🇩🇪
FD-IX
2026-09-14 14:14:58
(52 minutes ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇩🇪
Fahreddin Ergin
2026-09-14 12:46:11
(2 hours ago)
Detected by CrowdSec / Wazuh on Echoserver Hetzner cluster (automated brute-force ban)
Brute-Force
SSH
Port Scan
🇳🇱
Site.eu
2026-09-14 11:10:17
(3 hours ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
Manuel Braeuer
2026-09-14 10:44:09
(4 hours ago)
136.67.157.137 - - [14/Sep/2026:12:44:08 +0200] "GET /.aws/config HTTP/1.1" 403 5531 "-" "DuckAssist ...
show more
136.67.157.137 - - [14/Sep/2026:12:44:08 +0200] "GET /.aws/config HTTP/1.1" 403 5531 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
136.67.157.137 - - [14/Sep/2026:12:44:08 +0200] "GET /.git/config HTTP/1.1" 403 5531 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
136.67.157.137 - - [14/Sep/2026:12:44:08 +0200] "GET /.aws/credentials HTTP/1.1" 403 5531 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
136.67.157.137 - - [14/Sep/2026:12:44:08 +0200] "GET /.git/HEAD HTTP/1.1" 403 5531 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
136.67.157.137 - - [14/Sep/2026:12:44:08 +0200] "GET /.env.local HTTP/1.1" 403 5531 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
Anonymous
2026-09-14 10:28:28
(4 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
Ano_Nym
2026-09-14 08:51:31
(6 hours ago)
CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/http-probing
Web App Attack
🇮🇳
evicky2002
2026-09-14 06:00:01
(9 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇫🇷
sthoyer.de
2026-09-14 04:51:24
(10 hours ago)
136.67.157.137 - - [14/Sep/2026:06:51:22 +0200] "GET /proc/self/cmdline HTTP/2" 302 495 "-" "Mozilla ...
show more
136.67.157.137 - - [14/Sep/2026:06:51:22 +0200] "GET /proc/self/cmdline HTTP/2" 302 495 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
136.67.157.137 - - [14/Sep/2026:06:51:22 +0200] "GET /auth HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
136.67.157.137 - - [14/Sep/2026:06:51:22 +0200] "GET /secure HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
...
show less
Web App Attack
🇩🇪
SiyCah
2026-09-14 03:00:02
(12 hours ago)
IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
🇩🇪
Alfafoxtrot
2026-09-13 22:07:40
(16 hours ago)
Reason: suspicious | src-ip: 136.67.157.137 | dport=80 | Protoc.=TCP | Inc. 2d: 1
Hacking
🇫🇷
sthoyer.de
2026-09-13 19:37:03
(19 hours ago)
136.67.157.137 - - [13/Sep/2026:21:37:02 +0200] "GET /auth/login HTTP/2" 302 495 "-" "Mozilla/5.0 (M ...
show more
136.67.157.137 - - [13/Sep/2026:21:37:02 +0200] "GET /auth/login HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
136.67.157.137 - - [13/Sep/2026:21:37:02 +0200] "GET /signin HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
136.67.157.137 - - [13/Sep/2026:21:37:02 +0200] "GET /.env.example HTTP/2" 302 495 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
...
show less
Web App Attack
🇩🇪
AbuseBaer
2026-09-13 18:19:52
(20 hours ago)
access attempt detected by IDS script (B)
Web App Attack
Anonymous
2026-09-13 18:11:34
(20 hours ago)
Bad Web Bot
🇩🇪
itsolon
2026-09-13 18:05:01
(21 hours ago)
[13/Sep/2026:20:05:00 +0200] 17893227007.782618 136.67.157.137 0 217.154.7.177 443
[13/Sep/2026:20:0 ...
show more
[13/Sep/2026:20:05:00 +0200] 17893227007.782618 136.67.157.137 0 217.154.7.177 443
[13/Sep/2026:20:05:00 +0200] 178932270060.874517 136.67.157.137 0 217.154.7.177 443
[13/Sep/2026:20:04:59 +0200] 178932269998.303620 136.67.157.137 0 217.154.7.177 443
[13/Sep/2026:20:05:00 +0200] 178932270032.883935 136.67.157.137 0 217.154.7.177 443
[13/Sep/2026:20:05:00 +0200] 178932270016.672984 136.67.157.137 0 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
🇩🇪
Marc
2026-09-13 17:49:27
(21 hours ago)
136.67.157.137 - - [13/Sep/2026:19:49:27 +0200] "GET /var/run/secrets/kubernetes.io/serviceaccount/t ...
show more
136.67.157.137 - - [13/Sep/2026:19:49:27 +0200] "GET /var/run/secrets/kubernetes.io/serviceaccount/token HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)" 136.67.157.137 - - [13/Sep/2026:19:49:27 +0200] "GET /login HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 136.67.157.137 - - [13/Sep/2026:19:49:27 +0200] "GET /.dockerenv HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
show less
Brute-Force