🇭🇺
NyaljBe
2026-08-13 07:05:00
(4 weeks ago)
136.85.68.19 - - [07/Aug/2026:17:42:30 +0200] "GET /.htpasswd HTTP/1.1" 404 153 "-" "Mozilla/5.0 App ...
show more
136.85.68.19 - - [07/Aug/2026:17:42:30 +0200] "GET /.htpasswd HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - - [07/Aug/2026:17:42:30 +0200] "GET /.boto HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - - [07/Aug/2026:17:42:30 +0200] "GET /.github/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - - [07/Aug/2026:17:42:30 +0200] "GET /.git/config HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - - [07/Aug/2026:17:42:30 +0200] "GET /workspace HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
136.85.68.19 - - [07/Aug/2026:17:42:30 +0200] "GET
show less
Web App Attack
🇳🇱
Site.eu
2026-08-09 13:18:53
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇭🇺
DumaNet
2026-08-08 20:58:00
(1 month ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 07. 23:21:39
Source IP: 136.85 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 07. 23:21:39
Source IP: 136.85.68.19
Portion of the log(s):
136.85.68.19 - [07/Aug/2026:23:21:39 +0200] "GET /server-info HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
136.85.68.19 - [07/Aug/2026:23:21:39 +0200] "GET /api/v2/settings HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
136.85.68.19 - [07/Aug/2026:23:21:39 +0200] "GET /admin/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
136.85.68.19 - [07/Aug/2026:23:21:39 +0200] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
136.85.68.19 - [07/Aug/2026:23:21:38 +0200] "GET /_profiler/open HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
136.85.68.19 - [07/Aug/2026:23:21:38 +0200] "GET /app_dev.php/_profiler HT
show less
Web App Attack
🇭🇺
DumaNet
2026-08-08 19:42:00
(1 month ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 07. 16:48:32
Source IP: 136.85 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 07. 16:48:32
Source IP: 136.85.68.19
Portion of the log(s):
136.85.68.19 - [07/Aug/2026:16:48:27 +0200] "GET /.config/anthropic/credentials/default.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - [07/Aug/2026:16:48:27 +0200] "GET /ngsw.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - [07/Aug/2026:16:48:27 +0200] "GET /service_account.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - [07/Aug/2026:16:48:27 +0200] "GET /.hermes/auth.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - [07/Aug/2026:16:48:27 +0200] "GET /firebase-adminsdk.json HTTP
show less
Web App Attack
🇭🇺
DumaNet
2026-08-08 19:26:00
(1 month ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 07. 16:36:26
Source IP: 136.85 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 07. 16:36:26
Source IP: 136.85.68.19
Portion of the log(s):
136.85.68.19 - [07/Aug/2026:16:36:26 +0200] "GET /api/account HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - [07/Aug/2026:16:36:26 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - [07/Aug/2026:16:36:25 +0200] "GET /api/health HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - [07/Aug/2026:16:36:25 +0200] "GET /api/v2/config HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
136.85.68.19 - [07/Aug/2026:16:36:25 +0200] "GET /api/openapi.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like
show less
Web App Attack
🇺🇸
Matthew Ping
2026-08-08 12:15:01
(1 month ago)
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on wp2.
DDoS Attack
Brute-Force
🇭🇺
bcsaba
2026-08-08 02:39:57
(1 month ago)
No AWS here:
136.85.68.19 - - [08/Aug/2026:04:39:56 +0200] "GET /.aws/credentials HTTP/2.0" 400 230 ...
show more
No AWS here:
136.85.68.19 - - [08/Aug/2026:04:39:56 +0200] "GET /.aws/credentials HTTP/2.0" 400 230 "-" "Mozilla/5.0 (compatible; Applebot-Extended/0.1; +http://www.apple.com/go/applebot)"
show less
Web App Attack
🇭🇺
whitehoodie
2026-08-08 02:34:57
(1 month ago)
AUTOMATED REPORT: Trying to access /swagger.json
Hacking
Bad Web Bot
Web App Attack
🇭🇺
bcsaba
2026-08-08 00:45:01
(1 month ago)
Looking for json file on web server
136.85.68.19 - - [08/Aug/2026:02:44:56 +0200] "GET /dist/.vite/m ...
show more
Looking for json file on web server
136.85.68.19 - - [08/Aug/2026:02:44:56 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
show less
Web App Attack
🇭🇺
bcsaba
2026-08-07 23:21:39
(1 month ago)
No AWS here:
136.85.68.19 - - [08/Aug/2026:01:21:36 +0200] "GET /.aws/credentials HTTP/2.0" 400 230 ...
show more
No AWS here:
136.85.68.19 - - [08/Aug/2026:01:21:36 +0200] "GET /.aws/credentials HTTP/2.0" 400 230 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
show less
Web App Attack
🇭🇺
szasa
2026-08-07 23:15:38
(1 month ago)
2026/08/08 01:15:37 [error] 1363129#1363129: *2719514 access forbidden by rule, client: 136.85.68.19 ...
show more
2026/08/08 01:15:37 [error] 1363129#1363129: *2719514 access forbidden by rule, client: 136.85.68.19, server: datamentor.hu, request: "GET /.git/HEAD HTTP/2.0", host: "www.datamentor.hu"
2026/08/08 01:15:37 [error] 1363129#1363129: *2719514 access forbidden by rule, client: 136.85.68.19, server: datamentor.hu, request: "GET /.git/config HTTP/2.0", host: "www.datamentor.hu"
2026/08/08 01:15:37 [error] 1363129#1363129: *2719514 access forbidden by rule, client: 136.85.68.19, server: datamentor.hu, request: "GET /.git/config HTTP/2.0", host: "www.datamentor.hu"
...
show less
Web App Attack
🇭🇺
szasa
2026-08-07 22:27:00
(1 month ago)
2026/08/08 00:27:00 [error] 1363129#1363129: *2718478 access forbidden by rule, client: 136.85.68.19 ...
show more
2026/08/08 00:27:00 [error] 1363129#1363129: *2718478 access forbidden by rule, client: 136.85.68.19, server: datamentor.hu, request: "GET /.git/config HTTP/2.0", host: "datamentor.hu"
2026/08/08 00:27:00 [error] 1363129#1363129: *2718478 access forbidden by rule, client: 136.85.68.19, server: datamentor.hu, request: "GET /.github/.env HTTP/2.0", host: "datamentor.hu"
2026/08/08 00:27:00 [error] 1363129#1363129: *2718478 access forbidden by rule, client: 136.85.68.19, server: datamentor.hu, request: "GET /.github/.env HTTP/2.0", host: "datamentor.hu"
...
show less
Web App Attack
🇭🇺
bcsaba
2026-08-07 21:57:53
(1 month ago)
No terraform here.
[full_log
Web App Attack
🇩🇪
updown.io
2026-08-07 21:56:28
(1 month ago)
{"level":"info","ts":1786139783.9959395,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1786139783.9959395,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.85.68.19","remote_port":"52160","client_ip":"136.85.68.19","proto":"HTTP/2.0","method":"GET","host":"status.shinzan.hu","uri":"/z9x8c7v6b5-debug-trigger-status.shinzan.hu","headers":{"User-Agent":["Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"],"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.shinzan.hu","ech":false}},"bytes_read":0,"user_id":"","duration":0.000123897,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1786139783.9981143,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"136.85.68.19","remote_port":"52160","client_ip":"136.85.68.19","proto":"HTTP/2.0","method":"GET","host":"status.shinzan.hu","uri":"/webpack-stats.json","he
...
show less
DDoS Attack
Web App Attack
🇭🇺
whitehoodie
2026-08-07 21:34:22
(1 month ago)
AUTOMATED REPORT: Attempting to access .env file
Hacking
Bad Web Bot
Web App Attack