🇳🇱
homeshowdomain.nl
2026-09-29 21:59:46
(1 day ago)
Auto-ban: >3000 req/min op 2026-09-29
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-29 21:04:53
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.107.210.252 (252.210.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.210.252 (252.210.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 17:04:45.595461 2026] [security2:error] [pid 31815:tid 31815] [client 136.107.210.252:60156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wgalleria.com"] [uri "/.git/config"] [unique_id "arwn7a4P-0skVaPgb-1aewAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-29 14:05:30
(1 day ago)
Scanning/Probing (15)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-29 13:59:07
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-29 00:33:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.107.210.252 (252.210.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.210.252 (252.210.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:32:54.051226 2026] [security2:error] [pid 13847:tid 13847] [client 136.107.210.252:59734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.primemanagementmn.com"] [uri "/.git/config"] [unique_id "arsHNtqqSjTofgk9c5i-vQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 00:16:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.107.210.252 (252.210.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.210.252 (252.210.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:16:03.897069 2026] [security2:error] [pid 4658:tid 4658] [client 136.107.210.252:40940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.primelb.com"] [uri "/.git/config"] [unique_id "arsDQ2u7ZvG_g3trLgQ2lwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-27 17:11:42
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇮
as211431.net
2026-09-26 22:54:06
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /public_html/phpinfo.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-09-26 22:30:02
(3 days ago)
suspicious request in access.log
Web App Attack
🇷🇴
clauss
2026-09-26 13:56:48
(4 days ago)
136.107.210.252 - - [26/Sep/2026:16:56:47 +0300] "GET /.git/config HTTP/1.1" 403 285 "-" "Mozilla/5. ...
show more
136.107.210.252 - - [26/Sep/2026:16:56:47 +0300] "GET /.git/config HTTP/1.1" 403 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.107.210.252 - - [26/Sep/2026:16:56:47 +0300] "GET /.env.local HTTP/1.1" 403 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇩🇪
R.G.
2026-09-26 02:10:04
(4 days ago)
(ScanningForFiles) Scanning for files triggerd 136.107.210.252 (US/United States/252.210.107.136.bc. ...
show more
(ScanningForFiles) Scanning for files triggerd 136.107.210.252 (US/United States/252.210.107.136.bc.googleusercontent.com): 10 in the last 600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇩🇪
curiosity
2026-09-25 23:38:07
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-25 08:53:17
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 136.107.210.252 (252.210.107.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.107.210.252 (252.210.107.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 04:53:12.864629 2026] [security2:error] [pid 32247:tid 32247] [client 136.107.210.252:45870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scorpio01.com"] [uri "/.git/config"] [unique_id "arY2eMhEWYiBXtfp1cMzKAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-25 02:15:06
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇦🇺
screwlooseit.com.au
2026-09-25 00:14:09
(5 days ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/252.210.107.136.bc.googleusercont ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/252.210.107.136.bc.googleusercontent.com
show less
Web App Attack