🇺🇸
bigscoots.com
2026-10-01 07:18:55
UTC ·
(1 month ago)
(PERMBLOCK) 136.110.43.78 (US/United States/78.43.110.136.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: 1; Trigger: LF_PERMBLOCK_COUNT; Logs:
Brute-Force
SSH
🇺🇸
masterguru
2026-10-01 05:48:28
UTC ·
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:user-agent. (1100000-147)
Bad Web Bot
Anonymous
2026-10-01 05:15:04
UTC ·
(1 month ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 05:03:54
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.110.43.78 (78.43.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 01:03:49.048183 2026] [security2:error] [pid 28308:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.43.78 (78.43.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 01:03:49.048183 2026] [security2:error] [pid 28308:tid 28308] [client 136.110.43.78:57684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rudiscreations.org"] [uri "/.env.js"] [unique_id "ar3ptcdp-UbXAdxdGEtAJQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-01 04:07:20
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 136.110.43.78 (78.43.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 00:07:14.291173 2026] [security2:error] [pid 12531:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 136.110.43.78 (78.43.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 00:07:14.291173 2026] [security2:error] [pid 12531:tid 12531] [client 136.110.43.78:57912] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.berntson.org|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.berntson.org"] [uri "/elmah.axd"] [unique_id "ar3ccpGC80ovWgeuvtOrJgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-01 01:57:03
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-10-01 01:08:18
UTC ·
(1 month ago)
[Wed Sep 30 19:08:16.006082 2026] [authz_core:error] [pid 22797:tid 140268563097152] [client 136.110.43.78:36928] AH01630: client denied by server configuration: /var/www/horde/z9x8c7v6b5-debug-trigger-autodiscover.contest.rmbs.org
[Wed Sep 30 19:08: ...
show more
[Wed Sep 30 19:08:16.006082 2026] [authz_core:error] [pid 22797:tid 140268563097152] [client 136.110.43.78:36928] AH01630: client denied by server configuration: /var/www/horde/z9x8c7v6b5-debug-trigger-autodiscover.contest.rmbs.org
[Wed Sep 30 19:08:17.585639 2026] [authz_core:error] [pid 22797:tid 140268546311744] [client 136.110.43.78:36928] AH01630: client denied by server configuration: /var/www/horde/config.json
[Wed Sep 30 19:08:17.765428 2026] [authz_core:error] [pid 22797:tid 140268579882560] [client 136.110.43.78:36928] AH01630: client denied by server configuration: /var/www/horde/model
...
show less
Bad Web Bot
🇧🇪
cmbplf
2026-10-01 00:49:28
UTC ·
(1 month ago)
525 requests with url.path *.env
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-01 00:33:39
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 136.110.43.78 (78.43.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 20:33:33.174801 2026] [security2:error] [pid 29762:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 136.110.43.78 (78.43.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 20:33:33.174801 2026] [security2:error] [pid 29762:tid 29762] [client 136.110.43.78:33630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artspacecleveland.org"] [uri "/static../.env"] [unique_id "ar2qXcVm1pt53uQZ9FA6FgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Nicos
2026-09-30 23:56:43
UTC ·
(1 month ago)
2026-10-01T01:56:42.550377+02:00 PhoenixNas 4b557cefc297[346903]: {"auth_via": "unauthenticated", "domain_url": "Redacted", "event": "/build/manifest.json", "host": "Redacted", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 73, ...
show more
2026-10-01T01:56:42.550377+02:00 PhoenixNas 4b557cefc297[346903]: {"auth_via": "unauthenticated", "domain_url": "Redacted", "event": "/build/manifest.json", "host": "Redacted", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 73, "remote": "136.110.43.78", "request_id": "19d5b2278314427c8ea52e41aab683f0", "runtime": 42, "schema_name": "public", "scheme": "https", "status": 404, "timestamp": "2026-09-30T23:56:42.550108", "user": "", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"}
2026-10-01T01:56:42.558504+02:00 PhoenixNas 4b557cefc297[346903]: {"auth_via": "unauthenticated", "domain_url": "Redacted", "event": "/manifest.webmanifest", "host": "Redacted", "level": "info", "logger": "authentik.asgi", "method": "GET", "pid": 74, "remote": "136.110.43.78", "request_id": "32901fdab2794bf6a49a04535b18fa85", "runtime": 44, "schema_name": "public", "
...
show less
Hacking
Brute-Force
Anonymous
2026-09-30 23:38:40
UTC ·
(1 month ago)
136.110.43.78 - - [30/Sep/2026:18:37:42 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 136.110.43.78
136.110.43.78 - - [30/Sep/2026:18:37:42 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Moz ...
show more
136.110.43.78 - - [30/Sep/2026:18:37:42 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 136.110.43.78
136.110.43.78 - - [30/Sep/2026:18:37:42 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 136.110.43.78
136.110.43.78 - - [30/Sep/2026:18:37:42 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 136.110.43.78
136.110.43.78 - - [30/Sep/2026:18:37:42 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 136.110.43.78
136.110.43.78 - - [30/Sep/2026:18:37:42 -0500] "GET /.env.local?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 136.110.43.78
136.110.43.78 - - [30/Sep/2026:18:37:42 -0500] "GET /.env.production?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; co
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-09-30 22:26:03
UTC ·
(1 month ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
Anonymous
2026-09-30 22:20:04
UTC ·
(1 month ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇩🇪
Blexyel
2026-09-30 22:04:51
UTC ·
(1 month ago)
136.110.43.78 - - [01/Oct/2026:00:04:50 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "pingusmc.org"
...
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-30 20:10:12
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack