🇺🇸
TPI-Abuse
2026-10-14 16:44:14
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:44:01.729802 2026] [security2:error] [pid 30459:tid 30459] [client 31.56.146.152:49628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pscc.com"] [uri "/.git/HEAD"] [unique_id "as-xUT7sg2HKPyhgCAtGowAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 15:47:17
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 11:47:10.614275 2026] [security2:error] [pid 24541:tid 24541] [client 31.56.146.152:36522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rockhillcounselors.com"] [uri "/.git/HEAD"] [unique_id "as-j_oa8IsAlHRmqgXpbXgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
abuseipdb.amaze321
2026-10-14 15:33:23
(2 hours ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
🇪🇸
bohl-aiG5aef
2026-10-14 15:04:32
(2 hours ago)
Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound
Hacking
🇺🇸
TPI-Abuse
2026-10-14 13:02:14
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 09:02:09.214718 2026] [security2:error] [pid 3984:tid 3984] [client 31.56.146.152:38750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tell-me-first.com"] [uri "/.git/HEAD"] [unique_id "as99UUqHCdOvoe0D2o2eJgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 10:01:57
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 06:01:49.620333 2026] [security2:error] [pid 30592:tid 30643] [client 31.56.146.152:52116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yakamengen.com"] [uri "/.git/HEAD"] [unique_id "as9TDaz-ON0EI_GKkfchaQAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-14 09:39:40
(8 hours ago)
[14/Oct/2026:12:39:39 +0300] -- 31.56.146.152 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[14/Oct/2026:12:39:39 +0300] -- 31.56.146.152 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/HEAD HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇯🇵
VXG-NET
2026-10-14 09:37:35
(8 hours ago)
port=80, indicator_type=info-leak
Hacking
🇩🇪
FD-IX
2026-10-14 09:33:47
(8 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 08:57:02
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 04:56:54.649555 2026] [security2:error] [pid 8159:tid 8159] [client 31.56.146.152:54720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vzan.org"] [uri "/.git/index"] [unique_id "as9D1l6suPj75Db4bPkAVgAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 06:23:10
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 31.56.146.152 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 02:23:05.922404 2026] [security2:error] [pid 31316:tid 31316] [client 31.56.146.152:51328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wmodradio.com"] [uri "/.git/HEAD"] [unique_id "as8fyWdf5MmEyUjJS0Wr3wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Lee Daniel
2026-10-14 00:18:50
(17 hours ago)
31.56.146.152 - - [13/Oct/2026:20:18:49 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Window ...
show more
31.56.146.152 - - [13/Oct/2026:20:18:49 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:139.0) Gecko/20100101 Firefox/139.0"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ips.path
2024-11-15 17:57:27
(1 year ago)
mannagor.com → 31.56.146.152, Phishing, Unsafe SMTP server. SMTP path failed a DKIM test. Managing o ...
show more
mannagor.com → 31.56.146.152, Phishing, Unsafe SMTP server. SMTP path failed a DKIM test. Managing organization: Promo Plus SRL, Network ASN: AS215362
show less
Phishing
Open Proxy
Spoofing
