🇫🇷
masterguru
2026-11-15 21:51:27
UTC ·
(21 minutes ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-201)
Bad Web Bot
Anonymous
2026-11-15 20:02:58
UTC ·
(2 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
Anonymous
2026-11-15 19:26:03
UTC ·
(2 hours ago)
136.85.45.9 - - [15/Nov/2026:13:26:00 -0600] "GET /.env.live HTTP/1.1" 301 259 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 104.22.222.63
136.85.45.9 - - [15/Nov/2026:13:26:0 ...
show more
136.85.45.9 - - [15/Nov/2026:13:26:00 -0600] "GET /.env.live HTTP/1.1" 301 259 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 104.22.222.63
136.85.45.9 - - [15/Nov/2026:13:26:00 -0600] "GET /.env.stage HTTP/1.1" 301 260 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 104.22.222.63
136.85.45.9 - - [15/Nov/2026:13:26:01 -0600] "GET /.env_1 HTTP/1.1" 301 256 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 104.22.222.63
136.85.45.9 - - [15/Nov/2026:13:26:01 -0600] "GET /.env_sample HTTP/1.1" 301 261 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 104.22.222.63
136.85.45.9 - - [15/Nov/2026:13:26:01 -0600] "GET /.env_secret HTTP/1.1" 301 261 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://devel
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TAY
2026-11-15 18:55:55
UTC ·
(3 hours ago)
136.85.45.9 - - [16/Nov/2026:02:55:36 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 55969 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
136.85.45.9 - - [16/Nov/2026:02:55:36 +080 ...
show more
136.85.45.9 - - [16/Nov/2026:02:55:36 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 55969 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
136.85.45.9 - - [16/Nov/2026:02:55:36 +0800] "GET /wp-config.php.old HTTP/1.1" 404 55947 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
136.85.45.9 - - [16/Nov/2026:02:55:39 +0800] "GET /wp-config.php~ HTTP/1.1" 404 50161 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
136.85.45.9 - - [16/Nov/2026:02:55:39 +0800] "GET /wp-config.php.swp HTTP/1.1" 404 55947 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.85.45.9 - - [16/Nov/2026:02:55:39 +0800] "GET /userfiles?path=../../../.env HTTP/1.1" 404 55969 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
136.85.45.9 - - [16/Nov/2026:02:55:39 +0800] "GET /userfiles?path=../../.env HTTP/1.1" 404 55947 "-" "Mozilla/5.0 (compa
...
show less
Brute-Force
🇺🇸
IndigoRidge
2026-11-15 16:26:23
UTC ·
(5 hours ago)
136.85.45.9 - - [15/Nov/2026:11:26:23 -0500] "GET /.env HTTP/1.1" 500 5337 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
136.85.45.9 - - [15/Nov/2026:11:26:23 -0500] "GET /api/. ...
show more
136.85.45.9 - - [15/Nov/2026:11:26:23 -0500] "GET /.env HTTP/1.1" 500 5337 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
136.85.45.9 - - [15/Nov/2026:11:26:23 -0500] "GET /api/.env HTTP/1.1" 404 5752 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
136.85.45.9 - - [15/Nov/2026:11:26:23 -0500] "GET /admin/.env HTTP/1.1" 404 5752 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
...
show less
Web App Attack
🇺🇸
IndigoRidge
2026-11-15 14:51:35
UTC ·
(7 hours ago)
[Sun Nov 15 09:51:32.856610 2026] [authz_core:error] [pid 3720914:tid 140018005829376] [client 136.85.45.9:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/files..
[Sun Nov 15 09:51:33.207017 2026] [authz_core:error] [pid 3 ...
show more
[Sun Nov 15 09:51:32.856610 2026] [authz_core:error] [pid 3720914:tid 140018005829376] [client 136.85.45.9:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/files..
[Sun Nov 15 09:51:33.207017 2026] [authz_core:error] [pid 3720700:tid 140017963669248] [client 136.85.45.9:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/laravel..
[Sun Nov 15 09:51:33.669418 2026] [authz_core:error] [pid 3707412:tid 140017980454656] [client 136.85.45.9:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/.env?foo=bar
[Sun Nov 15 09:51:34.967884 2026] [authz_core:error] [pid 3707180:tid 140017863218944] [client 136.85.45.9:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env
[Sun Nov 15 09:51:35.722683 2026] [authz_core:error] [pid 3707180:tid 140017326348032] [client 136.85.45.9:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/.github
...
show less
Web App Attack
🇩🇪
dbmwebdesign
2026-11-15 14:35:14
UTC ·
(7 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
IndigoRidge
2026-11-15 13:34:38
UTC ·
(8 hours ago)
[Sun Nov 15 08:34:37.378239 2026] [authz_core:error] [pid 3707412:tid 140017980454656] [client 136.85.45.9:0] AH01630: client denied by server configuration: /var/www/vhosts/accessrealtysc.com/error_docs/forbidden.html, referer: https://accessrealtys ...
show more
[Sun Nov 15 08:34:37.378239 2026] [authz_core:error] [pid 3707412:tid 140017980454656] [client 136.85.45.9:0] AH01630: client denied by server configuration: /var/www/vhosts/accessrealtysc.com/error_docs/forbidden.html, referer: https://accessrealtysc.com/php-cgi/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
[Sun Nov 15 08:34:38.160701 2026] [authz_core:error] [pid 3707179:tid 140017426994944] [client 136.85.45.9:0] AH01630: client denied by server configuration: /var/www/vhosts/accessrealtysc.com/httpdocs/public, referer: https://accessrealtysc.com/public/admin.json
[Sun Nov 15 08:34:38.160782 2026] [authz_core:error] [pid 3707179:tid 140017426994944] [client 136.85.45.9:0] AH01630: client denied by server configuration: /var/www/vhosts/accessrealtysc.com/error_docs/forbidden.html, referer: https://accessrealtysc.com/public/admin.json
[Sun Nov 15 08:34:38.164577 2026] [authz_core:error] [pid 3707180:tid 140017334740736] [client 136.85.45.9:0] AH01630: cli
...
show less
Web App Attack
🇮🇹
VHosting
2026-11-15 11:25:04
UTC ·
(10 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-11-15 11:11:20
UTC ·
(11 hours ago)
Multiple WAF Violations
Web App Attack