🇫🇷
SpaceHost-Server
2026-11-10 23:14:41
UTC ·
(2 days ago)
Brute-Force
Web App Attack
🇱🇻
GooddayGroup
2026-11-10 00:14:58
UTC ·
(3 days ago)
Automated probing for sensitive configuration files and environment leaks.
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-09 23:14:39
UTC ·
(3 days ago)
Brute-Force
Web App Attack
🇧🇷
ICS Labs
2026-11-09 20:08:19
UTC ·
(3 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-09 UTC.
Brute-Force
🇩🇪
macrob
2026-11-09 14:27:23
UTC ·
(3 days ago)
2026/11/09 14:27:22 [error] 1367336#1367336: *20084528 access forbidden by rule, client: 136.70.172.82, server: binixo.mx, request: "GET /.git/config%3F.css HTTP/2.0", host: "binixo.mx"
2026/11/09 14:27:22 [error] 1367336#1367336: *20084528 access fo ...
show more
2026/11/09 14:27:22 [error] 1367336#1367336: *20084528 access forbidden by rule, client: 136.70.172.82, server: binixo.mx, request: "GET /.git/config%3F.css HTTP/2.0", host: "binixo.mx"
2026/11/09 14:27:22 [error] 1367336#1367336: *20084528 access forbidden by rule, client: 136.70.172.82, server: binixo.mx, request: "GET /settings%2F.env HTTP/2.0", host: "binixo.mx"
2026/11/09 14:27:22 [error] 1367336#1367336: *20084528 access forbidden by rule, client: 136.70.172.82, server: binixo.mx, request: "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0", host: "binixo.mx"
...
show less
Web App Attack
🇫🇷
Omar Martínez
2026-11-09 10:21:45
UTC ·
(3 days ago)
[Mon Nov 09 04:21:43.629038 2026] [core:error] [pid 3872137:tid 140495142962752] [remote 136.70.172.82:55804] AH10244: invalid URI path (/appearance/../../proc/self/environ)
[Mon Nov 09 04:21:43.701964 2026] [core:error] [pid 3872137:tid 140495277311 ...
show more
[Mon Nov 09 04:21:43.629038 2026] [core:error] [pid 3872137:tid 140495142962752] [remote 136.70.172.82:55804] AH10244: invalid URI path (/appearance/../../proc/self/environ)
[Mon Nov 09 04:21:43.701964 2026] [core:error] [pid 3872137:tid 140495277311552] [remote 136.70.172.82:55804] AH10244: invalid URI path (/appearance/../../.env)
...
show less
Phishing
Email Spam
Blog Spam
🇬🇧
consul.to
2026-11-09 09:52:38
UTC ·
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Savvii
2026-11-09 09:34:49
UTC ·
(3 days ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 09:02:32
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 136.70.172.82 (82.172.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:02:26.833342 2026] [security2:error] [pid 16026:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 136.70.172.82 (82.172.70.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 04:02:26.833342 2026] [security2:error] [pid 16026:tid 16026] [client 136.70.172.82:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tubbesing.services"] [uri "/.env.supabase"] [unique_id "avGMImZiJUA6xm2NnuhXSAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rzk
2026-11-09 08:42:13
UTC ·
(3 days ago)
CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-event detection. ASN: GOOGLE-CLOUD-PLATFORM. Country: US. Timestamp: 2026-11-09T08:42:13+00:00.
Bad Web Bot
Web App Attack
Anonymous
2026-11-09 08:40:04
UTC ·
(3 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
Anonymous
2026-11-09 08:33:06
UTC ·
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 136.70.172.82 (US/United States/82.172.70.136.bc.googleusercontent.com)
SQL Injection
🇺🇸
EmilGH
2026-11-09 08:17:46
UTC ·
(3 days ago)
136.70.172.82 - - [09/Nov/2026:08:17:41 +0000] "GET /robots.txt HTTP/1.1" 404 531 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.70.172.82 - - [09/Nov/2026:08:17:42 +0000] "GET /sitemap.xml HTTP/1.1" 404 531 "-" "Mozilla/5. ...
show more
136.70.172.82 - - [09/Nov/2026:08:17:41 +0000] "GET /robots.txt HTTP/1.1" 404 531 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.70.172.82 - - [09/Nov/2026:08:17:42 +0000] "GET /sitemap.xml HTTP/1.1" 404 531 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
136.70.172.82 - - [09/Nov/2026:08:17:43 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 531 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
136.70.172.82 - - [09/Nov/2026:08:17:44 +0000] "GET /admin/users HTTP/1.1" 404 531 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
136.70.172.82 - - [09/Nov/2026:08:17:44 +0000] "GET /z9x8c7v6b5-debug-trigger-chanchiki.mx HTTP/1.1" 404 4479 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.70.172.82 - - [09/Nov/2026:08:17:44 +0000] "GET /api-keys HTTP/1.1" 404 4479 "-" "M
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-09 08:15:06
UTC ·
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
Marc
2026-11-09 08:03:31
UTC ·
(3 days ago)
136.70.172.82 - - [09/Nov/2026:09:03:30 +0100] "GET /sitemap.xml HTTP/2.0" 404 314 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 136.70.172.82 - - [09/Nov/2026:09:03:30 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 269 "-" " ...
show more
136.70.172.82 - - [09/Nov/2026:09:03:30 +0100] "GET /sitemap.xml HTTP/2.0" 404 314 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 136.70.172.82 - - [09/Nov/2026:09:03:30 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 136.70.172.82 - - [09/Nov/2026:09:03:30 +0100] "GET /dashboard HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
show less
Brute-Force