๐ญ๐บ
DumaNet
2026-08-28 04:57:00
(4 hours ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 28. 00:11:26
Source IP: 136.10 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 28. 00:11:26
Source IP: 136.108.53.31
Portion of the log(s):
136.108.53.31 - [28/Aug/2026:00:11:26 +0200] "GET /.env.save HTTP/1.1" 404 153 "-" "crusader-worker/1.0"
136.108.53.31 - [28/Aug/2026:00:11:26 +0200] "GET /.env HTTP/1.1" 404 153 "-" "crusader-worker/1.0"
136.108.53.31 - [28/Aug/2026:00:11:26 +0200] "GET /.env.production HTTP/1.1" 404 153 "-" "crusader-worker/1.0"
136.108.53.31 - [28/Aug/2026:00:11:26 +0200] "GET /.env.example HTTP/1.1" 404 153 "-" "crusader-worker/1.0"
136.108.53.31 - [28/Aug/2026:00:11:26 +0200] "GET /actuator/configprops HTTP/1.1" 404 153 "-" "crusader-worker/1.0"
136.108.53.31 - [28/Aug/2026:00:11:26 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 404 153 "-" "crusader-worker/1.0"
136.108.53.31 - [28/Aug/2026:00:11:26 +0200] "GET /.env.dev HTTP/1.1" 404 153 "-" "crusader-worker/1.0"
136.108.53.31 - [28/Aug/2026:00:11:26 +0200] "GET /.env.local HTTP/1.1" 404 153 "-" "crusader-worker/1.0"
show less
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-08-27 21:59:31
(11 hours ago)
Auto-ban: >3000 req/min op 2026-08-27
Web App Attack
SSH
Hacking
๐จ๐ญ
DasBiberlein
2026-08-27 21:09:50
(12 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
๐ฏ๐ต
ki3
2026-08-27 20:05:10
(13 hours ago)
Fail2Ban: Web App Attacks and Forum Spam 136.108.53.31 1787861110.0(JST)
Web Spam
Bad Web Bot
Web App Attack
๐ซ๐ท
UnixPrime
2026-08-27 20:02:34
(13 hours ago)
136.108.53.31 - - [27/Aug/2026:22:02:33 +0200] "GET /wp-config.php~ HTTP/1.1" 404 146 "-" "crusader- ...
show more
136.108.53.31 - - [27/Aug/2026:22:02:33 +0200] "GET /wp-config.php~ HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
136.108.53.31 - - [27/Aug/2026:22:02:33 +0200] "GET /.env.prod HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Dennis
2026-08-27 19:43:50
(13 hours ago)
136.108.53.31 has been banned for triggering http-sensitive-files (5 events over 105.214902ms).
Brute-Force
Web App Attack
๐ง๐พ
lns.bz
2026-08-27 19:37:45
(13 hours ago)
Too many 404 requests [BY]
Web App Attack
Anonymous
2026-08-27 19:00:04
(14 hours ago)
suspicious request in access.log
Web App Attack
๐จ๐ญ
ALPHANET
2026-08-27 18:30:10
(14 hours ago)
web exploits
Hacking
Exploited Host
Web App Attack
๐บ๐ธ
Gabriel Camargo
2026-08-27 18:22:20
(15 hours ago)
136.108.53.31 - - [27/Aug/2026:13:22:20 -0500] "GET /.env HTTP/1.1" 301 178 "-" "crusader-worker/1.0 ...
show more
136.108.53.31 - - [27/Aug/2026:13:22:20 -0500] "GET /.env HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
136.108.53.31 - - [27/Aug/2026:13:22:20 -0500] "GET /.env.local HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
136.108.53.31 - - [27/Aug/2026:13:22:20 -0500] "GET /.env.backup HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
...
show less
Brute-Force
SSH
๐บ๐ธ
mnsf
2026-08-27 18:05:17
(15 hours ago)
Abuse Detected (9)
Brute-Force
Web App Attack
๐บ๐ธ
factor1
2026-08-27 17:31:32
(15 hours ago)
CrowdSec at saturn Reports Abuse
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 16:43:26
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.53.31 (31.53.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.53.31 (31.53.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:43:19.642397 2026] [security2:error] [pid 26225:tid 26225] [client 136.108.53.31:43738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.tonynvn.me"] [uri "/.env.local"] [unique_id "apBpJ9TQNgpdiCpjY3YTewAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-27 16:40:22
(16 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 15:20:43
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.53.31 (31.53.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.53.31 (31.53.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:20:39.340419 2026] [security2:error] [pid 21387:tid 21387] [client 136.108.53.31:46484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpking.com"] [uri "/.env"] [unique_id "apBVx1ZSF7mMIgoAXqfsMQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack