๐ฉ๐ช
updown.io
2026-10-19 05:56:31
(34 minutes ago)
{"level":"info","ts":1792389390.390838,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1792389390.390838,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.107.137.51","remote_port":"53784","client_ip":"136.107.137.51","proto":"HTTP/2.0","method":"GET","host":"solastatus.mere.site","uri":"/manifest.json","headers":{"Sec-Fetch-Site":["none"],"X-Nextjs-Data":["1"],"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Sec-Ch-Ua-Platform":["\"macOS\""],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-User":["?1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Priority":["u=0, i"],"User-Agen
...
show less
DDoS Attack
Web App Attack
๐ฉ๐ช
LRob
2026-10-19 05:34:30
(56 minutes ago)
Wordlist path sweep | method: GET | path: /account, /4wu743vccagsvwva5fho, /panel (+9 more) | ua: Mo ...
show more
Wordlist path sweep | method: GET | path: /account, /4wu743vccagsvwva5fho, /panel (+9 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)
show less
Port Scan
Web App Attack
๐ง๐ช
taivas.nl
2026-10-19 04:33:04
(1 hour ago)
Many_bad_calls
Web App Attack
Anonymous
2026-10-19 04:32:03
(1 hour ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ฉ๐ช
big-cloud.nl
2026-10-19 03:49:09
(2 hours ago)
Try to access /.env.credentials
Web App Attack
๐ง๐ท
Peregrine
2026-10-19 03:12:27
(3 hours ago)
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.107.137.51 172.68.138.238 - - [17/Oct/2026:20:1 ...
show more
Fail2Ban ct101 Jail: tomcat-honeypot | Evidence: 136.107.137.51 172.68.138.238 - - [17/Oct/2026:20:14:02 -0300] "GET /files../.env HTTP/1.1" 404 18149
show less
Bad Web Bot
๐ซ๐ท
francoisunix
2026-10-19 02:41:40
(3 hours ago)
136.107.137.51 - - [19/Oct/2026:02:41:37 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Andr ...
show more
136.107.137.51 - - [19/Oct/2026:02:41:37 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
136.107.137.51 - - [19/Oct/2026:02:41:38 +0000] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
136.107.137.51 - - [19/Oct/2026:02:41:38 +0000] "GET /galvg0w5oz317vy7602v HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.107.137.51 - - [19/Oct/2026:02:41:38 +0000] "GET /1zvq68p8izqsy07fm6lh HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
136.107.137.51 - - [19/Oct/2026:02:41:38 +0000] "GET /z9x8c7v6b5-debug-trigger-test.eco-conscient.com HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.
...
show less
Web App Attack
๐ง๐ช
taivas.nl
2026-10-19 02:32:09
(3 hours ago)
Bad_requests
Bad Web Bot
๐บ๐ธ
francelink.fr
2026-10-19 02:19:24
(4 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-19T02:18:33.000Z.
Web App Attack
๐ช๐ธ
el-brujo
2026-10-19 01:32:31
(4 hours ago)
136.107.137.51 - - [19/Oct/2026:03:32:31 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 15989 "-" "M ...
show more
136.107.137.51 - - [19/Oct/2026:03:32:31 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 15989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
136.107.137.51 - - [19/Oct/2026:03:32:31 +0200] "GET /z9x8c7v6b5-debug-trigger-www.elhacker.net HTTP/2.0" 404 15989 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.107.137.51 - - [19/Oct/2026:03:32:31 +0200] "GET /e9ha7bd03d06de6fhvr9 HTTP/2.0" 404 15989 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
136.107.137.51 - - [19/Oct/2026:03:32:31 +0200] "GET /geovn0706xcpac4642ti HTTP/2.0" 404 15989 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Web App Attack
Hacking
๐ฆ๐บ
clapper
2026-10-19 01:23:07
(5 hours ago)
(mod_security) mod_security (id:980001) triggered by 136.107.137.51 (US/United States/51.137.107.136 ...
show more
(mod_security) mod_security (id:980001) triggered by 136.107.137.51 (US/United States/51.137.107.136.bc.googleusercontent.com): 5 in the last 3600 secs; ID: Clar
show less
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-10-19 01:19:17
(5 hours ago)
20 attempts against mh-misbehave-ban on sonic
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-10-18 23:56:58
(6 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ง๐ท
dermatovirtual
2026-10-18 22:08:33
(8 hours ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 82 unauthorized requests recorded between 2026-10-17 22:04:50 UTC and 2026-10-17 22:05:01 UTC (rate: ~82 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-17 22:05:01 UTC] IP: 136.107.137.51 - W3C IIS (Port 443): GET /@fs/app/.env -> HTTP 404 [CLIENT: 136.107.137.51]
[2026-10-17 22:05:01 UTC] IP: 136.107.137.51 - W3C IIS (Port 443): GET /core/.env -> HTTP 404 [CLIENT: 136.107.137.51]
[2026-10-17 22:05:01 UTC] IP: 136.107.137.51 - W3C IIS (Port 443): GET /api/v1/.env -> HTTP 404 [CLIENT: 136.107.137.51]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-18 22:00:07
(8 hours ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection