🇺🇸
TPI-Abuse
2026-10-11 11:15:45
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 136.119.202.215 (215.202.119.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:15:41.276289 2026] [security2:error] [pid 5022:t ...
show more
(mod_security) mod_security (id:210492) triggered by 136.119.202.215 (215.202.119.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:15:41.276289 2026] [security2:error] [pid 5022:tid 5022] [client 136.119.202.215:36242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.garanta.co"] [uri "/cache/original/%2e%2e/%2e%2e/.env"] [unique_id "astv3fQLmb2T4aHLoa_ViAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
snappic
2026-10-11 06:38:50
UTC ·
(4 weeks ago)
Scanning for .env files [GET /gallery/api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)]
Bad Web Bot
Web App Attack
🇺🇸
snappic
2026-10-11 05:20:17
UTC ·
(4 weeks ago)
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)]
Bad Web Bot
Web App Attack
🇫🇷
polarolouis
2026-10-11 00:07:13
UTC ·
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773
Web App Attack
Hacking
🇧🇷
radardatelecom
2026-10-10 22:27:03
UTC ·
(1 month ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-10 22:15:13
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-10 21:54:44
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.119.202.215 (215.202.119.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 17:54:37.574703 2026] [security2:error] [pid 17496: ...
show more
(mod_security) mod_security (id:210492) triggered by 136.119.202.215 (215.202.119.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 17:54:37.574703 2026] [security2:error] [pid 17496:tid 17496] [client 136.119.202.215:59676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mobileonlinecasinos.co"] [uri "/static../.env"] [unique_id "asq0HWPzsuDMKtfHNG3cbgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
kayzo
2026-10-10 20:57:30
UTC ·
(1 month ago)
Vulnerability probe against hosting control panel: POST /api/graphql
Brute-Force
Web App Attack
🇺🇸
gamabe
2026-10-10 20:21:40
UTC ·
(1 month ago)
Detected crowdsecurity/http-path-traversal-probing attack pattern. Reported by CrowdSec IDS.
Port Scan
🇫🇷
polarolouis
2026-10-10 20:19:42
UTC ·
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
🇩🇪
updown.io
2026-10-10 20:12:51
UTC ·
(1 month ago)
{"level":"info","ts":1791663170.0246263,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.119.202.215","remote_port":"36618","client_ip":"136.119.202.215","proto":"HTTP/2.0","method":"POST","host":"api.availability.f ...
show more
{"level":"info","ts":1791663170.0246263,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.119.202.215","remote_port":"36618","client_ip":"136.119.202.215","proto":"HTTP/2.0","method":"POST","host":"api.availability.foodpang.co","uri":"/graphql","headers":{"Content-Length":["86"],"Priority":["u=1, i"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Accept-Language":["en-US,en;q=0.9"],"Content-Type":["application/json"],"Origin":["https://api.availability.foodpang.co"],"Accept":["*/*"],"Sec-Fetch-Mode":["cors"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Site":["same-origin"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\""],"Sec-Fetch-Dest":["empty"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Referer":["https://api.availability.foodpang.co"],"Sec-Ch-Ua-Platform":["\"macOS\""]},"tls":{"resumed":false,"version":772,"cipher_suite
...
show less
DDoS Attack
Web App Attack
🇫🇷
polarolouis
2026-10-10 19:58:43
UTC ·
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇳🇱
Alboweb B.V.
2026-10-10 19:11:04
UTC ·
(1 month ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
🇫🇷
dynamix
2026-10-10 18:42:46
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Alt255
2026-10-10 18:28:50
UTC ·
(1 month ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.119.202.215 - - [10/Oct/2026:20:28:41 +0200] "GET /.htpasswd HTTP/2.0" 404 346 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.119.202.215 - - [10/Oct/2026:20:28:41 +0200] "GET /.htpasswd HTTP/2.0" 404 346 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Bad Web Bot
Web App Attack
