|
πΊπΈ
EvilTurkey
|
|
Web app attack against financial institution website.
|
Web App Attack
Hacking
|
|
Anonymous
|
|
Automated report (2026-09-22T18:59:18-04:00). Scraper detected. AI scanner notorious for flooding and DDoS attacks detected.
|
Bad Web Bot
DDoS Attack
|
|
π«π·
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
π¦πΊ
aranguren.org
|
|
136.109.241.240 - - [23/Sep/2026:08:04:17 +1000] "GET /z9x8c7v6b5-debug-trigger-www.aranguren.org HTTP/2.0" 404 1206 "https://www.aranguren.org/z9x8c7v6b5-debug-trigger-www.aranguren.org" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.am ...
show more
136.109.241.240 - - [23/Sep/2026:08:04:17 +1000] "GET /z9x8c7v6b5-debug-trigger-www.aranguren.org HTTP/2.0" 404 1206 "https://www.aranguren.org/z9x8c7v6b5-debug-trigger-www.aranguren.org" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
136.109.241.240 - - [23/Sep/2026:08:04:17 +1000] "GET /jwx8qjzrx9mksxw8od4k HTTP/2.0" 404 1162 "https://www.aranguren.org/jwx8qjzrx9mksxw8od4k" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
136.109.241.240 - - [23/Sep/2026:08:04:17 +1000] "GET /assets/manifest.json HTTP/2.0" 404 1162 "https://www.aranguren.org/assets/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
136.109.241.240 - - [23/Sep/2026:08:04:17 +1000] "GET /exwzwlvv5gla82l54j3d HTTP/2.0" 404 1162 "https://www.aranguren.org/exwzwlvv5gla82l54j3d" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
...
show less
|
Bad Web Bot
|
|
πΊπΈ
lavnet.net
|
|
136.109.241.240 - - [22/Sep/2026:21:50:22 +0000] "GET /z9x8c7v6b5-debug-trigger-a0a0.org HTTP/2.0" 404 1901 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
136.109.241.240 - - [22/Sep/2026:21:50:22 +0000] "GET /nkj7f3tg7z2ods31fzjp HTTP/ ...
show more
136.109.241.240 - - [22/Sep/2026:21:50:22 +0000] "GET /z9x8c7v6b5-debug-trigger-a0a0.org HTTP/2.0" 404 1901 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
136.109.241.240 - - [22/Sep/2026:21:50:22 +0000] "GET /nkj7f3tg7z2ods31fzjp HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
136.109.241.240 - - [22/Sep/2026:21:50:22 +0000] "GET /umikkjkswl6yqrumxzbg HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
136.109.241.240 - - [22/Sep/2026:21:50:22 +0000] "POST /graphql HTTP/2.0" 404 1855 "https://a0a0.org" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
136.109.241.240 - - [22/Sep/2026:21:50:22 +0000] "GET /config/env/aws_credentials.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36"
136.109.241.240 - - [22/Sep/2026:21:50:22 +00
...
show less
|
Brute-Force
|
|
π©πͺ
macrob
|
|
2026/09/22 21:13:00 [error] 1636363#1636363: *26241735 access forbidden by rule, client: 136.109.241.240, server: bonusnews.org, request: "GET /config/env/aws_credentials.env HTTP/2.0", host: "bonusnews.org"
2026/09/22 21:13:00 [error] 1636365#163636 ...
show more
2026/09/22 21:13:00 [error] 1636363#1636363: *26241735 access forbidden by rule, client: 136.109.241.240, server: bonusnews.org, request: "GET /config/env/aws_credentials.env HTTP/2.0", host: "bonusnews.org"
2026/09/22 21:13:00 [error] 1636365#1636365: *26241722 access forbidden by rule, client: 136.109.241.240, server: bonusnews.org, request: "GET /admin/ HTTP/2.0", host: "bonusnews.org"
2026/09/22 21:13:00 [error] 1636363#1636363: *26241735 access forbidden by rule, client: 136.109.241.240, server: bonusnews.org, request: "GET /config.env HTTP/2.0", host: "bonusnews.org"
...
show less
|
Web App Attack
|
|
π©πͺ
Dominik Lysiak
|
|
136.109.241.240 - - [22/Sep/2026:23:05:37 +0200] "GET /.ssh/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
136.109.241.240 - - [22/Se ...
show more
136.109.241.240 - - [22/Sep/2026:23:05:37 +0200] "GET /.ssh/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
136.109.241.240 - - [22/Sep/2026:23:05:37 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
136.109.241.240 - - [22/Sep/2026:23:05:37 +0200] "GET /.ssh/id_rsa HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
...
show less
|
Web App Attack
|
|
Anonymous
|
|
suspicious request in access.log
|
Web App Attack
|
|
πΊπΈ
factor1
|
|
CrowdSec at apollo Reports Abuse
|
Web App Attack
|
|
Anonymous
|
|
Aggressive web scan
|
Web App Attack
|
|
πΊπΈ
WizardsToolkit
|
|
tried to access forbidden files; attempted to access /app/.env
|
Web App Attack
|
|
Anonymous
|
|
Banned by Fail2Ban on server
|
Web App Attack
|
|
πΊπΈ
etu brutus
|
|
136.109.241.240 Blocked by [Attack Vector List]
...
|
Hacking
Brute-Force
Exploited Host
|
|
π©πͺ
bazter.pro
|
|
Fail2Ban: apache-ratelimit - 20 failures
|
Port Scan
Bad Web Bot
Web App Attack
|
|
πΊπΈ
jormaster3k
|
|
Attack against Apache (too many 404s)
|
Web App Attack
|