidence: 136.80.166.30 104.22.56.161 - - [02/Nov/2026:21:05:26 -0300] "GET /.git/config HTTP/1.1" 404 414
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-02 23:26:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.80.166.30 (30.166.80.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:26:40.925843 2026] [security2:error] [pid 8870:tid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.80.166.30 (30.166.80.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:26:40.925843 2026] [security2:error] [pid 8870:tid 8870] [client 136.80.166.30:50318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pbhomesinc.net"] [uri "/.git/config"] [unique_id "aukcMII4PvygwMYfVGqAbgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-11-02 23:18:51
(1 day ago)
136.80.166.30 - - [02/Nov/2026:16:18:51 -0700] "GET /.git/config HTTP/1.1" 301 3962 "-" "-"
...
Web App Attack
🇩🇪
FeG Deutschland
2026-11-02 23:08:29
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 23:08:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.80.166.30 (30.166.80.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:08:12.604250 2026] [security2:error] [pid 3568:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.80.166.30 (30.166.80.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:08:12.604250 2026] [security2:error] [pid 3568:tid 3568] [client 136.80.166.30:39198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pawzy.app.lucid-events.com"] [uri "/.git/config"] [unique_id "aukX3MSOsRUoP7r7rhlc4gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Roper123
2026-11-02 23:06:41
(1 day ago)
Web exploits
Web App Attack
2026-11-02 23:00:40
(1 day ago)
Sensitive-file or endpoint probing: attempted to retrieve Git repository metadata (.git). The web server denied the request with HTTP 403. IP blocked centrally for 1 hour. Detection rule: 100101.
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-02 22:59:52
(1 day ago)
Auto-ban: >3000 req/min op 2026-11-02
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-02 22:52:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.80.166.30 (30.166.80.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:52:13.809168 2026] [security2:error] [pid 27144:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 136.80.166.30 (30.166.80.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:52:13.809168 2026] [security2:error] [pid 27144:tid 27144] [client 136.80.166.30:51640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pastorsform.cmabiblequizzing.org"] [uri "/.git/config"] [unique_id "aukUHX4PaPVPnt6OzfcPZQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 22:45:15
(1 day ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
