🇧🇷
Sysadmin-CLC
2026-10-13 12:08:34
(1 minute ago)
2026/10/13 12:08:33 [error] 473#473: *36460 limiting requests, excess: 40.160 by zone "general", cli ...
show more
2026/10/13 12:08:33 [error] 473#473: *36460 limiting requests, excess: 40.160 by zone "general", client: 136.107.18.186, server: status.literaturaclassica.com.br, request: "GET /.env.credentials HTTP/1.1", host: "status.literaturaclassica.com.br"
...
show less
Web App Attack
DDoS Attack
🇨🇱
Fernando Soto
2026-10-13 12:05:02
(4 minutes ago)
WAF propio vps1 (CL): 404MASx104,sensMASx195 score 32 en 1h. sondeo rutas sensibles, barrido 404.
Port Scan
Web App Attack
🇨🇭
Origon
2026-10-13 11:21:04
(48 minutes ago)
http-sensitive-files - IP: 136.107.18.186 - time="2026-10-13T13:21:03+02:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 136.107.18.186 - time="2026-10-13T13:21:03+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 136.107.18.186 (US/396982) : 4h ban on Ip 136.107.18.186" module=db
show less
Web App Attack
🇳🇱
Site.eu
2026-10-13 11:15:36
(54 minutes ago)
Excessive multi-domain requests
Brute-Force
🇫🇮
NoaQT
2026-10-13 10:56:18
(1 hour ago)
2026-10-13T10:56:18.079801+00:00 ingress-1 haproxy[275]: 136.107.18.186:39132 [13/Oct/2026:10:56:18. ...
show more
2026-10-13T10:56:18.079801+00:00 ingress-1 haproxy[275]: 136.107.18.186:39132 [13/Oct/2026:10:56:18.079] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 234/225/0/0/0 0/0 "GET https://dev.mentis.si/.gitlab-ci.yml HTTP/2.0"
2026-10-13T10:56:18.080018+00:00 ingress-1 haproxy[275]: 136.107.18.186:39132 [13/Oct/2026:10:56:18.079] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 234/225/0/0/0 0/0 "GET https://dev.mentis.si/firebase-service-account.json HTTP/2.0"
2026-10-13T10:56:18.080348+00:00 ingress-1 haproxy[275]: 136.107.18.186:39132 [13/Oct/2026:10:56:18.080] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 234/225/0/0/0 0/0 "POST https://dev.mentis.si/api/graphql HTTP/2.0"
2026-10-13T10:56:18.108477+00:00 ingress-1 haproxy[275]: 136.107.18.186:39132 [13/Oct/2026:10:56:18.108] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 234/225/0/0/0 0/0 "GET https://dev.mentis.si/....//....//....//..../.env HTTP/2.0"
2026-10-13T10:56:18.115595+00:00 ingress-1 hap
...
show less
DDoS Attack
🇩🇪
updown.io
2026-10-13 10:28:51
(1 hour ago)
{"level":"info","ts":1791887329.9249065,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791887329.9249065,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.107.18.186","remote_port":"35428","client_ip":"136.107.18.186","proto":"HTTP/2.0","method":"GET","host":"status.hledger.org","uri":"/dist/manifest.json","headers":{"Upgrade-Insecure-Requests":["1"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-Dest":["document"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Fetch-User":["?1"],"Priority":["u=0, i"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Use
...
show less
DDoS Attack
Web App Attack
🇳🇱
e.fierstra
2026-10-13 10:24:53
(1 hour ago)
excessive HTTP 404 errors
Bad Web Bot
🇳🇱
Alt255
2026-10-13 10:23:42
(1 hour ago)
[ftpbd] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 136.1 ...
show more
[ftpbd] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 136.107.18.186 - - \[13/Oct/2026:12:23:26 +0200\] "GET /static../.env HTTP/1.1" 404 2101 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-SearchBot/1.0\; +https://openai.com/searchbot"
136.107.18.186 - - \[13/Oct/2026:12:23:26 +0200\] "GET /files../.env HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; GrokBot/1.0\; +https://x.ai/\)"
136.107.18.186 - - \[13/Oct/2026:12:23:26 +0200\] "GET /images../.env HTTP/1.1" 404 2101 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-AdsBot/1.0\; +https://openai.com/adsbot"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2026-10-13 10:20:04
(1 hour ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇺🇸
masterguru
2026-10-13 10:09:56
(1 hour ago)
COMODO WAF: URL file extension is restricted by policy. Match of "pmFromFile userdata_wl_extensions" ...
show more
COMODO WAF: URL file extension is restricted by policy. Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. (210730-169)
show less
Hacking
🇩🇪
Hazzard
2026-10-13 10:07:12
(2 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇮🇹
VHosting
2026-10-13 10:00:06
(2 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-10-13 09:50:11
(2 hours ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
2026-10-13 09:45:39
(2 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
Gwyneth Llewelyn
2026-10-13 09:43:41
(2 hours ago)
2026/10/13 10:43:38 [error] 4060693#4060693: *2797766 access forbidden by rule, client: 136.107.18.1 ...
show more
2026/10/13 10:43:38 [error] 4060693#4060693: *2797766 access forbidden by rule, client: 136.107.18.186, server: [redacted], request: "GET /api/data/..%2f..%2f.env HTTP/2.0", host: "wiki.betatechnologies.info"
2026/10/13 10:43:38 [error] 4060693#4060693: *2797750 access forbidden by rule, client: 136.107.18.186, server: [redacted], request: "GET /client/.env HTTP/2.0", host: "wiki.betatechnologies.info"
2026/10/13 10:43:38 [error] 4060693#4060693: *2797766 access forbidden by rule, client: 136.107.18.186, server: [redacted], request: "GET /apps/.env HTTP/2.0", host: "wiki.betatechnologies.info"
show less
Brute-Force
Web App Attack
