🇺🇸
leasj
2026-10-15 16:15:13
UTC ·
(3 weeks ago)
Observed Scanned 9 known-sensitive endpoint(s), e.g.: /.env.config, /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw??, /api/admin/config.json, /.docker/config.json, /secrets.env.
Hacking
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-10-14 20:24:03
UTC ·
(3 weeks ago)
136.67.118.241 - - [14/Oct/2026:20:23:20 +0000] "GET /robots.txt HTTP/2.0" 403 93 "https://ccoo.cat/robots.txt" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "136.67.118.241" edge="172.71.151.8"
136.67.118.241 - - [14/Oct/2026:20:23:22 + ...
show more
136.67.118.241 - - [14/Oct/2026:20:23:20 +0000] "GET /robots.txt HTTP/2.0" 403 93 "https://ccoo.cat/robots.txt" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "136.67.118.241" edge="172.71.151.8"
136.67.118.241 - - [14/Oct/2026:20:23:22 +0000] "GET /manifest.json HTTP/2.0" 403 34417 "https://ccoo.cat/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "136.67.118.241" edge="162.158.41.18"
136.67.118.241 - - [14/Oct/2026:20:23:22 +0000] "GET /dist/manifest.json HTTP/2.0" 403 34406 "https://ccoo.cat/dist/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "136.67.118.241" edge="162.158.41.18"
136.67.118.241 - - [14/Oct/2026:20:23:22 +0000] "GET /asset-manifest.json HTTP/2.0" 403 34431 "https://ccoo.cat/asset-manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko
...
show less
Web App Attack
🇫🇮
Christopher Hughes
2026-10-14 18:59:04
UTC ·
(3 weeks ago)
136.67.118.241 - - [14/Oct/2026:19:59:03 +0100] "GET /@fs/proc/self/cwd/.env?raw?? HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
Web App Attack
🇳🇱
Savvii
2026-10-14 18:55:22
UTC ·
(3 weeks ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-14 18:27:17
UTC ·
(3 weeks ago)
20 attempts against mh-misbehave-ban on solar
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Christopher Hughes
2026-10-14 18:17:11
UTC ·
(3 weeks ago)
136.67.118.241 - - [14/Oct/2026:19:17:10 +0100] "POST /login HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
Web App Attack
🇫🇷
francoisunix
2026-10-14 18:15:50
UTC ·
(3 weeks ago)
136.67.118.241 - - [14/Oct/2026:18:15:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
136.67.118.241 - - [14/Oct/2026:18:15:48 +0000] "GET /robots. ...
show more
136.67.118.241 - - [14/Oct/2026:18:15:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
136.67.118.241 - - [14/Oct/2026:18:15:48 +0000] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
136.67.118.241 - - [14/Oct/2026:18:15:48 +0000] "GET /z9x8c7v6b5-debug-trigger-test.eco-conscient.com HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
136.67.118.241 - - [14/Oct/2026:18:15:48 +0000] "GET /w1g70fkvju6u2j1d8of4 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
136.67.118.241 - - [14/Oct/2026:18:15:48 +0000] "GET /x4jnaoytjamv2a9s2oxv HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compa
...
show less
Web App Attack
🇫🇷
IRISIO
2026-10-14 18:05:01
UTC ·
(3 weeks ago)
scans/SQL injection/spam posts : 4399 queries
Web App Attack
SQL Injection
🇩🇪
paissangroup
2026-10-14 17:45:42
UTC ·
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Savvii
2026-10-14 17:39:35
UTC ·
(3 weeks ago)
20 attempts against mh-misbehave-ban on sonic
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Christopher Hughes
2026-10-14 17:31:34
UTC ·
(3 weeks ago)
136.67.118.241 - - [14/Oct/2026:18:31:33 +0100] "POST /login HTTP/2.0" 401 410 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +ht ...
show more
136.67.118.241 - - [14/Oct/2026:18:31:33 +0100] "POST /login HTTP/2.0" 401 410 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇫🇮
Christopher Hughes
2026-10-14 16:50:30
UTC ·
(3 weeks ago)
136.67.118.241 - - [14/Oct/2026:17:50:30 +0100] "GET /img../.env HTTP/2.0" 401 410 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; ...
show more
136.67.118.241 - - [14/Oct/2026:17:50:30 +0100] "GET /img../.env HTTP/2.0" 401 410 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇹🇭
thaizone.com
2026-10-14 16:37:54
UTC ·
(3 weeks ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
Anonymous
2026-10-14 16:35:02
UTC ·
(3 weeks ago)
Bot / scanning and/or hacking attempts: POST /exec-py HTTP/2.0, POST /api/v1/node-load-method/customMCP HTTP/2.0, POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend, POST /flowise/api/v1/node-load-method/customMCP HTTP/2.0, POST /index.p ...
show more
Bot / scanning and/or hacking attempts: POST /exec-py HTTP/2.0, POST /api/v1/node-load-method/customMCP HTTP/2.0, POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend, POST /flowise/api/v1/node-load-method/customMCP HTTP/2.0, POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%, POST /webhook-test/ HTTP/2.0, POST /form/ HTTP/2.0, POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e, POST /webhook/ HTTP/2.0, POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_fil
show less
Hacking
Web App Attack
🇧🇷
Halux
2026-10-14 16:06:57
UTC ·
(3 weeks ago)
136.67.118.241 Probing protected path or service
Web App Attack