🇫🇷
masterguru
2026-08-29 04:50:30
(13 minutes ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.155.218.148 (TW/Taiwan/148.218.15 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.155.218.148 (TW/Taiwan/148.218.155.104.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇮🇹
mediarama.com
2026-08-29 03:31:22
(1 hour ago)
Banned by Fail2Ban
Web App Attack
🇫🇮
YF
2026-08-29 03:30:54
(1 hour ago)
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 02:48:47
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 22:48:42.143143 2026] [security2:error] [pid 16505:tid 16505] [client 104.155.218.148:17686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.the-burkes.us"] [uri "/@fs/root/.env"] [unique_id "apJIiqp3dFpKgaDpWSQVewAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
loadsoporte
2026-08-29 02:28:36
(2 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇳🇱
Alboweb B.V.
2026-08-29 02:11:07
(2 hours ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
🇫🇷
Stara
2026-08-29 01:59:58
(3 hours ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
SSH
Web App Attack
🇬🇧
consul.to
2026-08-29 01:41:26
(3 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-29 01:36:11
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-29 01:33:18
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:33:11.473448 2026] [security2:error] [pid 106473:tid 106480] [client 104.155.218.148:58848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.credit-protector.com"] [uri "/@fs/root/.env"] [unique_id "apI21wT0nhezPdooEOmgZQAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 00:20:27
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:20:20.767133 2026] [security2:error] [pid 19332:tid 19332] [client 104.155.218.148:25324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.eurobrake.com"] [uri "/@fs/.env"] [unique_id "apIlxNGGgTxhGxsOOnUsEAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-29 00:14:44
(4 hours ago)
Restricted File Access Attempt. Matched phrase "/@fs/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 23:57:34
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:57:29.729760 2026] [security2:error] [pid 4329:tid 4329] [client 104.155.218.148:24240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "compliancedepts.com"] [uri "/@fs/.env"] [unique_id "apIgaaWH_pqvAaMuISvV9gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-28 23:55:03
(5 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 23:41:54
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 104.155.218.148 (148.218.155.104.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:41:50.693134 2026] [security2:error] [pid 19500:tid 19500] [client 104.155.218.148:58476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.hyps.com"] [uri "/@fs/.env"] [unique_id "apIcvoP4MnM5W-tzNARKzgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack