๐ซ๐ท
SpaceHost-Server
2026-10-12 22:15:08
(1 day ago)
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-11 22:24:16
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐ซ๐ท
SpaceHost-Server
2026-10-11 22:14:52
(2 days ago)
Brute-Force
Web App Attack
๐ฉ๐ช
macrob
2026-10-11 13:03:51
(2 days ago)
2026/10/11 13:03:50 [error] 2449146#2449146: *40254373 access forbidden by rule, client: 136.110.70. ...
show more
2026/10/11 13:03:50 [error] 2449146#2449146: *40254373 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "meet.wellbin.org"
2026/10/11 13:03:50 [error] 2449146#2449146: *40254374 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "meet.wellbin.org"
2026/10/11 13:03:50 [error] 2449146#2449146: *40254384 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /build../.env HTTP/2.0", host: "meet.wellbin.org"
...
show less
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-10-11 12:38:07
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 136.110.70.58 (JP/Japan/58.70.110.136.bc.google ...
show more
(mod_security) mod_security (id:949110) triggered by 136.110.70.58 (JP/Japan/58.70.110.136.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ฉ๐ช
TheDjRider
2026-10-11 12:13:24
(2 days ago)
CrowdSec detected Web path traversal attack. Scenario: crowdsecurity/http-path-traversal-probing. Au ...
show more
CrowdSec detected Web path traversal attack. Scenario: crowdsecurity/http-path-traversal-probing. Automatic ban triggered. Detection time (UTC): 2026-10-11T12:13:22.700128388Z. Context: http_status=404
show less
Hacking
Web App Attack
๐บ๐ธ
peaceharbor
2026-10-11 11:45:06
(2 days ago)
Swatter: score=90 intel=abuseipdb:confidence50(50) rule=critical_badpath recidivism=4/30d crit-singl ...
show more
Swatter: score=90 intel=abuseipdb:confidence50(50) rule=critical_badpath recidivism=4/30d crit-single
show less
Web App Attack
Port Scan
๐บ๐ธ
TPI-Abuse
2026-10-11 11:40:02
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 136.110.70.58 (58.70.110.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 136.110.70.58 (58.70.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:39:55.873472 2026] [security2:error] [pid 7657:tid 7657] [client 136.110.70.58:57384] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.falundafatr.org|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.falundafatr.org"] [uri "/server.key"] [unique_id "ast1iyZXN7ezZxG3qHZZiwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 11:19:40
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 136.110.70.58 (58.70.110.136.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 136.110.70.58 (58.70.110.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:19:33.997906 2026] [security2:error] [pid 3451:tid 3451] [client 136.110.70.58:40440] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.americanacademyofteachersofsinging.org|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.americanacademyofteachersofsinging.org"] [uri "/rclone.conf"] [unique_id "astwxXvOkeqDgBlpf-J98gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
SoteriaCovenant
2026-10-11 09:09:41
(3 days ago)
Automated probe: /console on Soteria Global infrastructure. No vulnerable software present.
Hacking
๐ฉ๐ช
macrob
2026-10-11 07:13:29
(3 days ago)
2026/10/11 07:13:27 [error] 2401929#2401929: *39379122 access forbidden by rule, client: 136.110.70. ...
show more
2026/10/11 07:13:27 [error] 2401929#2401929: *39379122 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "forum.wellbin.org"
2026/10/11 07:13:27 [error] 2401929#2401929: *39379123 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "forum.wellbin.org"
2026/10/11 07:13:28 [error] 2401926#2401926: *39379119 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /assets../.env HTTP/2.0", host: "forum.wellbin.org"
...
show less
Web App Attack
๐ฌ๐ง
Comberton
2026-10-11 01:31:59
(3 days ago)
Ban via F2B Ban via F2B Server Firewall
Brute-Force
๐ฉ๐ช
macrob
2026-10-11 00:06:44
(3 days ago)
2026/10/11 00:06:42 [error] 2248585#2248585: *38492477 access forbidden by rule, client: 136.110.70. ...
show more
2026/10/11 00:06:42 [error] 2248585#2248585: *38492477 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "backoffice.wellbin.org"
2026/10/11 00:06:43 [error] 2248584#2248584: *38492481 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "backoffice.wellbin.org"
2026/10/11 00:06:43 [error] 2248585#2248585: *38492477 access forbidden by rule, client: 136.110.70.58, server: fn.binixo.es, request: "GET /uploads../.env HTTP/2.0", host: "backoffice.wellbin.org"
...
show less
Web App Attack
Anonymous
2026-10-10 23:49:45
(3 days ago)
CrowdSec detection: crowdsecurity/http-sensitive-files
Web App Attack
๐จ๐ฆ
Dunham Support
2026-10-10 22:30:04
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 136.110.70.58 (JP/Japan/58.70.110.136.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 136.110.70.58 (JP/Japan/58.70.110.136.bc.googleusercontent.com)
show less
SQL Injection