🇫🇷
SpaceHost-Server
2026-11-04 23:14:47
UTC ·
(6 days ago)
Brute-Force
Web App Attack
🇧🇷
ICS Labs
2026-11-04 14:35:51
UTC ·
(6 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-11-04 UTC.
Brute-Force
Exploited Host
🇺🇸
TPI-Abuse
2026-11-04 02:20:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.114.160.223 (223.160.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 21:20:48.844991 2026] [security2:error] [pid 22321: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.160.223 (223.160.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 21:20:48.844991 2026] [security2:error] [pid 22321:tid 22321] [client 136.114.160.223:41244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aquatech-ind.com"] [uri "/.git/config"] [unique_id "auqWgE0J--RedxxJTK5mIwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 00:29:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.114.160.223 (223.160.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:29:44.494840 2026] [security2:error] [pid 10028: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.160.223 (223.160.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:29:44.494840 2026] [security2:error] [pid 10028:tid 10028] [client 136.114.160.223:44478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aquasafedemo.com"] [uri "/.git/config"] [unique_id "aup8eF9BLx5BwfUYwRPs2AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-03 23:14:31
UTC ·
(1 week ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 20:30:11
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.114.160.223 (223.160.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:30:05.287693 2026] [security2:error] [pid 15708: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.160.223 (223.160.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 15:30:05.287693 2026] [security2:error] [pid 15708:tid 15708] [client 136.114.160.223:38250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aquanauticsige.com"] [uri "/.git/config"] [unique_id "aupETR-AEY4BqWwzP5s6NwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-03 15:30:03
UTC ·
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇮🇪
[email protected]
2026-11-03 15:10:04
UTC ·
(1 week ago)
Secrets and source-control scanner: 170 requests in 18 seconds probing /.env, /.env.production, /.env.local, /.git/config and similar paths (166 distinct paths), all 404.
Web App Attack
Bad Web Bot
🇩🇪
macrob
2026-11-03 13:49:16
UTC ·
(1 week ago)
2026/11/03 13:49:14 [error] 1960165#1960165: *27909347 access forbidden by rule, client: 136.114.160.223, server: antzcapital.com, request: "GET /.env HTTP/1.1", host: "antzcapital.com"
2026/11/03 13:49:14 [error] 1960165#1960165: *27909347 access fo ...
show more
2026/11/03 13:49:14 [error] 1960165#1960165: *27909347 access forbidden by rule, client: 136.114.160.223, server: antzcapital.com, request: "GET /.env HTTP/1.1", host: "antzcapital.com"
2026/11/03 13:49:14 [error] 1960165#1960165: *27909347 access forbidden by rule, client: 136.114.160.223, server: antzcapital.com, request: "GET /.env.local HTTP/1.1", host: "antzcapital.com"
2026/11/03 13:49:15 [error] 1960165#1960165: *27909347 access forbidden by rule, client: 136.114.160.223, server: antzcapital.com, request: "GET /.env.production HTTP/1.1", host: "antzcapital.com"
...
show less
Web App Attack
2026-11-03 12:39:23
UTC ·
(1 week ago)
[ns31.kdns.gr] httpd-config-scan: sites=xatzitriantafulloubros-packaging.gr; logs=/var/log/httpd/domains/xatzitriantafulloubros-packaging.gr.log; samples=/.git/config | /.env | /.env.local
Hacking
Web App Attack
2026-11-03 12:08:37
UTC ·
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-03 11:19:30
UTC ·
(1 week ago)
(web_sensitive_file) srv103 Sensitive file probe (.env/.git/backup) 136.114.160.223 (US/United States/223.160.114.136.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇩🇪
sdos.es
2026-11-03 10:23:14
UTC ·
(1 week ago)
"Remote Command Execution: Unix Shell Expression Found - Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_proc ...
show more
"Remote Command Execution: Unix Shell Expression Found - Matched Data: $((41*271)) found within ARGS:0: {then: $1:__proto__:then status: resolved_model reason: -1 value: {then:$b1337} _response: {_prefix: var res=process.mainmodule.require(child_process).execsync(echo $((41*271)) | base64 -w 0).tostring().trim() throw object.assign(new error(next_redirect) {digest: `next_redirect push/login?a=${res} 307 `}) _chunks: $q2 _formdata: {get: $1:constructor:constructor}}}"
show less
Web App Attack
🇫🇷
COMAITE
2026-11-03 09:35:48
UTC ·
(1 week ago)
Suspicious URL access.
Web App Attack
2026-11-03 05:55:11
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
