|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: >3000 req/min op 2026-09-16
|
Web App Attack
SSH
Hacking
|
|
🇺🇸
MatCat
|
|
Banned by fail2ban: apache-webprobe
|
Port Scan
Bad Web Bot
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
|
🇪🇸
pipeline.es
|
|
Web scanning / probing for vulnerable paths | URL: /internal/.env | Evidence: landdestination.pt 136.69.139.227 - - [15/Sep/2026:18:49:20 +0200] \"GET /internal/.env HTTP/1.1\" 404 22369 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ...
show more
Web scanning / probing for vulnerable paths | URL: /internal/.env | Evidence: landdestination.pt 136.69.139.227 - - [15/Sep/2026:18:49:20 +0200] \"GET /internal/.env HTTP/1.1\" 404 22369 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
|
Port Scan
Web App Attack
|
|
🇩🇪
netman
|
|
HTTP: 136.69.139.227 blocked because of 100 failures
...
|
DDoS Attack
Web App Attack
|
|
🇩🇪
Gwyneth Llewelyn
|
|
2026/09/15 16:45:50 [error] 2229833#2229833: *1122544 access forbidden by rule, client: 136.69.139.227, server: gwynethllewelyn.net, request: "GET /.env HTTP/2.0", host: "gwynethllewelyn.net"
136.69.139.227 - - [15/Sep/2026:16:45:50 +0100] "GET /.env ...
show more
2026/09/15 16:45:50 [error] 2229833#2229833: *1122544 access forbidden by rule, client: 136.69.139.227, server: gwynethllewelyn.net, request: "GET /.env HTTP/2.0", host: "gwynethllewelyn.net"
136.69.139.227 - - [15/Sep/2026:16:45:50 +0100] "GET /.env HTTP/2.0" 403 1048 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/09/15 16:45:59 [error] 2229833#2229833: *1122608 access forbidden by rule, client: 136.69.139.227, server: gwynethllewelyn.net, request: "GET /app/.env HTTP/2.0", host: "gwynethllewelyn.net"
show less
|
Brute-Force
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive 404/403 errors
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:949110) triggered by 136.69.139.227 (227.139.69.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:09:34.758659 2026] [security2:error] [pid 29226:ti ...
show more
(mod_security) mod_security (id:949110) triggered by 136.69.139.227 (227.139.69.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:09:34.758659 2026] [security2:error] [pid 29226:tid 29226] [client 136.69.139.227:52080] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "gupta.net"] [uri "/.git/config"] [unique_id "aqkZXhMxgW6olVG89GbsLwAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 136.69.139.227 (227.139.69.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:33:13.421601 2026] [security2:error] [pid 17955:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 136.69.139.227 (227.139.69.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:33:13.421601 2026] [security2:error] [pid 17955:tid 17955] [client 136.69.139.227:60782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guller.net"] [uri "/.git/config"] [unique_id "aqj0ucULCu93RH0uWeQ8_QAAABU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
