🇺🇸
mw
2026-11-04 00:03:23
(21 hours ago)
GET /.env.development HTTP/1.1
Web App Attack
🇩🇪
Mr-Money
2026-11-03 03:30:07
(1 day ago)
scenario: crowdsecurity/http-cve-probing - events: 1
Web App Attack
Hacking
🇫🇷
sthoyer.de
2026-11-02 22:34:01
(1 day ago)
136.144.42.88 - - [02/Nov/2026:23:32:10 +0100] "GET /.env.prod HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
136.144.42.88 - - [02/Nov/2026:23:32:48 +0100] "GET ...
show more
136.144.42.88 - - [02/Nov/2026:23:32:10 +0100] "GET /.env.prod HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
136.144.42.88 - - [02/Nov/2026:23:32:48 +0100] "GET /local/.env HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
136.144.42.88 - - [02/Nov/2026:23:34:00 +0100] "GET /script/.env HTTP/1.1" 302 495 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0"
...
show less
Web App Attack
🇫🇷
solution.it
2026-11-02 17:09:20
(2 days ago)
[Mon Nov 02 18:09:19.474618 2026] [php:error] [pid 1884316:tid 1884316] [client 136.144.42.88:51197] script '/var/www/html/info.php' not found or unable to stat
Web App Attack
🇯🇵
warudora
2026-11-01 15:41:57
(3 days ago)
Automated Honeypot Trap: Attempted to access sensitive path '/wp-login.php' on a Flask server.
Hacking
Web App Attack
🇫🇷
dynamix
2026-10-27 01:23:59
(1 week ago)
Multiple WAF Violations
Web App Attack
🇧🇪
cmbplf
2026-10-26 17:34:44
(1 week ago)
328 requests with url.path */.well-known/acme-challenge/*.php
278 requests with url.path */.well-known/pki-validation/*.php
Brute-Force
Bad Web Bot
🇨🇭
blinx
2026-10-26 11:57:38
(1 week ago)
Suspicious activity detected by Modsecurity
Web Spam
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇸🇪
KIDOS
2026-10-25 22:06:37
(1 week ago)
CrowdSec detected malicious activity
DDoS Attack
🇳🇱
Site.eu
2026-10-25 20:38:29
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
nyt
2026-10-25 17:33:41
(1 week ago)
Brute-Force, Web App Attack, suspicious: WP login POST blocked by WAF
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-10-25 07:23:56
(1 week ago)
cloudlinux2 fail2ban: 2026-10-25 08:19:22,996 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 136.144.42.88 - 2026-10-25 08:19:22cloudlinux2 fail2ban: 2026-10-25 08:19:26,287 fail2ban.actions [1922]: NOTICE [plesk-modsecurity] ...
show more
cloudlinux2 fail2ban: 2026-10-25 08:19:22,996 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 136.144.42.88 - 2026-10-25 08:19:22cloudlinux2 fail2ban: 2026-10-25 08:19:26,287 fail2ban.actions [1922]: NOTICE [plesk-modsecurity] Unban 37.19.67.179cloudlinux2 fail2ban: 2026-10-25 08:19:59,647 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 103.122.249.4 - 2026-10-25 08:19:59cloudlinux2 fail2ban: 2026-10-25 08:20:32,399 fail2ban.filter [1922]: INFO [plesk-modsecurity] Found 103.122.249.4 - 2026-10-25 08:20:32cloudlinux2 fail2ban: 2026-10-25 08:21:28,345 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 103.127.48.208 - 2026-10-25 08:21:27cloudlinux2 fail2ban: 2026-10-25 08:21:34,195 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 167.172.40.45 - 2026-10-25 08:21:33cloudlinux2 fail2ban: 2026-10-25 08:21:38,449 fail2ban.actions [1922]: NOTICE [plesk-modsecurity] Ban 103.122.249.4cloudlinux2 fail2ban: 2026-10-25 08:21:38,453 f
show less
Web App Attack
🇮🇹
CoreTech srl
2026-10-25 05:23:57
(1 week ago)
cloudlinux2 fail2ban: 2026-10-25 06:19:32,005 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.132.227.181 - 2026-10-25 06:19:31cloudlinux2 fail2ban: 2026-10-25 06:19:36,832 fail2ban.filter [1922]: INFO [plesk-wordpress] ...
show more
cloudlinux2 fail2ban: 2026-10-25 06:19:32,005 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.132.227.181 - 2026-10-25 06:19:31cloudlinux2 fail2ban: 2026-10-25 06:19:36,832 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 185.251.19.35 - 2026-10-25 06:19:36cloudlinux2 fail2ban: 2026-10-25 06:19:36,067 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.132.227.181 - 2026-10-25 06:19:35cloudlinux2 fail2ban: 2026-10-25 06:20:03,685 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 45.132.227.70 - 2026-10-25 06:20:02cloudlinux2 fail2ban: 2026-10-25 06:20:03,400 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 172.98.32.101 - 2026-10-25 06:20:02cloudlinux2 fail2ban: 2026-10-25 06:20:03,684 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 172.98.32.110 - 2026-10-25 06:20:02cloudlinux2 fail2ban: 2026-10-25 06:20:03,685 fail2ban.filter [1922]: INFO [plesk-wordpress] Found 136.144.42.88 - 2026-10-25 06:20:02cloudli
show less
Web App Attack
🇫🇷
dynamix
2026-10-25 02:09:46
(1 week ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 13:36:52
(1 week ago)
(mod_security) mod_security (id:240000) triggered by 136.144.42.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:36:45.195841 2026] [security2:error] [pid 18893:tid 18893] [client 136.144.42.88:25383] M ...
show more
(mod_security) mod_security (id:240000) triggered by 136.144.42.88 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:36:45.195841 2026] [security2:error] [pid 18893:tid 18893] [client 136.144.42.88:25383] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||labcomputers.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "labcomputers.com"] [uri "/images/stories/themes.php"] [unique_id "atoRbbf0s2dfRtN9IuaRxAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
