🇳🇱
homeshowdomain.nl
2026-09-01 21:59:08
(17 hours ago)
Auto-ban: >3000 req/min op 2026-09-01
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-01 04:26:46
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:949110) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:26:43.592427 2026] [security2:error] [pid 6955:tid 6955] [client 136.70.116.122:52800] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "bluerockdragon.com"] [uri "/.env.example"] [unique_id "apZUA7Zk4SK-SHd5AnxAvAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-01 03:13:48
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-01 03:00:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:59:54.503613 2026] [security2:error] [pid 2860:tid 2860] [client 136.70.116.122:46796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jenssen.silsby.com"] [uri "/wp-config.php.swp"] [unique_id "apY_qslbBzBnAFvG2CRvnQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-01 02:55:05
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇩🇪
Petros Stefanakis
2026-09-01 02:53:27
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 136.70.116.122 (US/United States/122.11 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 136.70.116.122 (US/United States/122.116.70.136.bc.googleusercontent.com)
show less
SQL Injection
🇫🇷
Feelautom
2026-09-01 02:21:14
(1 day ago)
[FeelAutom Auto-Ban] PathScan: /.env.old (Score: 200)
Port Scan
🇬🇧
Aetherweb Ark
2026-09-01 02:18:12
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 136.70.116.122 (US/United States/122.116.70.136 ...
show more
(mod_security) mod_security (id:949110) triggered by 136.70.116.122 (US/United States/122.116.70.136.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:49:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:49:49.021618 2026] [security2:error] [pid 32309:tid 32326] [client 136.70.116.122:50972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danelandia.aafm.us"] [uri "/.env.bak"] [unique_id "apYhLYFfKaTFEfACdSSxrAAAAUQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-09-01 00:49:52
(1 day ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:16:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:16:23.651247 2026] [security2:error] [pid 13881:tid 13881] [client 136.70.116.122:57778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.intersystems-aircargo.com"] [uri "/.env.prod"] [unique_id "apYZV4JhVRFtTJLlGF2YCAAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-01 00:05:37
(1 day ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 22:43:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.116.122 (122.116.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 18:43:37.869829 2026] [security2:error] [pid 22701:tid 22701] [client 136.70.116.122:54628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bicaco.com"] [uri "/.env.example"] [unique_id "apYDmWVjJKLKAkqKHI-VEAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-08-31 22:35:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-08-31 22:30:01
(1 day ago)
suspicious request in access.log
Web App Attack