🇧🇷
cibersecoptidata
2026-11-07 02:50:15
UTC ·
(1 week ago)
Port scan / Unsolicited traffic.
Port Scan
🇫🇮
albionfreemarket.com
2026-11-06 09:35:47
UTC ·
(1 week ago)
136.66.76.129 - - [06/Nov/2026:09:35:45 +0000] "POST /graphql HTTP/2.0" 403 555 "https://albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 0.000 "-" "US"
136.66.76. ...
show more
136.66.76.129 - - [06/Nov/2026:09:35:45 +0000] "POST /graphql HTTP/2.0" 403 555 "https://albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 0.000 "-" "US"
136.66.76.129 - - [06/Nov/2026:09:35:46 +0000] "POST /api/graphql HTTP/2.0" 403 555 "https://albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 0.000 "-" "US"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-06 04:19:03
UTC ·
(1 week ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-06 02:52:12
UTC ·
(1 week ago)
Accessed trap at '/.env'
Web App Attack
Anonymous
2026-11-06 02:11:04
UTC ·
(1 week ago)
Banned by Fail2Ban on server
Web App Attack
🇬🇧
andypiper
2026-11-06 02:00:23
UTC ·
(1 week ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇺🇸
nasset
2026-11-06 01:34:49
UTC ·
(1 week ago)
136.66.76.129 - - [05/Nov/2026:17:34:49 -0800] "GET /.env.local HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.66.76.129 - - [ ...
show more
136.66.76.129 - - [05/Nov/2026:17:34:49 -0800] "GET /.env.local HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.66.76.129 - - [05/Nov/2026:17:34:49 -0800] "GET /backend/.env HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.66.76.129 - - [05/Nov/2026:17:34:49 -0800] "GET /admin/.env HTTP/1.1" 403 6324 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.66.76.129 - - [05/Nov/2026:17:34:49 -0800] "GET /api/.env HTTP/1.1" 403 584 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" TLSv1.3 TLS_AES_256_GCM_SHA384
136.66.76.129 - - [05/Nov/2026:17:34:49 -0800] "GET /config/.env HTTP/1.1" 403 6324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" TLSv1.3 TLS_AES_256_GCM_SHA384
...
show less
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-11-06 01:16:32
UTC ·
(1 week ago)
[06/Nov/2026:03:16:31 +0200] -- 136.66.76.129 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /static/manifest.json HTTP/1.1
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 00:57:12
UTC ·
(1 week ago)
Attempted access to sensitive endpoint (/login) detected. Automated scan or unauthorized probing.
Web App Attack
🇧🇪
cmbplf
2026-11-06 00:19:18
UTC ·
(1 week ago)
6.706 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
Anonymous
2026-11-05 23:34:03
UTC ·
(1 week ago)
Bot / scanning and/or hacking attempts: GET /service_account.json HTTP/2.0, GET /secrets.env HTTP/2.0, GET /serviceAccountKey.json HTTP/2.0, GET /orientatie/ons-onderwijs HTTP/2.0, GET /build../.env HTTP/2.0, GET /pnpm-workspace.yaml HTTP/2.0, [217/2 ...
show more
Bot / scanning and/or hacking attempts: GET /service_account.json HTTP/2.0, GET /secrets.env HTTP/2.0, GET /serviceAccountKey.json HTTP/2.0, GET /orientatie/ons-onderwijs HTTP/2.0, GET /build../.env HTTP/2.0, GET /pnpm-workspace.yaml HTTP/2.0, [217/217] read: stream 0, , GET /.env.dev HTTP/2.0, GET /credentials.json HTTP/2.0, GET /docker-compose.yaml HTTP/2.0, [143/143] read: stream 0, , GET /userfiles/x?path=../../.env HTTP/2.0, GET /core/.env HTTP/2.0, GET /sitemap_index.xml HTTP/2.0, GET /Dockerfile HTTP/2.0, GET /laravel/.env HTTP/2.0, GET /secrets.yml HTTP/2.0
show less
Hacking
Web App Attack
🇺🇸
kosada.com
2026-11-05 23:17:50
UTC ·
(1 week ago)
Repeated exploit attempts, for example: /uploads../.env /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)")
Web App Attack
🇩🇪
bazter.pro
2026-11-05 23:16:28
UTC ·
(1 week ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-05 23:15:02
UTC ·
(1 week ago)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-11-05 20:59:18
UTC ·
(1 week ago)
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/) ( ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/) (+12 more) | path: /images../.env, /assets../.env, /js../.env (+16 more)
show less
Bad Web Bot