🇫🇷
SpaceHost-Server
2026-09-22 22:17:22
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇬🇧
Marten Mark
2026-09-22 00:44:45
UTC ·
(1 month ago)
136.119.150.67 - - [22/Sep/2026:00:44:44 +0000] "GET /z9x8c7v6b5-debug-trigger-bonus.cfi.co HTTP/2.0" 404 8265 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
136.119.150.67 - - [22/Sep/2026:00:44:44 +0000] "GET /config.json H ...
show more
136.119.150.67 - - [22/Sep/2026:00:44:44 +0000] "GET /z9x8c7v6b5-debug-trigger-bonus.cfi.co HTTP/2.0" 404 8265 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
136.119.150.67 - - [22/Sep/2026:00:44:44 +0000] "GET /config.json HTTP/2.0" 404 8265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
136.119.150.67 - - [22/Sep/2026:00:44:44 +0000] "GET /config.json HTTP/2.0" 404 8265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
136.119.150.67 - - [22/Sep/2026:00:44:44 +0000] "GET /__/firebase/init.json HTTP/2.0" 404 8265 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
136.119.150.67 - - [22/Sep/2026:00:44:44 +0000] "GET /__/firebase/init.json HTTP/2.0" 404 8265 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
136.119.150.67 - - [22/Sep/2026:00:44:44 +0000] "GET /api/settings HTTP
...
show less
Port Scan
Web App Attack
🇺🇸
IndigoRidge
2026-09-21 23:08:24
UTC ·
(1 month ago)
136.119.150.67 - - [21/Sep/2026:19:08:22 -0400] "GET /phpinfo.php HTTP/1.1" 404 81161 "https://www.civility.co/phpinfo.php" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
136.119.150.67 - - [ ...
show more
136.119.150.67 - - [21/Sep/2026:19:08:22 -0400] "GET /phpinfo.php HTTP/1.1" 404 81161 "https://www.civility.co/phpinfo.php" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
136.119.150.67 - - [21/Sep/2026:19:08:22 -0400] "GET /chatbot/.env HTTP/1.1" 404 81165 "https://www.civility.co/chatbot/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
136.119.150.67 - - [21/Sep/2026:19:08:23 -0400] "GET /info.php HTTP/1.1" 404 81155 "https://www.civility.co/info.php" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
show less
Web App Attack
🇺🇸
snappic
2026-09-21 22:51:34
UTC ·
(1 month ago)
Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)]
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-21 22:16:23
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇺🇸
snappic
2026-09-21 21:20:45
UTC ·
(1 month ago)
Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)]
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-21 19:40:36
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
snappic
2026-09-21 19:29:16
UTC ·
(1 month ago)
Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)]
Bad Web Bot
Web App Attack
🇺🇸
snappic
2026-09-21 18:55:00
UTC ·
(1 month ago)
Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)]
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-09-21 18:16:01
UTC ·
(1 month ago)
2026/09/21 18:16:00 [error] 1144020#1144020: *22390083 access forbidden by rule, client: 136.119.150.67, server: binixo.co, request: "GET /config/.env HTTP/2.0", host: "binixo.co"
2026/09/21 18:16:00 [error] 1144020#1144020: *22390083 access forbidde ...
show more
2026/09/21 18:16:00 [error] 1144020#1144020: *22390083 access forbidden by rule, client: 136.119.150.67, server: binixo.co, request: "GET /config/.env HTTP/2.0", host: "binixo.co"
2026/09/21 18:16:00 [error] 1144020#1144020: *22390083 access forbidden by rule, client: 136.119.150.67, server: binixo.co, request: "GET /project/.env HTTP/2.0", host: "binixo.co"
2026/09/21 18:16:00 [error] 1144020#1144020: *22390083 access forbidden by rule, client: 136.119.150.67, server: binixo.co, request: "GET /.env.example HTTP/2.0", host: "binixo.co"
...
show less
Web App Attack
🇩🇪
updown.io
2026-09-21 16:57:31
UTC ·
(1 month ago)
{"level":"info","ts":1790009848.4723814,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.119.150.67","remote_port":"58544","client_ip":"136.119.150.67","proto":"HTTP/2.0","method":"GET","host":"status.ludu.co","uri" ...
show more
{"level":"info","ts":1790009848.4723814,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.119.150.67","remote_port":"58544","client_ip":"136.119.150.67","proto":"HTTP/2.0","method":"GET","host":"status.ludu.co","uri":"/config.json","headers":{"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"],"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.ludu.co","ech":false}},"bytes_read":0,"user_id":"","duration":0.000253143,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1790009848.474424
...
show less
DDoS Attack
Web App Attack
🇳🇱
Savvii
2026-09-21 15:22:15
UTC ·
(1 month ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Marten Mark
2026-09-21 14:22:54
UTC ·
(1 month ago)
136.119.150.67 - - [21/Sep/2026:14:22:46 +0000] "GET /k07b9oifax0jpva29nwb HTTP/2.0" 404 22988 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
136.119.150.67 - - [21/Sep/2026:14:22:46 +0000] "GET /z9x8c7v6b5-debug-trigger-cfi.co HTTP/2.0" ...
show more
136.119.150.67 - - [21/Sep/2026:14:22:46 +0000] "GET /k07b9oifax0jpva29nwb HTTP/2.0" 404 22988 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
136.119.150.67 - - [21/Sep/2026:14:22:46 +0000] "GET /z9x8c7v6b5-debug-trigger-cfi.co HTTP/2.0" 404 22988 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
136.119.150.67 - - [21/Sep/2026:14:22:46 +0000] "GET /fdg8yyrf1zzgde26d38g HTTP/2.0" 404 22988 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
136.119.150.67 - - [21/Sep/2026:14:22:47 +0000] "POST /graphql HTTP/2.0" 404 22778 "https://cfi.co" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
136.119.150.67 - - [21/Sep/2026:14:22:49 +0000] "POST /api/graphql HTTP/2.0" 404 22778 "https://cfi.co" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
136.11
...
show less
Port Scan
Web App Attack
🇺🇸
gamabe
2026-09-21 13:10:19
UTC ·
(1 month ago)
Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.
Hacking
🇮🇹
VHosting
2026-09-21 12:45:04
UTC ·
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
