🇩🇪
FD-IX
2026-09-29 00:39:04
UTC ·
(1 month ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
Anonymous
2026-09-28 17:24:02
UTC ·
(1 month ago)
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.development HTTP/1.1, POST / HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.test H ...
show more
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.development HTTP/1.1, POST / HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.staging HTTP/1.1
show less
Hacking
Web App Attack
🇫🇷
masterguru
2026-09-28 14:48:28
UTC ·
(1 month ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 136.110.100.152 (JP/Japan/152.100.110.136.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
Hacking
🇩🇪
paissangroup
2026-09-28 14:40:24
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
dot.mg
2026-09-28 14:38:07
UTC ·
(1 month ago)
Bad behaviour
Web Spam
🇩🇪
FeG Deutschland
2026-09-28 05:36:12
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 247
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 16:54:35
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.110.100.152 (152.100.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 12:54:31.362932 2026] [security2:error] [pid 25349: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.100.152 (152.100.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 12:54:31.362932 2026] [security2:error] [pid 25349:tid 25349] [client 136.110.100.152:45522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cocinasintegralesjp.com.spyasociados.com"] [uri "/.git/config"] [unique_id "arlKR29MExu3vVcCzzjD8AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-27 15:26:38
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.110.100.152 (152.100.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 11:26:32.059503 2026] [security2:error] [pid 13134: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.100.152 (152.100.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 11:26:32.059503 2026] [security2:error] [pid 13134:tid 13134] [client 136.110.100.152:32822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cobbwebb.net.greighhouse.com"] [uri "/.git/config"] [unique_id "ark1qEAn3Bsv6xmA6oKkpQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-26 20:28:39
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.110.100.152 (152.100.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 16:28:32.832946 2026] [security2:error] [pid 19807: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.100.152 (152.100.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 16:28:32.832946 2026] [security2:error] [pid 19807:tid 19807] [client 136.110.100.152:37390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.chickenchristmascards.com"] [uri "/.git/config"] [unique_id "argq8PrYU-s2lXE-FgN8LwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-26 14:45:01
UTC ·
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-26 11:22:01
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
ghostwarriors
2026-09-25 08:50:09
UTC ·
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-25 08:43:08
UTC ·
(1 month ago)
136.110.100.152 - - [25/Sep/2026:10:43:02 +0200] "POST / HTTP/1.1" 200 1767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.110.100.152 - - [25/Sep/2026:10:43:03 +0200] "POST / ...
show more
136.110.100.152 - - [25/Sep/2026:10:43:02 +0200] "POST / HTTP/1.1" 200 1767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.110.100.152 - - [25/Sep/2026:10:43:03 +0200] "POST / HTTP/1.1" 200 1767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.110.100.152 - - [25/Sep/2026:10:43:03 +0200] "GET /.git/config HTTP/1.1" 403 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.110.100.152 - - [25/Sep/2026:10:43:03 +0200] "GET /.env HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.110.100.152 - - [25/Sep/2026:10:43:04 +0200] "GET /.env.local HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.110.100
show less
Web App Attack
Hacking
🇫🇷
masterguru
2026-09-25 04:28:32
UTC ·
(1 month ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇳🇱
Site.eu
2026-09-24 21:00:49
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force