Anonymous
2026-09-21 06:55:17
(21 hours ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=25, Rate=20, Diversity=10, CanaryOverride=90.
show less
Web App Attack
DDoS Attack
Bad Web Bot
๐ซ๐ท
pm33
2026-09-21 04:25:44
(1 day ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-09-21 04:11:48
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
Anonymous
2026-09-20 15:17:55
(1 day ago)
136.85.15.63 - - [20/Sep/2026:17:17:53 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT ...
show more
136.85.15.63 - - [20/Sep/2026:17:17:53 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
136.85.15.63 - - [20/Sep/2026:17:17:53 +0200] "GET /api/config HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
136.85.15.63 - - [20/Sep/2026:17:17:54 +0200] "GET /__/firebase/init.json HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
136.85.15.63 - - [20/Sep/2026:17:17:54 +0200] "GET /z9x8c7v6b5-debug-trigger-afmzambia.org.zm HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
136.85.15.63 - - [20/Sep/2026:17:17:54 +0200] "POST / HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-20 14:22:43
(1 day ago)
136.85.15.63 - - [20/Sep/2026:16:22:43 +0200] "GET /backend/.env HTTP/1.1" 403 463 "-" "Mozilla/5.0 ...
show more
136.85.15.63 - - [20/Sep/2026:16:22:43 +0200] "GET /backend/.env HTTP/1.1" 403 463 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-09-20 14:19:30
(1 day ago)
136.85.15.63 - - [20/Sep/2026:14:19:27 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f ...
show more
136.85.15.63 - - [20/Sep/2026:14:19:27 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="136.85.15.63"
136.85.15.63 - - [20/Sep/2026:14:19:27 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="136.85.15.63"
136.85.15.63 - - [20/Sep/2026:14:19:27 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="136.85.15.63"
136.85.15.63 - - [20/Sep/2026:14:19:28 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="136.85.15.63"
136.85.15.63 - - [20/Sep/2026:14:19:28 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="136.85.15.63"
...
show less
Web Spam
Web App Attack
๐บ๐ธ
zcampbell
2026-09-20 13:24:25
(1 day ago)
Web vulnerability scanning: probing for exposed sensitive files (.aws). Detected and blocked automat ...
show more
Web vulnerability scanning: probing for exposed sensitive files (.aws). Detected and blocked automatically.
show less
Web App Attack
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-09-20 13:24:02
(1 day ago)
20 attempts against mh-misbehave-ban on orcus
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
wolfemium
2026-09-20 12:49:02
(1 day ago)
136.85.15.63 - - [20/Sep/2026:15:48:55 +0300] "GET /app_dev.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 ( ...
show more
136.85.15.63 - - [20/Sep/2026:15:48:55 +0300] "GET /app_dev.php HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
136.85.15.63 - - [20/Sep/2026:15:49:01 +0300] "GET /index.php?s=index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=file_get_contents&vars[1][]=.env HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
136.85.15.63 - - [20/Sep/2026:15:49:01 +0300] "GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/2.0" 404 107 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
136.85.15.63 - - [20/Sep/2026:15:49:01 +0300] "GET /index.php?s=index/\x5Cthink\x5Capp/invokefunction&function=call_user_func_array&vars[0]=file_get_contents&vars[1][]=/proc/self/environ HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
136.85.15.63 - - [20/Sep/2026:15:49:01 +0300] "GET /index.php?s=index/\x5Cthink
...
show less
DDoS Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 12:47:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.85.15.63 (63.15.85.136.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 136.85.15.63 (63.15.85.136.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:47:17.018356 2026] [security2:error] [pid 18271:tid 18271] [client 136.85.15.63:58604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wiro.am"] [uri "/.git/config"] [unique_id "aq_V1VfqCTMetDpim6PjGgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-20 12:28:28
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-20 12:25:02
(1 day ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-09-20 12:20:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-09-20 11:13:49
(1 day ago)
(modsecurity) srv103 ModSecurity 136.85.15.63 (SG/Singapore/63.15.85.136.bc.googleusercontent.com): ...
show more
(modsecurity) srv103 ModSecurity 136.85.15.63 (SG/Singapore/63.15.85.136.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐ฉ๐ช
Marc
2026-09-20 11:08:27
(1 day ago)
136.85.15.63 - - [20/Sep/2026:13:08:27 +0200] "GET /.env HTTP/2.0" 404 314 "-" "Mozilla/5.0 (compati ...
show more
136.85.15.63 - - [20/Sep/2026:13:08:27 +0200] "GET /.env HTTP/2.0" 404 314 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 136.85.15.63 - - [20/Sep/2026:13:08:27 +0200] "GET /z9x8c7v6b5-debug-trigger-risse.cloud HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 136.85.15.63 - - [20/Sep/2026:13:08:27 +0200] "GET /.aws/config HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
show less
Brute-Force