Anonymous
2026-10-21 20:58:35
(43 minutes ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 136.71.164.143 (US/United States/143.164.71. ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 136.71.164.143 (US/United States/143.164.71.136.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.71.164.143 - - [21/Oct/2026:22:58:31 +0200] "GET /public../.env HTTP/2.0" 406 317 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
136.71.164.143 - - [21/Oct/2026:22:58:31 +0200] "GET /.//.env HTTP/2.0" 406 317 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
136.71.164.143 - - [21/Oct/2026:22:58:31 +0200] "GET //.env HTTP/2.0" 406 317 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
show less
Port Scan
Anonymous
2026-10-21 18:00:18
(3 hours ago)
Detected by CrowdSec: crowdsecurity/http-sensitive-files
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-21 17:52:34
(3 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-21 17:36:43
(4 hours ago)
136.71.164.143 - - [21/Oct/2026:17:36:37 +0000] "GET /robots.txt HTTP/2.0" 403 123 "https://robotstx ...
show more
136.71.164.143 - - [21/Oct/2026:17:36:37 +0000] "GET /robots.txt HTTP/2.0" 403 123 "https://robotstxt.software/robots.txt" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "-" edge="136.71.164.143"
136.71.164.143 - - [21/Oct/2026:17:36:38 +0000] "GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/2.0" 403 14745 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="136.71.164.143"
136.71.164.143 - - [21/Oct/2026:17:36:38 +0000] "GET /wp-content/plugins/stop-user-enumeration/frontend/js/frontend.js?ver=1.7.9 HTTP/2.0" 403 14745 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="136.71.164.143"
136.71.164.143 - - [21/Oct/2026:17:36:38 +0000] "GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb HTTP/2.0" 403 14745 "
...
show less
Web App Attack
๐ฉ๐ช
pscriptos
2026-10-21 17:18:48
(4 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
๐จ๐ฆ
Mediashaker
2026-10-21 17:07:39
(4 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.71.164.143 (US/U ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 136.71.164.143 (US/United States/143.164.71.136.bc.googleusercontent.com)
show less
Bad Web Bot
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-21 17:02:00
(4 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ณ๐ฑ
Alt255
2026-10-21 16:55:10
(4 hours ago)
[cb-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 136.71.164.143 - - [21/Oct/2026:18:54:56 +0200] "POST /lib/terminal-xhr.php HTTP/2.0" 404 1338 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
136.71.164.143 - - [21/Oct/2026:18:54:56 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
136.71.164.143 - - [21/Oct/2026:18:54:56 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
136.71.164.143 - - [21/Oct/2026:18:54:56 +0200] "POST /icecoder/lib/terminal-xhr.php HTTP/2.0" 404 1338 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compati
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-21 16:52:58
(4 hours ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
๐ฉ๐ช
rh24
2026-10-21 16:46:08
(4 hours ago)
(badbots) Bad bot user-agent [redacted] from 136.71.164.143 (US/United States/143.164.71.136.bc.goog ...
show more
(badbots) Bad bot user-agent [redacted] from 136.71.164.143 (US/United States/143.164.71.136.bc.googleusercontent.com)
show less
Hacking
๐ซ๐ท
LRNP
2026-10-21 16:45:19
(4 hours ago)
_:443 136.71.164.143 - - [21/Oct/2026:16:45:18 +0000] "GET /robots.txt HTTP/1.1" 404 118 "-" "Mozill ...
show more
_:443 136.71.164.143 - - [21/Oct/2026:16:45:18 +0000] "GET /robots.txt HTTP/1.1" 404 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
_:443 136.71.164.143 - - [21/Oct/2026:16:45:18 +0000] "GET /z5qr2nlbvgqsonf5c7u3 HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
_:443 136.71.164.143 - - [21/Oct/2026:16:45:18 +0000] "GET /billing HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
_:443 136.71.164.143 - - [21/Oct/2026:16:45:19 +0000] "GET /user/login HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
_:443 136.71.164.143 - - [21/Oct/2026:16:45:19 +0000] "GET /settings HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x6
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-21 16:40:38
(5 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-21 16:40:08
(5 hours ago)
[ti-27al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-27al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.71.164.143 - - [21/Oct/2026:18:39:47 +0200] "GET /.htpasswd HTTP/1.1" 403 2068 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
136.71.164.143 - - [21/Oct/2026:18:39:47 +0200] "GET /.env.supabase HTTP/1.1" 404 2065 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-21 16:34:36
(5 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-10-21 16:32:52
(5 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/143.164.71.136.bc.googleuserconte ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/143.164.71.136.bc.googleusercontent.com
show less
Web App Attack