🇩🇪
ghostwarriors
2026-09-06 06:20:43
(4 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:58:35
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:58:30.153800 2026] [security2:error] [pid 31807:tid 31807] [client 136.66.144.129:49270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ourcritterguy.com"] [uri "/.env.bak"] [unique_id "apzW1iNGOwDU6FpnrCljCgAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
Coolnagour
2026-09-06 02:37:08
(8 hours ago)
http-probing: /wp-config.php.bak
Web App Attack
🇫🇷
ELYAZ
2026-09-06 01:38:05
(9 hours ago)
(y3) Failed access -byebye- from 136.66.144.129 (US/United States/129.144.66.136.bc.googleuserconten ...
show more
(y3) Failed access -byebye- from 136.66.144.129 (US/United States/129.144.66.136.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-06 01:36:32
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:36:25.738419 2026] [security2:error] [pid 4094055:tid 4094081] [client 136.66.144.129:42752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mjkotob.com"] [uri "/wp-config.php.swp"] [unique_id "apzDma6cqs6FLYTdRl_QmQAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:15:51
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:15:45.467922 2026] [security2:error] [pid 26632:tid 26632] [client 136.66.144.129:40982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m1graphics.com"] [uri "/.env.backup"] [unique_id "apy-wT0rOpmTY70RBRtWygAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
penjaga BRIN
2026-09-06 00:56:20
(10 hours ago)
Suspicious malicious activity
Hacking
🇩🇪
raph
2026-09-06 00:37:32
(10 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:33:39
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:33:32.243836 2026] [security2:error] [pid 17648:tid 17648] [client 136.66.144.129:40430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bosozuki.com"] [uri "/.env.dev"] [unique_id "apy03F0_Uc12ETrPuZvT-gAAAHk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:07:59
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:07:54.588059 2026] [security2:error] [pid 22177:tid 22232] [client 136.66.144.129:52316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nomadic-welshman.adetnw.com"] [uri "/wp-config.php.bak"] [unique_id "apyu2rFrBBBv6RD6KBf5xwAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 00:02:12
(11 hours ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇮🇹
ciccio diddo
2026-09-05 23:05:12
(12 hours ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-05 22:57:49
(12 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-05 22:56:40
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.66.144.129 (129.144.66.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:56:33.467362 2026] [security2:error] [pid 7424:tid 7424] [client 136.66.144.129:39956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.deindo.com"] [uri "/.env"] [unique_id "apyeIY6mNkubSvvPULouCQAAAGw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-05 22:55:44
(12 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack