π«π·
COMAITE
2026-10-19 20:44:40
(2 days ago)
Suspicious URL access.
Web App Attack
πΊπΈ
EmilGH
2026-10-19 14:44:43
(2 days ago)
206.168.57.139 - - [19/Oct/2026:14:44:27 +0000] "GET /wp-json/guppy/v2/load-guppy-users?userId=1&off ...
show more
206.168.57.139 - - [19/Oct/2026:14:44:27 +0000] "GET /wp-json/guppy/v2/load-guppy-users?userId=1&offset=0&search HTTP/1.1" 404 7285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586"
206.168.57.139 - - [19/Oct/2026:14:44:27 +0000] "GET /ambassador/v0/diag/ HTTP/1.1" 404 7285 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
206.168.57.139 - - [19/Oct/2026:14:44:28 +0000] "GET /api/v1.0/web/retained-data HTTP/1.1" 404 7283 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
206.168.57.139 - - [19/Oct/2026:14:44:28 +0000] "GET /v1/agent/self HTTP/1.1" 404 7284 "-" "Mozilla/5.0 (Macintosh; PPC Mac OS X 10_8_9 rv:6.0; ms-MY) AppleWebKit/532.11.2 (KHTML, like Gecko) Version/5.0 Safari/532.11.2"
206.168.57.139 - - [19/Oct/2026:14:44:29 +0000] "GET /api/setup-complete HTTP/1.1" 404 7284 "-" "Mozilla/5.0 (X
...
show less
Bad Web Bot
Web App Attack
π³π±
Savvii
2026-10-19 13:42:19
(2 days ago)
20 attempts against mh-misbehave-ban on grape
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
netclix.gr
2026-10-19 13:00:19
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 206.168.57.139 (US/United States/-): ( ...
show more
(mod_security) mod_security triggered on hostname [redacted] 206.168.57.139 (US/United States/-): (CF_ENABLE)
show less
SQL Injection
π³π±
Savvii
2026-10-19 09:03:45
(2 days ago)
23 attempts against mh-misbehave-ban on grape
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
netclix.gr
2026-10-19 08:30:24
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 206.168.57.139 (US/United States/-)
SQL Injection
π«π·
dynamix
2026-10-19 08:18:04
(2 days ago)
Multiple WAF Violations
Web App Attack
π«π·
Zundapper
2026-10-19 08:11:57
(2 days ago)
206.168.57.139 - admin [19/Oct/2026:10:11:36 +0200] "GET /cgi-bin/cgiServer.exx?download=/etc/passwd ...
show more
206.168.57.139 - admin [19/Oct/2026:10:11:36 +0200] "GET /cgi-bin/cgiServer.exx?download=/etc/passwd HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.1.25 (KHTML, like Gecko) Version/8.0 Safari/600.1.25"
206.168.57.139 - - [19/Oct/2026:10:11:56 +0200] "GET /internal/v2/config/mps_secret/ADM_SESSIONID HTTP/1.1" 404 117 "https://cnc-step.it/admin_ui/mas/ent/html/main.html" "Mozilla/5.0 (Macintosh: Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15"
206.168.57.139 - - [19/Oct/2026:10:11:56 +0200] "GET /internal/v2/config/mps_secret/ADM_SESSIONID HTTP/1.1" 404 117 "https://cnc-step.it/admin_ui/mas/ent/html/main.html" "Mozilla/5.0 (Macintosh: Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15"
...
show less
Web App Attack
Port Scan
π©πͺ
bazter.pro
2026-10-19 00:38:09
(3 days ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
π«π·
Zundapper
2026-10-19 00:16:51
(3 days ago)
206.168.57.139 - root [19/Oct/2026:02:11:54 +0200] "GET /mfpadmin/management-apis/2.0/runtimes HTTP/ ...
show more
206.168.57.139 - root [19/Oct/2026:02:11:54 +0200] "GET /mfpadmin/management-apis/2.0/runtimes HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"
206.168.57.139 - admin [19/Oct/2026:02:11:54 +0200] "GET /mfpadmin/management-apis/2.0/runtimes HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0"
206.168.57.139 - admin [19/Oct/2026:02:11:54 +0200] "GET /mfpadmin/management-apis/2.0/runtimes HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Firefox/91.0"
206.168.57.139 - - [19/Oct/2026:02:16:50 +0200] "GET /user/main HTTP/1.1" 404 178 "https://cnc-step.it/user/login/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.138 Safari/537.36"
...
show less
Web App Attack
Port Scan
π©πͺ
netclix.gr
2026-10-18 23:01:15
(3 days ago)
(security_scan) Sensitive File Scan Blocked 206.168.57.139 (US/United States/-)
Hacking
π«π·
Zundapper
2026-10-18 22:46:31
(3 days ago)
206.168.57.139 - - [19/Oct/2026:00:46:10 +0200] "GET /accounts/login/ HTTP/1.1" 404 117 "-" "Mozilla ...
show more
206.168.57.139 - - [19/Oct/2026:00:46:10 +0200] "GET /accounts/login/ HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Windows; U; Windows NT 5.1; hu-HU) AppleWebKit/528.16 (KHTML, like Gecko) Version/4.0 Safari/528.16"
206.168.57.139 - - [19/Oct/2026:00:46:23 +0200] "GET /camunda/app/welcome/default/ HTTP/1.1" 404 117 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0"
206.168.57.139 - - [19/Oct/2026:00:46:23 +0200] "GET /fuel/login HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/E7FBAF"
206.168.57.139 - - [19/Oct/2026:00:46:24 +0200] "GET /hue/accounts/login?next=/ HTTP/1.1" 404 117 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_1 rv:6.0; vi-VN) AppleWebKit/535.6.1 (KHTML, like Gecko) Version/4.1 Safari/535.6.1"
206.168.57.139 - - [19/Oct/2026:00:46:31 +0200] "GET /login/ HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro
...
show less
Web App Attack
Port Scan
Anonymous
2026-10-18 22:36:41
(3 days ago)
206.168.57.139 arduino.ua [19/Oct/2026:01:36:41 +0300] "GET /api/proxy/tcp HTTP/1.1" 404 146 "-" "Mo ...
show more
206.168.57.139 arduino.ua [19/Oct/2026:01:36:41 +0300] "GET /api/proxy/tcp HTTP/1.1" 404 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.7.20) Gecko/ Firefox/3.6.15" 0.000 401
...
show less
Hacking
SQL Injection
Web App Attack
π³π±
Alt255
2026-10-18 21:31:06
(3 days ago)
[cb-08al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-08al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 206.168.57.139 - - [18/Oct/2026:23:30:59 +0200] "GET /wp-content/plugins/trinity-audio/admin/inc/phpinfo.php HTTP/1.0" 404 251433 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π«π·
COMAITE
2026-10-18 21:25:10
(3 days ago)
Common web attack from 206.168.57.139.
Web App Attack