๐ณ๐ฑ
Savvii
2026-10-19 19:27:40
(7 hours ago)
20 attempts against mh-misbehave-ban on ceres
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-19 18:05:51
(8 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-19 17:44:31
(8 hours ago)
excessive HTTP 404 errors
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-10-19 17:13:57
(9 hours ago)
20 attempts against mh-misbehave-ban on virgo
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-19 16:32:01
(10 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ฉ๐ช
KiekerJan
2026-10-19 15:01:16
(11 hours ago)
136.107.85.200 - - [19/Oct/2026:17:01:15 +0200] "GET /api/console/api_server?sense_version=%40%40SEN ...
show more
136.107.85.200 - - [19/Oct/2026:17:01:15 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/2.0" 404 107 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
136.107.85.200 - - [19/Oct/2026:17:01:15 +0200] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
Web App Attack
๐ณ๐ฑ
melroy89
2026-10-19 13:52:24
(12 hours ago)
136.107.85.200 - - [19/Oct/2026:15:51:23 +0200] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT ...
show more
136.107.85.200 - - [19/Oct/2026:15:51:23 +0200] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" "mail.dennisoosterhof.nl" 0.000
136.107.85.200 - - [19/Oct/2026:15:51:23 +0200] "POST / HTTP/1.1" 403 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "mail.dennisoosterhof.nl" 0.000
136.107.85.200 - - [19/Oct/2026:15:51:23 +0200] "GET /fobo4gi78kwnaw7j3nyg HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "mail.dennisoosterhof.nl" 0.000
136.107.85.200 - - [19/Oct/2026:15:51:23 +0200] "GET /z9x8c7v6b5-debug-trigger-mail.dennisoosterhof.nl HTTP/1.1" 403 9 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "mail.dennisoosterhof.nl" 0.000
13
...
show less
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-19 13:08:38
(13 hours ago)
20 attempts against mh-misbehave-ban on ship
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-19 12:34:37
(14 hours ago)
Web probing (785 hits in 24h) on analytics.1valkenburg.nl,default-vhost: sensitive-path scans and/or ...
show more
Web probing (785 hits in 24h) on analytics.1valkenburg.nl,default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 12:06:26
(14 hours ago)
[ti-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[ti-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 136.107.85.200 - - [19/Oct/2026:14:06:05 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0"
136.107.85.200 - - [19/Oct/2026:14:06:05 +0200] "POST /lib/terminal-xhr.php HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.107.85.200 - - [19/Oct/2026:14:06:05 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0"
136.107.85.200 - - [19/Oct/2026:14:06:05 +0200] "POST /lib/file-control.php HTTP/2.0" 404 1338 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.107.85.200 - -
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Eric
2026-10-19 11:50:09
(14 hours ago)
[Mon Oct 19 11:50:09.062847 2026] [security2:error] [pid 1215093:tid 1215093] [client 136.107.85.200 ...
show more
[Mon Oct 19 11:50:09.062847 2026] [security2:error] [pid 1215093:tid 1215093] [client 136.107.85.200:57856] [client 136.107.85.200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "wordpress.fambus.nl"] [uri "/"] [unique_id "atYD8Wiyk5IynWm9MXOFugAAACE"]
[Mon Oct 19 11:50:09.175878 2026] [security2:error] [pid 1215086:tid 1215086] [client 136.107.85.200:57860] [client 136.107.85.200] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
MacLotsen
2026-10-19 11:40:13
(14 hours ago)
136.107.85.200 - - [19/Oct/2026:13:40:11 +0200] "POST /lib/terminal-xhr.php HTTP/1.1" 404 3187 "-" " ...
show more
136.107.85.200 - - [19/Oct/2026:13:40:11 +0200] "POST /lib/terminal-xhr.php HTTP/1.1" 404 3187 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
Brute-Force
๐ณ๐ฑ
Savvii
2026-10-19 11:05:04
(15 hours ago)
20 attempts against mh-misbehave-ban on mars
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-19 10:53:09
(15 hours ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 136.107.85.200 (US/United States/200.85.107. ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 136.107.85.200 (US/United States/200.85.107.136.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.107.85.200 - - [19/Oct/2026:12:53:03 +0200] "GET /secrets.env HTTP/2.0" 301 358
136.107.85.200 - - [19/Oct/2026:12:53:03 +0200] "GET /docker/.env HTTP/2.0" 406 317
136.107.85.200 - - [19/Oct/2026:12:53:03 +0200] "GET /.env.supabase HTTP/2.0" 406 317
show less
Port Scan
๐ณ๐ฑ
Alt255
2026-10-19 09:32:07
(17 hours ago)
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 136.107.85.200 - - [19/Oct/2026:11:31:57 +0200] "GET /login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0"
136.107.85.200 - - [19/Oct/2026:11:31:57 +0200] "GET /backoffice HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0"
136.107.85.200 - - [19/Oct/2026:11:31:57 +0200] "GET /secure HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0"
136.107.85.200 - - [19/Oct/2026:11:31:57 +0200] "GET /dashboard/billing HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux
...
show less
Bad Web Bot
Web App Attack