|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇩🇪
macrob
|
|
2026/10/11 13:03:50 [error] 2449146#2449146: *40254373 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "meet.wellbin.org"
2026/10/11 13:03:50 [error] 2449146#2449146: *4025437 ...
show more
2026/10/11 13:03:50 [error] 2449146#2449146: *40254373 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "meet.wellbin.org"
2026/10/11 13:03:50 [error] 2449146#2449146: *40254374 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "meet.wellbin.org"
2026/10/11 13:03:50 [error] 2449146#2449146: *40254384 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /build../.env HTTP/2.0", host: "meet.wellbin.org"
...
show less
|
Web App Attack
|
|
🇬🇧
Aetherweb Ark
|
|
(mod_security) mod_security (id:949110) triggered by 136.110.70.58 (JP/Japan/58.70.110.136.bc.googleusercontent.com): N in the last X secs
|
Web App Attack
|
|
🇩🇪
TheDjRider
|
|
CrowdSec detected Web path traversal attack. Scenario: crowdsecurity/http-path-traversal-probing. Automatic ban triggered. Detection time (UTC): 2026-10-11T12:13:22.700128388Z. Context: http_status=404
|
Hacking
Web App Attack
|
|
🇺🇸
peaceharbor
|
|
Swatter: score=90 intel=abuseipdb:confidence50(50) rule=critical_badpath recidivism=4/30d crit-single
|
Web App Attack
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 136.110.70.58 (58.70.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:39:55.873472 2026] [security2:error] [pid 7657:tid 7 ...
show more
(mod_security) mod_security (id:210730) triggered by 136.110.70.58 (58.70.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:39:55.873472 2026] [security2:error] [pid 7657:tid 7657] [client 136.110.70.58:57384] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.falundafatr.org|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.falundafatr.org"] [uri "/server.key"] [unique_id "ast1iyZXN7ezZxG3qHZZiwAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 136.110.70.58 (58.70.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:19:33.997906 2026] [security2:error] [pid 3451:tid 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 136.110.70.58 (58.70.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:19:33.997906 2026] [security2:error] [pid 3451:tid 3451] [client 136.110.70.58:40440] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.americanacademyofteachersofsinging.org|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.americanacademyofteachersofsinging.org"] [uri "/rclone.conf"] [unique_id "astwxXvOkeqDgBlpf-J98gAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
SoteriaCovenant
|
|
Automated probe: /console on Soteria Global infrastructure. No vulnerable software present.
|
Hacking
|
|
🇩🇪
macrob
|
|
2026/10/11 07:13:27 [error] 2401929#2401929: *39379122 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "forum.wellbin.org"
2026/10/11 07:13:27 [error] 2401929#2401929: *3 ...
show more
2026/10/11 07:13:27 [error] 2401929#2401929: *39379122 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "forum.wellbin.org"
2026/10/11 07:13:27 [error] 2401929#2401929: *39379123 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "forum.wellbin.org"
2026/10/11 07:13:28 [error] 2401926#2401926: *39379119 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /assets../.env HTTP/2.0", host: "forum.wellbin.org"
...
show less
|
Web App Attack
|
|
🇬🇧
Comberton
|
|
Ban via F2B Ban via F2B Server Firewall
|
Brute-Force
|
|
🇩🇪
macrob
|
|
2026/10/11 00:06:42 [error] 2248585#2248585: *38492477 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "backoffice.wellbin.org"
2026/10/11 00:06:43 [error] 2248584#224858 ...
show more
2026/10/11 00:06:42 [error] 2248585#2248585: *38492477 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "backoffice.wellbin.org"
2026/10/11 00:06:43 [error] 2248584#2248584: *38492481 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "backoffice.wellbin.org"
2026/10/11 00:06:43 [error] 2248585#2248585: *38492477 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /uploads../.env HTTP/2.0", host: "backoffice.wellbin.org"
...
show less
|
Web App Attack
|
|
Anonymous
|
|
CrowdSec detection: crowdsecurity/http-sensitive-files
|
Web App Attack
|
|
🇨🇦
Dunham Support
|
|
(mod_security) mod_security triggered on hostname [redacted] 136.110.70.58 (JP/Japan/58.70.110.136.bc.googleusercontent.com)
|
SQL Injection
|
