🇫🇷
SpaceHost-Server
2026-10-15 22:23:52
(6 days ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-14 22:23:01
(1 week ago)
Brute-Force
Web App Attack
🇧🇷
ICS Labs
2026-10-14 15:19:37
(1 week ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-14 UTC.
Brute-Force
Exploited Host
🇩🇪
rh24
2026-10-14 01:25:07
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.236.198.211 (US/U ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.236.198.211 (US/United States/211.198.236.35.bc.googleusercontent.com): (CF_ENABLE)
show less
Bad Web Bot
🇩🇪
macrob
2026-10-14 00:33:43
(1 week ago)
2026/10/14 00:33:41 [error] 3697906#3697906: *49318082 access forbidden by rule, client: 35.236.198. ...
show more
2026/10/14 00:33:41 [error] 3697906#3697906: *49318082 access forbidden by rule, client: 35.236.198.211, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "cpcontacts.pitup.org"
2026/10/14 00:33:41 [error] 3697906#3697906: *49318083 access forbidden by rule, client: 35.236.198.211, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "cpcontacts.pitup.org"
2026/10/14 00:33:41 [error] 3697906#3697906: *49318083 access forbidden by rule, client: 35.236.198.211, server: fn.binixo.es, request: "GET /.env?raw HTTP/2.0", host: "cpcontacts.pitup.org"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 23:48:22
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.236.198.211 (211.198.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.198.211 (211.198.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:48:17.415049 2026] [security2:error] [pid 26444:tid 26450] [client 35.236.198.211:37194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.seips.org"] [uri "/.env.local"] [unique_id "as7DQa2Mz87Rjdr8l05U9AAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-10-13 23:26:54
(1 week ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 2s
Web App Attack
🇩🇪
bazter.pro
2026-10-13 23:00:06
(1 week ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
tinect
2026-10-13 22:41:23
(1 week ago)
Gets ban for 4h for triggering tinect/http-sensitive-file-probe at root1.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 22:31:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.236.198.211 (211.198.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.198.211 (211.198.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 18:31:25.555682 2026] [security2:error] [pid 15869:tid 15869] [client 35.236.198.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ruralcommunitycare.org"] [uri "/.env.supabase"] [unique_id "as6xPWUxZK9RIM0rdBeKcwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-13 22:20:07
(1 week ago)
Brute-Force
Web App Attack
🇩🇪
bazter.pro
2026-10-13 21:50:19
(1 week ago)
Fail2Ban: apache-ratelimit - 20 failures
Port Scan
Bad Web Bot
Web App Attack
🇳🇱
Starburst SysOp Team
2026-10-13 19:20:49
(1 week ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-ams6-1)
show less
Bad Web Bot
🇫🇷
LoneRider
2026-10-13 17:47:23
(1 week ago)
[13/Oct/2026:19:47:22.711992 +0200] as5uqroZ1NLvH8ERGuk8OwAAAAc 35.236.198.211 44394 127.0.0.1 7081
...
show more
[13/Oct/2026:19:47:22.711992 +0200] as5uqroZ1NLvH8ERGuk8OwAAAAc 35.236.198.211 44394 127.0.0.1 7081
[13/Oct/2026:19:47:22.726222 +0200] as5uqvbma-9-22CFlU4E0wAAAAE 35.236.198.211 44418 127.0.0.1 7081
[13/Oct/2026:19:47:22.726578 +0200] as5uqlWa_eho5QYZJhlBowAAAAA 35.236.198.211 44406 127.0.0.1 7081
...
show less
Hacking
2026-10-13 17:29:32
(1 week ago)
Fail2Ban apache-noscript
Bad Web Bot