🇺🇸
swordlegend228
2026-10-14 22:40:00
(1 week ago)
Sonde de scanner automatisee detectee sur un serveur web prive : /.ssh/id_rsa
Web App Attack
🇺🇸
EvilTurkey
2026-10-13 13:59:18
(2 weeks ago)
Web app attack against financial institution website.
Web App Attack
Hacking
🇫🇷
SpaceHost-Server
2026-10-12 22:15:05
(2 weeks ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-11 22:14:49
(2 weeks ago)
Brute-Force
Web App Attack
🇳🇱
ConsulHosting
2026-10-11 14:03:28
(2 weeks ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
macrob
2026-10-11 13:55:31
(2 weeks ago)
2026/10/11 13:55:29 [error] 2449147#2449147: *40366076 access forbidden by rule, client: 136.109.251 ...
show more
2026/10/11 13:55:29 [error] 2449147#2449147: *40366076 access forbidden by rule, client: 136.109.251.184, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "deploy.wynspire.org"
2026/10/11 13:55:29 [error] 2449148#2449148: *40366077 access forbidden by rule, client: 136.109.251.184, server: fn.binixo.es, request: "GET /server/.env HTTP/2.0", host: "deploy.wynspire.org"
2026/10/11 13:55:29 [error] 2449147#2449147: *40366083 access forbidden by rule, client: 136.109.251.184, server: fn.binixo.es, request: "GET /.aws/config HTTP/2.0", host: "deploy.wynspire.org"
...
show less
Web App Attack
🇩🇪
macrob
2026-10-11 09:32:34
(2 weeks ago)
2026/10/11 09:32:32 [error] 2449143#2449143: *39769906 access forbidden by rule, client: 136.109.251 ...
show more
2026/10/11 09:32:32 [error] 2449143#2449143: *39769906 access forbidden by rule, client: 136.109.251.184, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "cms.wynspire.org"
2026/10/11 09:32:32 [error] 2449146#2449146: *39769920 access forbidden by rule, client: 136.109.251.184, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "cms.wynspire.org"
2026/10/11 09:32:32 [error] 2449148#2449148: *39769922 access forbidden by rule, client: 136.109.251.184, server: fn.binixo.es, request: "GET /.//.env HTTP/2.0", host: "cms.wynspire.org"
...
show less
Web App Attack
🇩🇪
macrob
2026-10-11 05:05:24
(2 weeks ago)
2026/10/11 05:05:23 [error] 2248585#2248585: *39065890 access forbidden by rule, client: 136.109.251 ...
show more
2026/10/11 05:05:23 [error] 2248585#2248585: *39065890 access forbidden by rule, client: 136.109.251.184, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "auth.wynspire.org"
2026/10/11 05:05:23 [error] 2248585#2248585: *39065895 access forbidden by rule, client: 136.109.251.184, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "auth.wynspire.org"
2026/10/11 05:05:23 [error] 2248585#2248585: *39065895 access forbidden by rule, client: 136.109.251.184, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "auth.wynspire.org"
...
show less
Web App Attack
🇦🇲
arm osint
2026-10-11 04:55:40
(2 weeks ago)
Automated web vulnerability scanning: 210 HTTP 4xx probes for sensitive paths (/%2Fadmin, /%2Fdashbo ...
show more
Automated web vulnerability scanning: 210 HTTP 4xx probes for sensitive paths (/%2Fadmin, /%2Fdashboard, /%2eenv, /.//.env). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.
show less
Web App Attack
Brute-Force
2026-10-11 02:40:37
(2 weeks ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇩🇪
Blexyel
2026-10-11 02:08:41
(2 weeks ago)
136.109.251.184 - - [11/Oct/2026:04:08:41 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "CCBot/2.0 ...
show more
136.109.251.184 - - [11/Oct/2026:04:08:41 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 01:48:06
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 136.109.251.184 (184.251.109.136.bc.googleuserc ...
show more
(mod_security) mod_security (id:210730) triggered by 136.109.251.184 (184.251.109.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:47:58.854323 2026] [security2:error] [pid 8777:tid 8777] [client 136.109.251.184:41536] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||_dc-mx.79aed382b426.empoweruamerica.org|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "_dc-mx.79aed382b426.empoweruamerica.org"] [uri "/rclone.conf"] [unique_id "asrqzluQttHXQjTitn9PYgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Mundo Bueno
2026-10-11 01:13:43
(2 weeks ago)
[ISILIA Protection v2.3] Tentative d'accès: /@fs/..%252f..%252f..%252f..%252f..%252froot/.env [RATE ...
show more
[ISILIA Protection v2.3] Tentative d'accès: /@fs/..%252f..%252f..%252f..%252f..%252froot/.env [RATE LIMITED - 1800s quarantine] | Pays: US | UA: Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)
show less
Hacking
Web App Attack
🇺🇸
JonathanYoung2161
2026-10-11 01:11:13
(2 weeks ago)
trekgalactic.org 136.109.251.184 - - [10/Oct/2026:20:11:12 -0500] "GET /.npmrc HTTP/2.0" 404 3199 "- ...
show more
trekgalactic.org 136.109.251.184 - - [10/Oct/2026:20:11:12 -0500] "GET /.npmrc HTTP/2.0" 404 3199 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
trekgalactic.org 136.109.251.184 - - [10/Oct/2026:20:11:12 -0500] "GET /.ssh/id_ed25519 HTTP/2.0" 404 3199 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
trekgalactic.org 136.109.251.184 - - [10/Oct/2026:20:11:12 -0500] "GET /.ssh/id_rsa HTTP/2.0" 404 3199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
Brute-Force
Web App Attack
🇮🇹
mgarofano80
2026-10-11 00:59:37
(2 weeks ago)
Brute-Force
Web App Attack