🇺🇸
TPI-Abuse
2026-11-04 01:53:14
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 136.90.44.253 (253.44.90.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:53:08.442258 2026] [security2:error] [pid 6466:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.90.44.253 (253.44.90.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:53:08.442258 2026] [security2:error] [pid 6466:tid 6466] [client 136.90.44.253:58900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "henryweb.net"] [uri "/.git/config"] [unique_id "auqQBMNiA-PtoLPi52elDgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-03 23:38:25
UTC ·
(6 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 23:28:22
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 136.90.44.253 (253.44.90.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:28:16.175870 2026] [security2:error] [pid 4688:tid 4 ...
show more
(mod_security) mod_security (id:210492) triggered by 136.90.44.253 (253.44.90.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:28:16.175870 2026] [security2:error] [pid 4688:tid 4714] [client 136.90.44.253:52298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "helppeopleshare.net"] [uri "/.git/config"] [unique_id "aupuEJpjGM99M-e13mCnbgAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 21:58:42
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 136.90.44.253 (253.44.90.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:58:36.927060 2026] [security2:error] [pid 26250:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 136.90.44.253 (253.44.90.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 16:58:36.927060 2026] [security2:error] [pid 26250:tid 26250] [client 136.90.44.253:52140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "helloauto.net"] [uri "/.git/config"] [unique_id "aupZDAfbpF32u3tDfOY45QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
doofy
2026-11-03 20:32:53
UTC ·
(6 days ago)
[Tue Nov 03 21:32:51.824602 2026] [authz_core:error] [pid 129407:tid 129508] [client 136.90.44.253:39402] AH01630: client denied by server configuration: /www/hekser.net/.git
[Tue Nov 03 21:32:52.072295 2026] [authz_core:error] [pid 129407:tid 129502 ...
show more
[Tue Nov 03 21:32:51.824602 2026] [authz_core:error] [pid 129407:tid 129508] [client 136.90.44.253:39402] AH01630: client denied by server configuration: /www/hekser.net/.git
[Tue Nov 03 21:32:52.072295 2026] [authz_core:error] [pid 129407:tid 129502] [client 136.90.44.253:39402] AH01630: client denied by server configuration: /www/hekser.net/.env
[Tue Nov 03 21:32:52.182738 2026] [authz_core:error] [pid 129407:tid 129493] [client 136.90.44.253:39402] AH01630: client denied by server configuration: /www/hekser.net/.env.local
[Tue Nov 03 21:32:52.293682 2026] [authz_core:error] [pid 129407:tid 129488] [client 136.90.44.253:39402] AH01630: client denied by server configuration: /www/hekser.net/.env.production
[Tue Nov 03 21:32:52.403784 2026] [authz_core:error] [pid 129407:tid 129483] [client 136.90.44.253:39402] AH01630: client denied by server configuration: /www/hekser.net/.env.staging
...
show less
Brute-Force
Web App Attack
2026-11-03 12:28:05
UTC ·
(6 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-11-03 02:16:51
UTC ·
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
ams_sec_user
2026-11-03 01:05:35
UTC ·
(1 week ago)
Automated requests against a hosted website: 139 requests between 00:00 and 00:59 UTC; 136 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.git/config). Reported automatically.
Hacking
Bad Web Bot
Web App Attack
2026-11-02 23:36:57
UTC ·
(1 week ago)
[ns65.kdns.gr] httpd-config-scan: sites=pianomagic.gr; logs=/var/log/httpd/domains/pianomagic.gr.log; samples=/.git/config | /.env | /.env.local
Hacking
Web App Attack
2026-11-02 17:14:11
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-11-02 16:57:22
UTC ·
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-02 16:53:51
UTC ·
(1 week ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.90.44.253 - - [02/Nov/2026:17:53:37 +0100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.90.44.253 - - [02/Nov/2026:17:53:37 +0100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-11-02 16:49:05
UTC ·
(1 week ago)
[MonNov0217:48:59.2715592026][security2:error][pid4171398:tid4171504][client136.90.44.253:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\} ...
show more
[MonNov0217:48:59.2715592026][security2:error][pid4171398:tid4171504][client136.90.44.253:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"risanamento-funghi-muffa.ch\"][uri\"/\"][unique_id\"aui--zygwbEMKv5mdn9mLQAAAJQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-11-02 16:05:25
UTC ·
(1 week ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇫🇮
paissangroup
2026-11-02 13:14:11
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
