🇺🇸
TPI-Abuse
2026-10-02 15:47:35
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 11:47:31.145815 2026] [security2:error] [pid 15107:tid 15107] [client 136.107.174.123:45084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.teamgravity.ca.kanata.ws"] [uri "/js../.env"] [unique_id "ar_SE9ytS8RC5gjXGbXZqQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-10-02 14:39:10
(3 weeks ago)
Web scanning / probing for vulnerable paths | URL: /api/graphql | Evidence: 136.107.174.123 - - [02/ ...
show more
Web scanning / probing for vulnerable paths | URL: /api/graphql | Evidence: 136.107.174.123 - - [02/Oct/2026:16:37:14 +0200] \"GET /api/graphql HTTP/1.1\" 403 199 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot\" GEOIP_COUNTRY_CODE=US | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
🇫🇮
Some Body
2026-10-02 14:35:45
(3 weeks ago)
Aggressive web scan
Brute-Force
Web App Attack
🇭🇷
vzderic
2026-10-02 13:03:00
(3 weeks ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 11:21:36
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 07:21:29.599032 2026] [security2:error] [pid 11363:tid 11363] [client 136.107.174.123:57510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.zztp.ws"] [uri "/.htpasswd"] [unique_id "ar-TudD5FHOsDo4Df2giqgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-02 11:01:22
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
MBombeck
2026-10-02 10:32:33
(3 weeks ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 09:00:46
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 05:00:40.646896 2026] [security2:error] [pid 16146:tid 16146] [client 136.107.174.123:45118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prototype.warnock.ws"] [uri "/.env.development"] [unique_id "ar9yuCtxxlmyciRprL34TwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 08:04:19
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 04:04:13.425832 2026] [security2:error] [pid 7032:tid 7032] [client 136.107.174.123:59576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.trasimeno.ws"] [uri "/images../.env"] [unique_id "ar9lfT0b1Rxh6lHKdTCYGwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Stara
2026-10-02 06:16:56
(3 weeks ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack
🇳🇱
Site.eu
2026-10-02 05:57:55
(3 weeks ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-10-02 05:47:43
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 01:47:39.037246 2026] [security2:error] [pid 87019:tid 87019] [client 136.107.174.123:33848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sarahsmith.ws"] [uri "/.env.js"] [unique_id "ar9Fe20p5_Q05kOYuOXnTgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 04:41:19
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.174.123 (123.174.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 00:41:12.916682 2026] [security2:error] [pid 22844:tid 22844] [client 136.107.174.123:54818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bright-enterprise.com.saadeh.ws"] [uri "/assets../.env"] [unique_id "ar816LNKjae5j4SOgTWbQAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-02 04:36:16
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-10-02 04:16:45
(3 weeks ago)
{"level":"info","ts":1790914603.0893965,"logger":"http.log.access.log0","msg":"handled request","req ...
show more
{"level":"info","ts":1790914603.0893965,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"136.107.174.123","remote_port":"57722","client_ip":"136.107.174.123","proto":"HTTP/2.0","method":"GET","host":"3kvr.status.updown.io","uri":"/wp-json","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"],"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"3kvr.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000143014,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":
...
show less
DDoS Attack
Web App Attack
