🇺🇸
TPI-Abuse
2026-09-08 16:34:11
(11 minutes ago)
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 12:34:05.955457 2026] [security2:error] [pid 1247:tid 1298] [client 136.67.183.3:62602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stephanie.stauffer.name.sjstauffer.com"] [uri "/@fs/.env"] [unique_id "aqA4_csy0c1Uiub-nOamowAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-08 16:20:06
(26 minutes ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-09-08 16:06:12
(39 minutes ago)
Scanning/Probing (25)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 16:03:26
(42 minutes ago)
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 12:03:17.958248 2026] [security2:error] [pid 6865:tid 6865] [client 136.67.183.3:41980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.frankweyer.com"] [uri "/@fs/root/.env"] [unique_id "aqAxxdUq9G_SDqegqW4qqAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 15:44:49
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 11:44:45.843915 2026] [security2:error] [pid 25071:tid 25071] [client 136.67.183.3:26984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.rochesterhistorical.org"] [uri "/@fs/root/.env"] [unique_id "aqAtbY7pzdHUy64QeFuIfAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 15:01:32
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 11:01:25.190257 2026] [security2:error] [pid 2487:tid 2487] [client 136.67.183.3:27370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.gegkal.com"] [uri "/@fs/.env"] [unique_id "aqAjRWwVzMUJXOVXxDeZqAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-09-08 14:58:51
(1 hour ago)
cloudlinux2 fail2ban: 2026-09-08 16:54:15,371 fail2ban.filter [1794]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-09-08 16:54:15,371 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 173.239.213.53 - 2026-09-08 16:54:14cloudlinux2 fail2ban: 2026-09-08 16:54:32,268 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 185.251.19.168 - 2026-09-08 16:54:30cloudlinux2 fail2ban: 2026-09-08 16:54:43,694 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.148.11.4 - 2026-09-08 16:54:43cloudlinux2 fail2ban: 2026-09-08 16:54:50,776 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 34.148.11.4 - 2026-09-08 16:54:50cloudlinux2 fail2ban: 2026-09-08 16:54:46,410 fail2ban.filter [1794]: INFO [plesk-modsecurity] Found 133.209.13.3 - 2026-09-08 16:54:46cloudlinux2 fail2ban: 2026-09-08 16:55:01,659 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 45.146.55.104 - 2026-09-08 16:55:01cloudlinux2 fail2ban: 2026-09-08 16:55:14,942 fail2ban.filter [1794]: INFO [plesk-wordpress] Found 142.111.152.181 - 2026-09-08 16:55:14clou
show less
Web App Attack
🇩🇪
akasolutions.de
2026-09-08 14:42:36
(2 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 136.67.183.3 (US/United States/3.183.67 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 136.67.183.3 (US/United States/3.183.67.136.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
2026-09-08 14:34:01
(2 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
Guardian
2026-09-08 14:32:09
(2 hours ago)
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x16), Unauthorized attempt to ret ...
show more
Multi abuses [2]: Unauthorized connection attempt / Port scanning (x16), Unauthorized attempt to retrieve configuration file (x12)
136.67.183.3 [08/Sep/2026:16:32:04 +0200] "GET / HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET / HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET / HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/../../.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:08 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1"
136.67.183.3 [08/Sep/2026:16:32:09 +0200] "GET /@fs/.
show less
Port Scan
Web App Attack
🇫🇷
dynamix
2026-09-08 14:30:59
(2 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 14:20:17
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 10:20:08.221274 2026] [security2:error] [pid 7603:tid 7603] [client 136.67.183.3:56834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.daveewalker.bz"] [uri "/@fs/root/.env"] [unique_id "aqAZmI1QZwgHcZGEgwmNJAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-08 14:10:04
(2 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-08 13:50:28
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 13:44:41
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.183.3 (3.183.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 09:44:37.035401 2026] [security2:error] [pid 12436:tid 12436] [client 136.67.183.3:22572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lighthousescm.com"] [uri "/@fs/root/.env"] [unique_id "aqARRX4wM_DPhkWATbCOvgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack