🇫🇮
kumiko
2026-11-09 19:57:48
UTC ·
(5 days ago)
[2026-11-09 21:57:48] Persistent attack/probing over several days.
Port Scan
Brute-Force
Bad Web Bot
🇫🇮
kumiko
2026-11-09 17:56:19
UTC ·
(5 days ago)
[2026-11-09 19:56:18] User-Agent Spoofing (6 unique User-Agent strings from the same IP address within 0 seconds)
Bad Web Bot
🇫🇮
oh.mg
2026-11-09 15:18:43
UTC ·
(5 days ago)
[Mon Nov 09 16:18:42.703625 2026] [security2:error] [pid 3924829:tid 3924841] [client 136.108.95.139:0] [client 136.108.95.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/us ...
show more
[Mon Nov 09 16:18:42.703625 2026] [security2:error] [pid 3924829:tid 3924841] [client 136.108.95.139:0] [client 136.108.95.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "intl.mmn.ca"] [uri "/.env.development.local"] [unique_id "avHkUsFdYgah3wtMSyVIXAAAAEo"]
[Mon Nov 09 16:18:43.050149 2026] [security2:error] [pid 3924829:tid 3924846] [client 136.108.95.139:0] [client 136.108.95.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-
...
show less
Web App Attack
Bad Web Bot
🇬🇧
consul.to
2026-11-09 14:11:59
UTC ·
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
nasset
2026-11-09 14:01:43
UTC ·
(5 days ago)
136.108.95.139 - - [09/Nov/2026:06:01:43 -0800] "GET /src/.env HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.108.95.139 - - [09/Nov/2026:06:01:43 -0800] "GET /admin/.env HTTP/1.1" 403 ...
show more
136.108.95.139 - - [09/Nov/2026:06:01:43 -0800] "GET /src/.env HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.108.95.139 - - [09/Nov/2026:06:01:43 -0800] "GET /admin/.env HTTP/1.1" 403 6324 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.108.95.139 - - [09/Nov/2026:06:01:43 -0800] "GET /.env.keys HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.108.95.139 - - [09/Nov/2026:06:01:43 -0800] "GET /server/.env HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.108.95.139 - - [09/Nov/2026:06:01:43 -0800] "GET /.env.dev.local HTTP/1.1" 403 584 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" TLSv1.3 TLS_AES_256_GCM_SHA384
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-09 10:36:33
UTC ·
(5 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
Site.eu
2026-11-09 10:22:41
UTC ·
(5 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇩🇪
NewWavesApp
2026-11-09 09:12:41
UTC ·
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 136.108.95.139 (US/United States/139.95.108.136.bc.googleusercontent.com): (CF_ENABLE)
SQL Injection
🇮🇹
abuseiphack
2026-11-09 08:55:34
UTC ·
(5 days ago)
Automatic report for brute force attack
Bad Web Bot
🇮🇹
VHosting
2026-11-09 08:45:05
UTC ·
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-09 08:18:44
UTC ·
(5 days ago)
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 136.108.95.139 - - [09/Nov/2026:09:18:42 +0100] "GET /cxj59jj8oaz70i2nbtug HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; Meta-Exte ...
show more
[ti-17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 136.108.95.139 - - [09/Nov/2026:09:18:42 +0100] "GET /cxj59jj8oaz70i2nbtug HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
136.108.95.139 - - [09/Nov/2026:09:18:42 +0100] "GET /z9x8c7v6b5-debug-trigger-edu.mzoem.net HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
136.108.95.139 - - [09/Nov/2026:09:18:42 +0100] "GET /zf995xuh08w8ewz8k7mi HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
136.108.95.139 - - [09/Nov/2026:09:18:42 +0100] "POST /graphql HTTP/2.0" 404 2020 "https://edu.mzoem.net" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (
...
show less
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-09 07:58:07
UTC ·
(5 days ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-11-09 07:56:32
UTC ·
(5 days ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇺🇸
mutebot.net
2026-11-09 07:05:22
UTC ·
(6 days ago)
SRC=136.108.95.139, PROTO=TCP, SPT=45758, DPT=8080
Port Scan