๐ณ๐ฑ
ConsulHosting
2026-09-22 23:38:03
(8 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-09-22 22:17:09
(9 hours ago)
Brute-Force
Web App Attack
๐จ๐ฆ
polycoda
2026-09-22 21:58:51
(9 hours ago)
๐ฅ VERY AGGRESSIVE SCANNER probed over 500 inexistent files and PHP scripts in less than an hour.
Hacking
Web App Attack
Anonymous
2026-09-22 20:49:11
(10 hours ago)
Bot / seems abusive / Apache connections: 25
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
๐ฉ๐ช
TheDjRider
2026-09-22 19:46:29
(11 hours ago)
CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ba ...
show more
CrowdSec detected Web application reconnaissance. Scenario: crowdsecurity/http-probing. Automatic ban triggered. Detection time (UTC): 2026-09-22T19:46:24.751515218Z. Context: http_status=404
show less
Web App Attack
๐จ๐ฆ
polycoda
2026-09-22 19:16:50
(12 hours ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 18:51:39
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.110.25.245 (245.25.110.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.25.245 (245.25.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 14:51:33.243191 2026] [security2:error] [pid 24884:tid 24884] [client 136.110.25.245:56930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.helpkccare.org"] [uri "/.env.prod"] [unique_id "arLONQ6QaYZcssTcYphhSAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐ฒ
arm osint
2026-09-22 18:08:55
(13 hours ago)
Automated web vulnerability scanning: 106 HTTP 4xx probes for sensitive paths (/api/designer/v1/file ...
show more
Automated web vulnerability scanning: 106 HTTP 4xx probes for sensitive paths (/api/designer/v1/file-content, /api/templates/preview, /read-document, /.aws/config). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.
show less
Web App Attack
Brute-Force
Anonymous
2026-09-22 18:01:02
(13 hours ago)
...
Web App Attack
๐บ๐ธ
lavnet.net
2026-09-22 17:57:00
(13 hours ago)
136.110.25.245 - - [22/Sep/2026:17:56:59 +0000] "GET /r8do26lk1krdsbiuxtjj HTTP/2.0" 404 1901 "-" "M ...
show more
136.110.25.245 - - [22/Sep/2026:17:56:59 +0000] "GET /r8do26lk1krdsbiuxtjj HTTP/2.0" 404 1901 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.110.25.245 - - [22/Sep/2026:17:56:59 +0000] "GET /z9x8c7v6b5-debug-trigger-a0a0.org HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
136.110.25.245 - - [22/Sep/2026:17:56:59 +0000] "GET /udjg8ae0t92ujl9q3fee HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
136.110.25.245 - - [22/Sep/2026:17:57:00 +0000] "POST /graphql HTTP/2.0" 404 1878 "https://a0a0.org" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
136.110.25.245 - - [22/Sep/2026:17:57:00 +0000] "GET /secrets.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
136.110.25.245 - - [22/Sep/2026:17:57:00 +0000] "GET /service-account.json HTTP/2.0" 404 18
...
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-22 17:37:51
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.110.25.245 (245.25.110.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.25.245 (245.25.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 13:37:44.960376 2026] [security2:error] [pid 12661:tid 12661] [client 136.110.25.245:51042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barkdull.org"] [uri "/.env.prod"] [unique_id "arK86CxeN7NAqexKjXHBqAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
macrob
2026-09-22 17:30:48
(14 hours ago)
2026/09/22 17:30:47 [error] 1636364#1636364: *25755003 access forbidden by rule, client: 136.110.25. ...
show more
2026/09/22 17:30:47 [error] 1636364#1636364: *25755003 access forbidden by rule, client: 136.110.25.245, server: bonusnews.org, request: "GET /src/.env HTTP/2.0", host: "bonusnews.org"
2026/09/22 17:30:47 [error] 1636368#1636368: *25754934 access forbidden by rule, client: 136.110.25.245, server: bonusnews.org, request: "GET /backend/.env HTTP/2.0", host: "bonusnews.org"
2026/09/22 17:30:47 [error] 1636367#1636367: *25755006 access forbidden by rule, client: 136.110.25.245, server: bonusnews.org, request: "GET /admin/.env HTTP/2.0", host: "bonusnews.org"
...
show less
Web App Attack
๐บ๐ธ
brightenfield
2026-09-22 17:29:24
(14 hours ago)
Web App Attack
Web App Attack
๐ฉ๐ช
Dominik Lysiak
2026-09-22 17:23:20
(14 hours ago)
136.110.25.245 - - [22/Sep/2026:19:23:19 +0200] "GET /.ssh/id_rsa HTTP/2.0" 301 162 "-" "Mozilla/5.0 ...
show more
136.110.25.245 - - [22/Sep/2026:19:23:19 +0200] "GET /.ssh/id_rsa HTTP/2.0" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
136.110.25.245 - - [22/Sep/2026:19:23:19 +0200] "GET /.ssh/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
136.110.25.245 - - [22/Sep/2026:19:23:19 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Web App Attack
๐ซ๐ท
spot
2026-09-22 17:12:58
(14 hours ago)
136.110.25.245 - - [22/Sep/2026:18:12:55 +0100] "GET /.env.dev HTTP/1.1" 404 488 "-" "Mozilla/5.0 (c ...
show more
136.110.25.245 - - [22/Sep/2026:18:12:55 +0100] "GET /.env.dev HTTP/1.1" 404 488 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
...
show less
Web App Attack
VPN IP