๐ฉ๐ช
crypto i trust, hold i must
2026-09-26 08:12:59
(7 hours ago)
Web scanner path: /config.json
Web App Attack
Anonymous
2026-09-26 04:17:28
(11 hours ago)
[abuseipdb-autoban] 2026-09-26 04:17:28, Client: 136.67.185.71, Protocol: 6 (TCP), Service: HTTP, Ac ...
show more
[abuseipdb-autoban] 2026-09-26 04:17:28, Client: 136.67.185.71, Protocol: 6 (TCP), Service: HTTP, Activity: auto-banned after exceeding AbuseIPDB score threshold on visit to /, likely unclassified automated client, AbuseIPDB score at ban time: 79% (18 prior reports)
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-09-26 02:01:00
(13 hours ago)
2026-09-26 03:59:57 AH10244: invalid URI path (/%2e%2e/.env) && 2026-09-26 03:59:57 AH10244: invalid ...
show more
2026-09-26 03:59:57 AH10244: invalid URI path (/%2e%2e/.env) && 2026-09-26 03:59:57 AH10244: invalid URI path (/%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ) && 2026-09-26 03:59:57 AH10244: invalid URI path (/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env) && 214 more within 20 minutes
show less
Web App Attack
๐ซ๐ท
Tilellit.PRO
2026-09-26 01:24:53
(14 hours ago)
Web application probing for unlinked paths and hidden files
Web App Attack
Hacking
๐ฌ๐ง
andypiper
2026-09-26 01:00:14
(14 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐บ๐ธ
pixiekat
2026-09-26 00:16:57
(15 hours ago)
[Sat Sep 26 00:16:44.678752 2026] [security2:error] [pid 79022:tid 79032] [client 136.67.185.71:4146 ...
show more
[Sat Sep 26 00:16:44.678752 2026] [security2:error] [pid 79022:tid 79032] [client 136.67.185.71:41468] [client 136.67.185.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/etc/apache2/crs-custom.conf"] [line "14"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "warnerslack.org"] [uri "/"] [unique_id "arcO7CFFdd0OBBxxdp_1uQAAAIc"]
[Sat Sep 26 00:16:45.151725 2026] [security2:error] [pid 79023:tid 79067] [client 136.67.185.71:41576] [client 136.67.185.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match ".+" at REQUEST_HEADERS:Next-Action. [file "/etc/apache2/crs-custom.conf"] [line "14"] [id "9000100"] [msg "Next.js Server Action probe blocked (no Next.js apps on this server)"] [tag "custom/next-action-recon"] [hostname "warnerslack.org"] [uri "/login"] [unique_id "arcO7TkPhrIAQkFktVrHQgAAAA8"]
[Sat Sep 26 00:16:57.4202
...
show less
Web App Attack
๐ซ๐ท
โจ
2026-09-26 00:09:10
(15 hours ago)
Domain : wabmensforum.org
Rule : hack
2026-09-26 00:07:06 ***hidden-privacy*** GET /.env.bak - 443 - ...
show more
Domain : wabmensforum.org
Rule : hack
2026-09-26 00:07:06 ***hidden-privacy*** GET /.env.bak - 443 - 136.67.185.71 HTTP/2 CCBot/2.0 (https://commoncrawl.org/faq/) - wabmensforum.org 301 0 0 441 363 134 - -
show less
Hacking
SQL Injection
Brute-Force
๐ณ๐ฑ
debestelapp
2026-09-25 23:55:09
(15 hours ago)
Web App Attack
๐ฉ๐ช
on-com
2026-09-25 23:31:54
(16 hours ago)
URL scan
Brute-Force
Web App Attack
๐ฉ๐ช
crypto i trust, hold i must
2026-09-25 21:53:30
(17 hours ago)
Web scanner path: /config/env/aws_credentials.env
Web App Attack
๐บ๐ธ
JonathanYoung2161
2026-09-25 21:42:14
(17 hours ago)
trekgalactic.org 136.67.185.71 - - [25/Sep/2026:16:42:10 -0500] "GET /config/env/aws_credentials.env ...
show more
trekgalactic.org 136.67.185.71 - - [25/Sep/2026:16:42:10 -0500] "GET /config/env/aws_credentials.env HTTP/2.0" 404 3360 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
trekgalactic.org 136.67.185.71 - - [25/Sep/2026:16:42:12 -0500] "GET /.env.example HTTP/2.0" 403 3330 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
trekgalactic.org 136.67.185.71 - - [25/Sep/2026:16:42:12 -0500] "GET /.env.production HTTP/2.0" 403 3330 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-09-25 21:05:41
(18 hours ago)
[Fri Sep 25 17:00:52.222090 2026] [authz_core:error] [pid 14115] [client 136.67.185.71:11858] AH0163 ...
show more
[Fri Sep 25 17:00:52.222090 2026] [authz_core:error] [pid 14115] [client 136.67.185.71:11858] AH01630: client denied by server configuration: /home/ticklab/public_html/public/.htpasswd
[Fri Sep 25 17:04:10.686065 2026] [authz_core:error] [pid 16501] [client 136.67.185.71:12527] AH01630: client denied by server configuration: /home/timeconverter/public_html/.htpasswd
[Fri Sep 25 17:04:17.151634 2026] [access_compat:error] [pid 16483] [client 136.67.185.71:9226] AH01797: client denied by server configuration: /home/timeconverter/public_html/server-status
[Fri Sep 25 17:05:23.004072 2026] [authz_core:error] [pid 17331] [client 136.67.185.71:11841] AH01630: client denied by server configuration: /home/timeconverter/public_html/.htpasswd
[Fri Sep 25 17:05:26.908963 2026] [access_compat:error] [pid 17331] [client 136.67.185.71:11841] AH01797: client denied by server configuration: /home/timeconverter/public_html/server-status
...
show less
Brute-Force
๐ฌ๐ง
consul.to
2026-09-25 20:23:52
(19 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฎ๐น
mgarofano80
2026-09-25 19:51:37
(19 hours ago)
Brute-Force
Web App Attack
Anonymous
2026-09-25 19:23:34
(20 hours ago)
Fail2Ban apache-noscript
Bad Web Bot