๐บ๐ธ
TPI-Abuse
2026-09-16 08:31:05
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.110.82.213 (213.82.110.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.82.213 (213.82.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 04:30:58.915582 2026] [security2:error] [pid 31823:tid 31823] [client 136.110.82.213:41706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "morefrogs.com"] [uri "/.env"] [unique_id "aqpTwigZG5K0PLnu1PInyQAAAAI"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-09-16 00:34:24
(1 month ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local blo ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after high AbuseIPDB reputation + local block policy. Evidence: High Abuse + Suspicion (61, Abuse: 53)
show less
Hacking
Exploited Host
Web App Attack
๐ช๐ธ
robotstxt
2026-09-15 23:52:05
(1 month ago)
136.110.82.213 - - [15/Sep/2026:23:50:59 +0000] "GET /seo/.remote HTTP/1.1" 403 15406 "https://www.g ...
show more
136.110.82.213 - - [15/Sep/2026:23:50:59 +0000] "GET /seo/.remote HTTP/1.1" 403 15406 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/535.14 (KHTML, like Gecko) Chrome/6.0.1462.64 Safari/537.34" "-" edge="136.110.82.213"
136.110.82.213 - - [15/Sep/2026:23:51:00 +0000] "GET /seo/.local HTTP/1.1" 403 15406 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/535.14 (KHTML, like Gecko) Chrome/6.0.1462.64 Safari/537.34" "-" edge="136.110.82.213"
136.110.82.213 - - [15/Sep/2026:23:51:01 +0000] "GET /seo/.production HTTP/1.1" 403 15406 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/535.14 (KHTML, like Gecko) Chrome/6.0.1462.64 Safari/537.34" "-" edge="136.110.82.213"
136.110.82.213 - - [15/Sep/2026:23:51:02 +0000] "GET /seo//vendor/.env HTTP/1.1" 403 12 "https://www.google.com/" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/535.14 (KHTML, like Gecko) Chrome/6.0.1462.64 Safari/537.34" "-" edge=
...
show less
Web App Attack
Anonymous
2026-09-15 21:48:13
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-15 21:25:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.110.82.213 (213.82.110.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.82.213 (213.82.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:25:28.258169 2026] [security2:error] [pid 10110:tid 10150] [client 136.110.82.213:40914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hotairwelder.com"] [uri "/.env"] [unique_id "aqm3yEZN2yvv0-cWqNYMOAAAAIE"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-15 17:28:56
(1 month ago)
Multiple WAF Violations
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-15 17:25:04
(1 month ago)
crowdsecurity/CVE-2017-9841
Brute-Force
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-09-15 14:07:29
(1 month ago)
(modsecurity) srv103 ModSecurity 136.110.82.213 (JP/Japan/213.82.110.136.bc.googleusercontent.com): ...
show more
(modsecurity) srv103 ModSecurity 136.110.82.213 (JP/Japan/213.82.110.136.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐บ๐ธ
Neil
2026-09-15 13:57:00
(1 month ago)
Web app attacks
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 13:54:33
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.110.82.213 (213.82.110.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.82.213 (213.82.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:54:25.748403 2026] [security2:error] [pid 28570:tid 28570] [client 136.110.82.213:44242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carpascarpe.com"] [uri "/.env"] [unique_id "aqlOEQyZKZb5scZ2mMkIyQAAACQ"], referer: https://www.google.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-15 12:17:46
(1 month ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐น๐ท
rtbh.com.tr
2026-04-08 20:12:23
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐น๐ท
rtbh.com.tr
2026-04-06 20:12:22
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐น๐ท
rtbh.com.tr
2026-04-05 20:12:22
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
๐น๐ท
rtbh.com.tr
2026-04-03 20:12:21
(6 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force