🇫🇷
GEDAL
2026-09-18 03:44:37
(13 minutes ago)
Fail2ban webexploits @ <hostname> : 136.67.149.111 - - [18/Sep/2026:05:44:35 +0200] "GET /.git/confi ...
show more
Fail2ban webexploits @ <hostname> : 136.67.149.111 - - [18/Sep/2026:05:44:35 +0200] "GET /.git/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
show less
Brute-Force
SSH
🇺🇸
zcampbell
2026-09-18 03:08:17
(50 minutes ago)
Web vulnerability scanning: probing for exposed sensitive files (id_rsa). Detected and blocked autom ...
show more
Web vulnerability scanning: probing for exposed sensitive files (id_rsa). Detected and blocked automatically.
show less
Web App Attack
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-09-18 02:12:47
(1 hour ago)
[18/Sep/2026:05:12:47 +0300] -- 136.67.149.111 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[18/Sep/2026:05:12:47 +0300] -- 136.67.149.111 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /config/.env HTTP/1.1
show less
Bad Web Bot
Web App Attack
2026-09-18 00:49:30
(3 hours ago)
Aggressive web scan
Web App Attack
🇬🇧
Marten Mark
2026-09-18 00:37:43
(3 hours ago)
136.67.149.111 - - [18/Sep/2026:00:37:39 +0000] "GET /.boto HTTP/2.0" 404 1448 "-" "Mozilla/5.0 (Mac ...
show more
136.67.149.111 - - [18/Sep/2026:00:37:39 +0000] "GET /.boto HTTP/2.0" 404 1448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
136.67.149.111 - - [18/Sep/2026:00:37:39 +0000] "GET /.ssh/config HTTP/2.0" 404 1454 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
136.67.149.111 - - [18/Sep/2026:00:37:39 +0000] "GET /.ssh/config HTTP/2.0" 404 1454 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
136.67.149.111 - - [18/Sep/2026:00:37:40 +0000] "GET /.zshrc HTTP/2.0" 404 1451 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.67.149.111 - - [18/Sep/2026:00:37:40 +0000] "GET /.zshrc HTTP/2.0" 404 1451 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.67.149.111 - - [18/Sep/2026:00:37:40 +0000] "GET /.bash_profile HTTP/2.0" 404 1453 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.67.149.111 - -
...
show less
Port Scan
Web App Attack
🇨🇦
Anytech
2026-09-17 20:33:02
(7 hours ago)
Blocked by ConnMonitor
Web App Attack
🇺🇸
entangled_mongoose
2026-09-17 20:20:52
(7 hours ago)
Probed /wp-config.php.old.
Web App Attack
🇬🇧
Marten Mark
2026-09-17 20:03:03
(7 hours ago)
136.67.149.111 - - [17/Sep/2026:20:03:02 +0000] "GET /env.js HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (co ...
show more
136.67.149.111 - - [17/Sep/2026:20:03:02 +0000] "GET /env.js HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.67.149.111 - - [17/Sep/2026:20:03:02 +0000] "GET /api/config HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
136.67.149.111 - - [17/Sep/2026:20:03:02 +0000] "GET /api/config HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
136.67.149.111 - - [17/Sep/2026:20:03:02 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36"
136.67.149.111 - - [17/Sep/2026:20:03:02 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36"
136.67.149.111 - - [17/Sep/2026:20:03:02 +0000] "GET /.vite/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10;
...
show less
Port Scan
Web App Attack
🇺🇸
gamabe
2026-09-17 13:38:30
(14 hours ago)
Detected crowdsecurity/http-dos-swithcing-ua attack pattern. Reported by CrowdSec IDS.
Hacking
2026-09-17 09:15:08
(18 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇸🇬
Cloudkul Cloudkul
2026-09-17 08:56:29
(19 hours ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show more
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
Brute-Force
Web App Attack
🇳🇱
debestelapp
2026-09-17 08:55:14
(19 hours ago)
Web App Attack
🇳🇱
Savvii
2026-09-17 08:32:14
(19 hours ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
vanderhost
2026-09-17 08:29:55
(19 hours ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.lo ...
show more
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.log via rule: /storage/logs
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-17 08:06:54
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.67.149.111 (111.149.67.136.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 136.67.149.111 (111.149.67.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:06:49.904010 2026] [security2:error] [pid 5365:tid 5365] [client 136.67.149.111:35366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trasimeno.ws"] [uri "/media../.env"] [unique_id "aqufmRf0hyAWaBtF-TVIcgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack