Anonymous
2026-10-12 15:10:23
(2 weeks ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
๐ง๐ท
Peregrine
2026-10-11 03:09:15
(2 weeks ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 136.70.129.17 172.70.115.12 - - [07/Oct/2026:15:21:17 -03 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 136.70.129.17 172.70.115.12 - - [07/Oct/2026:15:21:17 -0300] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:17 -0300] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:17 -0300] "GET /cache/original/%2e%2e/.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /userfiles?path=../../../../.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /userfiles?path=../../.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /userfiles?path=../../../.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /api/system/fileView?file=/app/.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /userfiles/x?path=../../.env HTTP/1.1" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-10-09 03:09:33
(2 weeks ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 136.70.129.17 172.70.115.12 - - [07/Oct/2026:15:21:17 -03 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 136.70.129.17 172.70.115.12 - - [07/Oct/2026:15:21:17 -0300] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:17 -0300] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:17 -0300] "GET /cache/original/%2e%2e/.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /userfiles?path=../../../../.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /userfiles?path=../../.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /userfiles?path=../../../.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /api/system/fileView?file=/app/.env HTTP/1.1" 404 414
136.70.129.17 172.70.115.237 - - [07/Oct/2026:15:21:18 -0300] "GET /userfiles/x?path=../../.env HTTP/1.1" 404 414
show less
Bad Web Bot
Anonymous
2026-10-08 16:03:43
(2 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฉ๐ช
FD-IX
2026-10-08 14:19:58
(2 weeks ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ธ๐ฌ
mypatricks
2026-10-08 11:42:44
(2 weeks ago)
136.70.129.17 | Port: 13266 | DNS: 17.129.70.136.bc.googleusercontent.com 2026-10-08T19:42:43+08:00 ...
show more
136.70.129.17 | Port: 13266 | DNS: 17.129.70.136.bc.googleusercontent.com 2026-10-08T19:42:43+08:00 America/New_York | Un-authorized bots or crawlers | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] ) HTTP/1.1 443 GET | URL: /z9x8c7v6b5-debug-trigger-xxxxxx | Ref: - | Country: US/United States/-08:00 IP City: Washington a474e2412961dc5f-IAD/Ashburn, VA, United States 1 hits/0 secs Robots 1
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
Anonymous
2026-10-08 10:00:28
(2 weeks ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
Anonymous
2026-10-08 09:40:07
(2 weeks ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
๐ณ๐ฑ
Alt255
2026-10-08 02:54:45
(2 weeks ago)
[cb-13al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[cb-13al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 136.70.129.17 - - [08/Oct/2026:04:54:37 +0200] "GET /0lqx7kmizfaim8ebrj7h HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
136.70.129.17 - - [08/Oct/2026:04:54:37 +0200] "GET /build/manifest.json HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
136.70.129.17 - - [08/Oct/2026:04:54:38 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
136.70.129.17 - - [08/Oct/2026:04:54:38 +0200] "GET /z9x8c7v6b5-debug-trigger-conversations.dutchtallship.com HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-07 23:47:10
(2 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ง๐ท
dominioz
2026-10-07 23:35:18
(2 weeks ago)
2026-10-07 23:35:02 GET /images../.env - - 136.70.129.17 HTTP/2 Mozilla/5.0+(compatible;+YouBot/1.0; ...
show more
2026-10-07 23:35:02 GET /images../.env - - 136.70.129.17 HTTP/2 Mozilla/5.0+(compatible;+YouBot/1.0;++https://you.com/bot) - 301 576
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-07 23:20:54
(2 weeks ago)
136.70.129.17 - - [07/Oct/2026:17:20:24 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compat ...
show more
136.70.129.17 - - [07/Oct/2026:17:20:24 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 136.70.129.17
136.70.129.17 - - [07/Oct/2026:17:20:24 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 136.70.129.17
136.70.129.17 - - [07/Oct/2026:17:20:24 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 136.70.129.17
136.70.129.17 - - [07/Oct/2026:17:20:24 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 136.70.129.17
136.70.129.17 - - [07/Oct/2026:17:20:24 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" 136.70.129.17
136.70.129.17 - - [07/Oct/2026:17:20:25 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible;
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-07 23:11:18
(2 weeks ago)
Multiple WAF Violations
Web App Attack
๐ง๐ท
radardatelecom
2026-10-07 22:27:03
(2 weeks ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
Anonymous
2026-10-07 22:06:22
(2 weeks ago)
XSS Attempt
Hacking