๐ซ๐ท
dynamix
2026-09-28 06:57:41
(13 hours ago)
Multiple WAF Violations
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-09-25 17:06:38
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 136.114.210.247 (US/United States/247.210.114.1 ...
show more
(mod_security) mod_security (id:949110) triggered by 136.114.210.247 (US/United States/247.210.114.136.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ซ๐ท
Octopuce
2026-09-24 19:45:33
(4 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
๐ณ๐ฑ
f2b_bot
2026-09-24 05:49:40
(4 days ago)
Mass port scanning, brute-force attack
Port Scan
Brute-Force
Bad Web Bot
๐ฉ๐ช
itsvic.dev
2026-09-24 05:15:59
(4 days ago)
136.114.210.247 - - [24/Sep/2026:05:15:51 +0000] "updates.android.itsvic.dev" "GET /api/.env HTTP/1. ...
show more
136.114.210.247 - - [24/Sep/2026:05:15:51 +0000] "updates.android.itsvic.dev" "GET /api/.env HTTP/1.1" 404 135 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.114.210.247 - - [24/Sep/2026:05:15:59 +0000] "updates.android.itsvic.dev" "GET /api/v1/.env HTTP/1.1" 404 135 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
136.114.210.247 - - [24/Sep/2026:05:15:59 +0000] "updates.android.itsvic.dev" "GET /api/v2/.env HTTP/1.1" 404 135 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
yvoictra
2026-09-21 22:42:48
(6 days ago)
Bloqueado automรกticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 21:30:12
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:30:06.531839 2026] [security2:error] [pid 5477:tid 5710] [client 136.114.210.247:34608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uoexpanse.com"] [uri "/.git/config"] [unique_id "arGh3vuYn59mRMuBxQd8bQAAAhQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 17:52:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 13:52:45.624731 2026] [security2:error] [pid 29468:tid 29468] [client 136.114.210.247:40850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unitymaine.org"] [uri "/.git/config"] [unique_id "arFu7Xcy6d-3NJ56PN0T1gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 17:30:48
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 13:30:45.141204 2026] [security2:error] [pid 15772:tid 15772] [client 136.114.210.247:51026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unityhealthpharmaceutical.com"] [uri "/.git/config"] [unique_id "arFpxWgvfL4aVWkLyUsbqAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 13:53:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 09:53:11.027505 2026] [security2:error] [pid 3624:tid 3624] [client 136.114.210.247:60522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tubbesing.services"] [uri "/.git/config"] [unique_id "arE2x4ILngSFhDneaaA86gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 01:30:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210492) triggered by 136.114.210.247 (247.210.114.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 21:30:33.687801 2026] [security2:error] [pid 13909:tid 13909] [client 136.114.210.247:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.pixacast.com"] [uri "/.git/config"] [unique_id "arCIuTFpUK5I0mI1rUSSQAAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
TheDjRider
2026-09-20 23:12:19
(1 week ago)
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ...
show more
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-09-20T23:12:00.084117455Z. Context: http_status=302
show less
Web App Attack
๐ฎ๐น
VHosting
2026-09-20 20:50:03
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-20 18:47:20
(1 week ago)
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.114.210.247 - - [20/Sep/2026:20:47:05 +0200] "GET /.git/config HTTP/1.1" 301 546 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
wlt-blocker
2026-09-20 16:40:35
(1 week ago)
Unauthorized access to webpage admin
Web App Attack