🇫🇷
SpaceHost-Server
2026-10-07 22:24:00
(3 weeks ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-10-07 06:47:43
(3 weeks ago)
2026/10/07 06:47:41 [error] 477805#477805: *25372078 access forbidden by rule, client: 35.203.75.70, ...
show more
2026/10/07 06:47:41 [error] 477805#477805: *25372078 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "cpcontacts.pitup.org"
2026/10/07 06:47:41 [error] 477805#477805: *25372074 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "cpcontacts.pitup.org"
2026/10/07 06:47:42 [error] 477805#477805: *25372078 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /static../.env HTTP/2.0", host: "cpcontacts.pitup.org"
...
show less
Web App Attack
🇩🇪
macrob
2026-10-07 04:35:49
(3 weeks ago)
2026/10/07 04:35:48 [error] 303140#303140: *25056701 access forbidden by rule, client: 35.203.75.70, ...
show more
2026/10/07 04:35:48 [error] 303140#303140: *25056701 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "cpcalendars.pitup.org"
2026/10/07 04:35:48 [error] 303142#303142: *25056709 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "cpcalendars.pitup.org"
2026/10/07 04:35:48 [error] 303142#303142: *25056714 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /.npmrc HTTP/2.0", host: "cpcalendars.pitup.org"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 03:39:46
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 23:39:41.457956 2026] [security2:error] [pid 15425:tid 15425] [client 35.203.75.70:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.enperth.org"] [uri "/userfiles/x"] [unique_id "asW-_TOUzUuaPGzbhtq_IgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 02:48:53
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 22:48:47.906515 2026] [security2:error] [pid 26978:tid 26978] [client 35.203.75.70:38582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wisk.org"] [uri "/dist../.env"] [unique_id "asWzD5E9fEVsDMHL2v8B7AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 02:28:30
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 22:28:22.824471 2026] [security2:error] [pid 31574:tid 31574] [client 35.203.75.70:53856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.thepinesokc.org"] [uri "/public../.env"] [unique_id "asWuRp3rooh80dTxjYHoGgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-07 01:59:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 21:59:18.598936 2026] [security2:error] [pid 13264:tid 13264] [client 35.203.75.70:42822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sandboxspeech.org"] [uri "/static../.env"] [unique_id "asWndqOpa8_BNSAy9LW03QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-10-07 01:54:17
(3 weeks ago)
AutoBlock: 📡 Port Scan (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Port Scan
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-07 01:35:26
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.203.75.70 (70.75.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 21:35:19.328828 2026] [security2:error] [pid 23415:tid 23415] [client 35.203.75.70:52184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.perron.org"] [uri "/media../.env"] [unique_id "asWh1zPnkRVEqjiI4JdnbwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Starburst SysOp Team
2026-10-07 01:10:54
(3 weeks ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-stl2-14)
show less
Bad Web Bot
🇫🇷
SpaceHost-Server
2026-10-06 22:19:49
(3 weeks ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-10-06 21:05:28
(4 weeks ago)
2026/10/06 21:05:26 [error] 303140#303140: *24070671 access forbidden by rule, client: 35.203.75.70, ...
show more
2026/10/06 21:05:26 [error] 303140#303140: *24070671 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "captcha.pitup.org"
2026/10/06 21:05:26 [error] 303143#303143: *24070678 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "captcha.pitup.org"
2026/10/06 21:05:27 [error] 303143#303143: *24070678 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /images../.env HTTP/2.0", host: "captcha.pitup.org"
...
show less
Web App Attack
🇩🇪
macrob
2026-10-06 17:06:24
(4 weeks ago)
2026/10/06 17:06:23 [error] 12683#12683: *23453490 access forbidden by rule, client: 35.203.75.70, s ...
show more
2026/10/06 17:06:23 [error] 12683#12683: *23453490 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "articles.pitup.org"
2026/10/06 17:06:23 [error] 12678#12678: *23453491 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "articles.pitup.org"
2026/10/06 17:06:23 [error] 12678#12678: *23453489 access forbidden by rule, client: 35.203.75.70, server: fn.binixo.es, request: "GET /.htpasswd HTTP/2.0", host: "articles.pitup.org"
...
show less
Web App Attack
🇦🇲
arm osint
2026-10-06 14:04:28
(4 weeks ago)
Automated web vulnerability scanning: 236 HTTP 4xx probes for sensitive paths (/api/config, /graphql ...
show more
Automated web vulnerability scanning: 236 HTTP 4xx probes for sensitive paths (/api/config, /graphql, /%2Fapi/config, /%2Fdashboard). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.
show less
Web App Attack
Brute-Force
2026-10-06 13:50:32
(4 weeks ago)
Blocked by ModSec and CSF
Port Scan