🇺🇸
TPI-Abuse
2026-09-16 14:44:06
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 168.144.252.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 168.144.252.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:43:51.896401 2026] [security2:error] [pid 771:tid 771] [client 168.144.252.47:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tileoptima.mooseled.com"] [uri "/.env.production"] [unique_id "aqqrJ1GcuSVZnTAfMxsLPwAAAAE"], referer: https://www.google.com/search?q=www.tileoptima.mooseled.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
on-com
2026-09-15 16:59:37
(1 day ago)
URL scan
Brute-Force
Web App Attack
🇩🇪
4server
2026-09-12 15:37:55
(4 days ago)
[SatSep1217:37:50.4117002026][security2:error][pid3385910:tid3385995][client168.144.252.47:0]ModSecu ...
show more
[SatSep1217:37:50.4117002026][security2:error][pid3385910:tid3385995][client168.144.252.47:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"schneider-tools.ch\"][uri\"/.git/config\"][unique_id\"aqVxzpy0tvuZZoiyVzDXIgAAAJg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
LRNP
2026-09-10 03:49:21
(1 week ago)
_:443 168.144.252.47 - - [10/Sep/2026:03:49:21 +0000] "\x05\x01\x00" 400 150 "-" "-"
...
Bad Web Bot
Web App Attack
🇫🇮
diego021
2026-09-09 17:02:27
(1 week ago)
168.144.252.47 pythonpirate.tech - [09/Sep/2026:12:02:21 -0500] "GET /.cursor/mcp.json HTTP/1.1" 404 ...
show more
168.144.252.47 pythonpirate.tech - [09/Sep/2026:12:02:21 -0500] "GET /.cursor/mcp.json HTTP/1.1" 404 158 "http://pythonpirate.tech/.cursor/mcp.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
168.144.252.47 pythonpirate.tech - [09/Sep/2026:12:02:23 -0500] "GET /.continue/config.json HTTP/1.1" 404 158 "http://pythonpirate.tech/.continue/config.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
168.144.252.47 pythonpirate.tech - [09/Sep/2026:12:02:23 -0500] "GET /bootstrap/cache/config.php HTTP/1.1" 404 158 "http://pythonpirate.tech/bootstrap/cache/config.php" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
168.144.252.47 pythonpirate.tech - [09/Sep/2026:12:02:26 -0500] "GET /checkout HTTP/1.1" 404 158 "http://pythonpirate.tech/checkout" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
...
show less
Web App Attack
2026-09-09 16:09:27
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Joop
2026-09-09 11:59:40
(1 week ago)
2026-09-09 13:59:36 +0200 s4 /.git/config
Web App Attack
2026-09-09 01:32:02
(1 week ago)
WEB attack
Brute-Force
🇺🇸
TPI-Abuse
2026-09-08 23:08:34
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 168.144.252.47 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 168.144.252.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 19:08:26.366205 2026] [security2:error] [pid 13687:tid 13687] [client 168.144.252.47:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.skomaxentertainment.com.alanmariotti.com"] [uri "/.env.local"] [unique_id "aqCVasC3x3u4RU8NM38hsAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-08 21:59:58
(1 week ago)
Auto-ban: >3000 req/min op 2026-09-08
Web App Attack
SSH
Hacking
🇮🇪
Coolnagour
2026-09-07 10:44:42
(1 week ago)
funnypot web honeypot, port 443: GET /.svn/entries
Web App Attack
2026-09-01 22:39:57
(2 weeks ago)
[da.kdns.gr] httpd-config-scan: sites=www.aristotlepiraeus.gr; logs=/var/log/httpd/domains/aristotle ...
show more
[da.kdns.gr] httpd-config-scan: sites=www.aristotlepiraeus.gr; logs=/var/log/httpd/domains/aristotlepiraeus.gr.log; samples=/.env.local | /.env | /.git/HEAD
show less
Hacking
Web App Attack