🇳🇱
Alt255
2026-10-27 04:20:29
(3 days ago)
[ti-01ov] Excessive 404 errors (web scanning): 28 suspicious requests detected by fail2ban jail <name>. Example: 136.70.113.92 - - \[18/Oct/2026:12:27:22 +0200\] "GET /uqcc4z4100ombgh5ljn8 HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; Googlebot/ ...
show more
[ti-01ov] Excessive 404 errors (web scanning): 28 suspicious requests detected by fail2ban jail <name>. Example: 136.70.113.92 - - \[18/Oct/2026:12:27:22 +0200\] "GET /uqcc4z4100ombgh5ljn8 HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
136.70.113.92 - - \[18/Oct/2026:12:27:23 +0200\] "POST /graphql HTTP/1.1" 404 7388 "https://faq.rcom.nl" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/153.0.0.0 Safari/537.36"
136.70.113.92 - - \[18/Oct/2026:12:27:23 +0200\] "POST /_next HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; MoonshotBot/1.0\; +https://kimi.ai/\)"
136.70.113.92 - - \[18/Oct/2026:12:27:23 +0200\] "GET /@fs/root/.env\?raw\?\? HTTP/1.1" 404 7388 "-" "Mozilla/5.0 \(compatible\; DeepSeekBot/1.0\; +https://
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-25 13:08:54
(5 days ago)
[ti-12al] Web exploit scanning: 71 suspicious requests detected by fail2ban jail <name>. Example: 136.70.113.92 - - \[19/Oct/2026:08:00:41 +0200\] "GET /.env.supabase HTTP/2.0" 404 1863 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; comp ...
show more
[ti-12al] Web exploit scanning: 71 suspicious requests detected by fail2ban jail <name>. Example: 136.70.113.92 - - \[19/Oct/2026:08:00:41 +0200\] "GET /.env.supabase HTTP/2.0" 404 1863 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-SearchBot/1.0\; +https://openai.com/searchbot"
136.70.113.92 - - \[19/Oct/2026:08:00:41 +0200\] "GET /__vite_rsc_findSourceMapURL\?filename=file:///root/.aws/credentials\&environmentName=rsc HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(compatible\; YouBot/1.0\; +https://you.com/bot\)"
136.70.113.92 - - \[19/Oct/2026:08:00:41 +0200\] "GET /__vite_rsc_findSourceMapURL\?filename=file:///app/.env\&environmentName=rsc HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(compatible\; Hunyuan/1.0\; +https://hunyuan.tencent.com/\)"
136.70.113.92 - - \[19/Oct/2026:08:
...
show less
Bad Web Bot
Web App Attack
🇧🇷
Caue Henrique
2026-10-23 03:00:01
(1 week ago)
Multiple common web attacks, XSS, Web Server 500 Error
Web Spam
Hacking
Web App Attack
🇳🇱
Site.eu
2026-10-22 15:22:25
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
MatCat
2026-10-22 15:05:20
(1 week ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot
🇩🇪
updown.io
2026-10-21 10:26:13
(1 week ago)
{"level":"info","ts":1792578373.2605762,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"136.70.113.92","remote_port":"60226","client_ip":"136.70.113.92","proto":"HTTP/2.0","method":"GET","host":"kwkr.status.updown.io", ...
show more
{"level":"info","ts":1792578373.2605762,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"136.70.113.92","remote_port":"60226","client_ip":"136.70.113.92","proto":"HTTP/2.0","method":"GET","host":"kwkr.status.updown.io","uri":"/.git/config","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"],"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"kwkr.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.0017081,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1792578373.2608662,"logger":"http.log.access
...
show less
DDoS Attack
Web App Attack
🇺🇸
jormaster3k
2026-10-21 06:47:59
(1 week ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
ghostwarriors
2026-10-21 05:50:06
(1 week ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-21 05:33:03
(1 week ago)
[21/Oct/2026:08:33:02 +0300] -- 136.70.113.92 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /asset-manifest.json HTTP/1.1
Bad Web Bot
Web App Attack
🇩🇪
netman
2026-10-21 05:28:04
(1 week ago)
136.70.113.92 kyc-portal.com - [21/Oct/2026:05:27:56 +0000] "GET / HTTP/2.0" 200 257732 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
136.70.113.92 kyc-portal.de - [21/Oct/2026:0 ...
show more
136.70.113.92 kyc-portal.com - [21/Oct/2026:05:27:56 +0000] "GET / HTTP/2.0" 200 257732 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
136.70.113.92 kyc-portal.de - [21/Oct/2026:05:27:56 +0000] "GET / HTTP/2.0" 200 257732 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
136.70.113.92 kyc-portal.de - [21/Oct/2026:05:27:56 +0000] "GET /robots.txt HTTP/2.0" 200 113 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
136.70.113.92 kyc-portal.com - [21/Oct/2026:05:27:56 +0000] "GET /robots.txt HTTP/2.0" 200 113 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
136.70.113.92 kyc-portal.com - [21/Oct/2026:05:27:57 +0000] "GET /dist/manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobi
...
show less
DDoS Attack
Web App Attack
🇩🇪
wpadm4
2026-10-21 05:17:54
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-10-21 05:11:40
(1 week ago)
Web application attack: http sensitive files; Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Probing for exposed secret / credential files
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-20 21:59:26
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-19.
Web App Attack
SSH
Hacking
🇭🇺
Adorjan Daczo
2026-10-20 12:02:49
(1 week ago)
Probe for vulnerabilities. Path attempted: /js../.env
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-20 10:41:01
(1 week ago)
[Tue Oct 20 21:40:59.805113 2026] [security2:error] [pid 244905] [client 136.70.113.92:44546] [client 136.70.113.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Tue Oct 20 21:40:59.805113 2026] [security2:error] [pid 244905] [client 136.70.113.92:44546] [client 136.70.113.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.co.nz"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "atdFO8R8hRNli8thOe96WwAAACw"]
...
show less
Web App Attack
