🇫🇷
Catalin Negru
2026-09-28 21:05:59
(2 hours ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇧🇪
cmbplf
2026-09-28 08:42:48
(15 hours ago)
531 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇳🇱
homeshowdomain.nl
2026-09-27 22:00:33
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-26.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-27 19:13:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 15:13:34.268822 2026] [security2:error] [pid 13619:tid 13619] [client 136.85.47.125:44448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.stenbot.com"] [uri "/.git/config"] [unique_id "arlq3mzy2hB5CuPxJ-65PgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 18:57:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 14:57:41.453905 2026] [security2:error] [pid 21199:tid 21199] [client 136.85.47.125:49128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.stellwagenmusic.com"] [uri "/.git/config"] [unique_id "arlnJbQ2qBzASdr3rras-wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 05:15:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 01:14:59.936775 2026] [security2:error] [pid 18181:tid 18181] [client 136.85.47.125:50380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aktkaro.com"] [uri "/.git/config"] [unique_id "arimUy2ikQwczK8ptAgECAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-09-27 04:33:07
(1 day ago)
Many_bad_calls
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-26 21:59:28
(2 days ago)
Auto-ban: >3000 req/min op 2026-09-26
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-26 19:36:42
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 15:36:37.518501 2026] [security2:error] [pid 5457:tid 5457] [client 136.85.47.125:36026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campconcerto.com"] [uri "/.git/config"] [unique_id "argexbNg9pVgDfJOJgY_pgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 15:44:46
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:44:39.502035 2026] [security2:error] [pid 3183:tid 3183] [client 136.85.47.125:60744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mw-creations.com"] [uri "/.git/config"] [unique_id "arfoZ2ZStJlzGbdXgwhqcQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 15:14:30
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.47.125 (125.47.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:14:26.600524 2026] [security2:error] [pid 14095:tid 14095] [client 136.85.47.125:41820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mvpbees.com"] [uri "/.git/config"] [unique_id "arfhUnfSl9CyWGsnsTH3-gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-09-26 08:02:11
(2 days ago)
Bad_requests
Bad Web Bot
🇫🇷
Catalin Negru
2026-09-25 19:17:31
(3 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇺🇸
WellSpring
2026-09-24 18:06:22
(4 days ago)
env leak on beatwatch.org/admin/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇳🇱
Alt255
2026-09-24 01:57:52
(4 days ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.85.47.125 - - [24/Sep/2026:03:57:35 +0200] "GET /.git/config HTTP/1.1" 301 586 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
