๐ณ๐ฑ
homeshowdomain.nl
2026-08-27 22:02:57
(7 hours ago)
Auto-ban: >3000 req/min op 2026-08-27
Web App Attack
SSH
Hacking
๐ฌ๐ง
gws-hostmaster
2026-08-27 19:09:45
(10 hours ago)
ModSecurity OWASP CRS (Anomaly Score: 10): Attempt to access a backup or working file;Restricted Fil ...
show more
ModSecurity OWASP CRS (Anomaly Score: 10): Attempt to access a backup or working file;Restricted File Access Attempt;URL file extension is restricted by policy;
show less
Web App Attack
๐จ๐ญ
zynex
2026-08-27 18:54:29
(11 hours ago)
URL Probing: /.env
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 18:16:55
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:16:48.835400 2026] [security2:error] [pid 17284:tid 17284] [client 136.108.58.53:45272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "quintanotariaconcepcion.cl.tecnoconce.com"] [uri "/.env.backup"] [unique_id "apB_ECk1MkYF359lScqIHAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-08-27 16:48:43
(13 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 16:29:03
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:28:58.300631 2026] [security2:error] [pid 10696:tid 10792] [client 136.108.58.53:48808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.atechtransmission.ceol.us"] [uri "/.env.example"] [unique_id "apBlykTnz39pcL7wjuyWRQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 15:57:25
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:57:18.726465 2026] [security2:error] [pid 16267:tid 16267] [client 136.108.58.53:57998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yaseminomer.com"] [uri "/wp-config.php~"] [unique_id "apBeXgEtt58gb9A42_uimQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-08-27 15:50:44
(14 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-08-27 13:17:31
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:17:26.745444 2026] [security2:error] [pid 29982:tid 30000] [client 136.108.58.53:54244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abdominaletching.aafm.us"] [uri "/.env.backup"] [unique_id "apA45vYk176w0BDxAgWieQAAAY8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
COMAITE
2026-08-27 13:15:25
(16 hours ago)
Suspicious URL access.
Web App Attack
Anonymous
2026-08-27 13:15:19
(16 hours ago)
136.108.58.53 - - [27/Aug/2026:08:15:18 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "crusader-wo ...
show more
136.108.58.53 - - [27/Aug/2026:08:15:18 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.108.58.53
136.108.58.53 - - [27/Aug/2026:08:15:18 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.108.58.53
136.108.58.53 - - [27/Aug/2026:08:15:18 -0500] "GET /.env.prod HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.108.58.53
136.108.58.53 - - [27/Aug/2026:08:15:18 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.108.58.53
136.108.58.53 - - [27/Aug/2026:08:15:18 -0500] "GET /.env HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.108.58.53
136.108.58.53 - - [27/Aug/2026:08:15:18 -0500] "GET /.env.save HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.108.58.53
136.108.58.53 - - [27/Aug/2026:08:15:18 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.108.58.53
136.108.58.53 - - [27/Aug/2026:08:15:18 -0500] "GET /.env.dev HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 136.108.58.53
136.108.58.53 - - [27/Aug/2026:08
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-08-27 13:10:04
(16 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 12:53:40
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 136.108.58.53 (53.58.108.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 08:53:37.405476 2026] [security2:error] [pid 16423:tid 16423] [client 136.108.58.53:53678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hilarysaundersmusic.tremulant.com"] [uri "/wp-config.php.swp"] [unique_id "apAzUVFFoWuPoCY6-snSQQAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-27 12:33:08
(17 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-08-27 12:06:14
(17 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack