๐ฉ๐ช
palzer.IT
2026-09-30 04:28:53
(3 weeks ago)
Fail2ban automatic report for plesk-apache-badbot: 136.107.24.253 - - [25/Sep/2026:21:10:32 +0200] G ...
show more
Fail2ban automatic report for plesk-apache-badbot: 136.107.24.253 - - [25/Sep/2026:21:10:32 +0200] GET /api/v1/settings [DOMAIN_REMOVED] 404 5207 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@[DOMAIN_REMOVED])
show less
Bad Web Bot
๐ซ๐ท
SpaceHost-Server
2026-09-29 22:16:51
(3 weeks ago)
Brute-Force
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-09-29 10:59:26
(3 weeks ago)
136.107.24.253 - - [29/Sep/2026:11:59:25 +0100] "POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+ ...
show more
136.107.24.253 - - [29/Sep/2026:11:59:25 +0100] "POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
show less
Bad Web Bot
๐ฉ๐ช
Petros Stefanakis
2026-09-29 10:38:44
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 136.107.24.253 (US/United States/253.24 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 136.107.24.253 (US/United States/253.24.107.136.bc.googleusercontent.com)
show less
SQL Injection
๐ฌ๐ง
consul.to
2026-09-29 07:15:24
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-09-29 06:14:58
(3 weeks ago)
136.107.24.253 - - [29/Sep/2026:07:14:56 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d ...
show more
136.107.24.253 - - [29/Sep/2026:07:14:56 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
show less
Bad Web Bot
๐ซ๐ท
Hippoline
2026-09-29 05:26:54
(3 weeks ago)
[Tue Sep 29 07:26:52.323544 2026] [authz_core:error] [pid 15347] [client 136.107.24.253:34510] AH016 ...
show more
[Tue Sep 29 07:26:52.323544 2026] [authz_core:error] [pid 15347] [client 136.107.24.253:34510] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/phpinfo.php
[Tue Sep 29 07:26:52.365803 2026] [authz_core:error] [pid 8181] [client 136.107.24.253:34524] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/info.php
[Tue Sep 29 07:26:52.448087 2026] [authz_core:error] [pid 15347] [client 136.107.24.253:34510] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/pi.php
[Tue Sep 29 07:26:52.533706 2026] [authz_core:error] [pid 17284] [client 136.107.24.253:34572] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/test.php
[Tue Sep 29 07:26:52.595872 2026] [authz_core:error] [pid 8181] [client 136.107.24.253:34524] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/i.php
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-09-29 05:26:51
(3 weeks ago)
2026/09/29 06:26:46 [error] 3532286#3532286: *904591 access forbidden by rule, client: 136.107.24.25 ...
show more
2026/09/29 06:26:46 [error] 3532286#3532286: *904591 access forbidden by rule, client: 136.107.24.253, server: betatechnologies.info, request: "GET /.env HTTP/2.0", host: "freeswitch.betatechnologies.info"
136.107.24.253 - - [29/Sep/2026:06:26:46 +0100] "GET /.env HTTP/2.0" 403 1166 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
2026/09/29 06:26:49 [error] 3532286#3532286: *904591 access forbidden by rule, client: 136.107.24.253, server: betatechnologies.info, request: "GET /app/.env HTTP/2.0", host: "freeswitch.betatechnologies.info"
show less
Brute-Force
Web App Attack
๐ซ๐ท
Lunix
2026-09-29 04:43:47
(3 weeks ago)
Brute-Force
Web App Attack
๐บ๐ธ
Major Hostility
2026-09-29 04:43:18
(3 weeks ago)
"GET /dist/manifest.json HTTP/1.1" 404
"GET /z9x8c7v6b5-debug-trigger-mail.[DOMAIN] HTTP/1.1" 404
"G ...
show more
"GET /dist/manifest.json HTTP/1.1" 404
"GET /z9x8c7v6b5-debug-trigger-mail.[DOMAIN] HTTP/1.1" 404
"GET /rh2mvlhl9ukf0w2p13su HTTP/1.1" 404
"GET /static/manifest.json HTTP/1.1" 404
"GET /assets/manifest.json HTTP/1.1" 404
"GET /webpack-stats.json HTTP/1.1" 404
"GET /asset-manifest.json HTTP/1.1" 404
"GET /8dg0k45j871j091966u7 HTTP/1.1" 404
"GET /signup HTTP/1.1" 404
"GET /manifest.json HTTP/1.1" 404
"GET /users/login HTTP/1.1" 404
"GET /secure HTTP/1.1" 404
"POST /graphql HTTP/1.1" 404
"GET /register HTTP/1.1" 404
"GET /forgot-password HTTP/1.1" 404
"GET /auth HTTP/1.1" 404
"GET /reset-password HTTP/1.1" 404
"GET /admin HTTP/1.1" 404
"GET /login HTTP/1.1" 404
"GET /admin
show less
Web App Attack
๐บ๐ธ
technojoe99
2026-09-29 04:41:39
(3 weeks ago)
Exploit scan from 136.107.24.253. GET /signin HTTP/2.0.
Web App Attack
๐ฉ๐ช
eposs-it.de
2026-09-29 03:50:25
(3 weeks ago)
Blocked by os-abuseipdb; 8 hits, proto=tcp, ports=443,80,8080,8443
Port Scan
Hacking
๐ฆ๐น
Pingger Shikkoken
2026-09-29 03:44:54
(3 weeks ago)
2026-09-29T03:44:54+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-09-29T03:44:54+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=136.107.24.253 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=3971 DF PROTO=TCP SPT=46876 DPT=8443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-29T03:44:54+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=136.107.24.253 DST=10.1.1.11 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=59758 DF PROTO=TCP SPT=32792 DPT=8080 WINDOW=65320 RES=0x00 SYN URGP=0 2026-09-29T03:44:54+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=136.107.24.253 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=32091 DF PROTO=TCP SPT=37352 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
Port Scan
๐บ๐ธ
entangled_mongoose
2026-09-28 18:32:12
(3 weeks ago)
Probed /wp-json.
Web App Attack
๐ฎ๐น
VHosting
2026-09-28 18:00:05
(3 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack