|
๐บ๐ธ
ArturShelby
|
|
Critical file access: /.well-known/openid-configuration
|
Web App Attack
|
|
|
๐บ๐ธ
kbeezie
|
|
2026/05/17 03:02:18 [error] 3567417#3567417: *8458 access forbidden by rule, client: 159.65.12.217, ...
show more
2026/05/17 03:02:18 [error] 3567417#3567417: *8458 access forbidden by rule, client: 159.65.12.217, server: kbeezie.com, request: "GET /.well-known/apple-app-site-association HTTP/1.1", host: "kbeezie.com"
2026/05/17 03:03:29 [error] 3567417#3567417: *8479 access forbidden by rule, client: 159.65.12.217, server: kbeezie.com, request: "GET /.well-known/security.txt HTTP/1.1", host: "kbeezie.com"
show less
|
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Banned by Fail2Ban on server
|
Web App Attack
|
|
|
๐ฉ๐ช
LRob.fr
|
|
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
|
Bad Web Bot
|
|
|
๐ง๐ท
Peregrine
|
|
Fail2Ban Jail: tomcat-404 | Evidence: 159.65.12.217 172.68.164.119 - - [16/May/2026:02:38:37 -0300] ...
show more
Fail2Ban Jail: tomcat-404 | Evidence: 159.65.12.217 172.68.164.119 - - [16/May/2026:02:38:37 -0300] "GET /ads.txt HTTP/1.1" 404 414
159.65.12.217 172.69.176.79 - - [16/May/2026:02:38:52 -0300] "GET /app-ads.txt HTTP/1.1" 404 414
159.65.12.217 172.71.124.224 - - [16/May/2026:02:39:03 -0300] "GET /.well-known/apple-app-site-association HTTP/1.1" 404 414
159.65.12.217 172.71.152.28 - - [16/May/2026:02:39:08 -0300] "GET /apple-app-site-association HTTP/1.1" 404 414
159.65.12.217 172.71.152.28 - - [16/May/2026:02:39:22 -0300] "GET /.well-known/assetlinks.json HTTP/1.1" 404 414
159.65.12.217 172.70.188.99 - - [16/May/2026:02:39:32 -0300] "GET /.well-known/gpc.json HTTP/1.1" 404 414
159.65.12.217 104.22.66.130 - - [16/May/2026:02:39:42 -0300] "GET /.well-known/nodeinfo HTTP/1.1" 404 414
159.65.12.217 104.22.66.130 - - [16/May/2026:02:39:52 -0300] "GET /.well-known/openid-configuration HTTP/1.1" 404 414
show less
|
Bad Web Bot
Web App Attack
|
|
|
๐น๐ญ
thaizone.com
|
|
Brute Force Attack on a Web Resources (repeated 404) #1
|
DDoS Attack
Web Spam
Brute-Force
Web App Attack
|
|
|
๐บ๐ธ
Lee Daniel
|
|
159.65.12.217 - - [15/May/2026:07:15:33 -0400] "GET /app-ads.txt HTTP/1.0" 404 3864 "-" "Mozilla/5.0 ...
show more
159.65.12.217 - - [15/May/2026:07:15:33 -0400] "GET /app-ads.txt HTTP/1.0" 404 3864 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:07:15:38 -0400] "GET /.well-known/apple-app-site-association HTTP/1.0" 404 25810 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:07:15:43 -0400] "GET /apple-app-site-association HTTP/1.0" 404 25591 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:07:15:49 -0400] "GET /.well-known/apple-app-site-association HTTP/1.0" 404 25614 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:07:15:54 -0400] "GET /apple-app-site-association HTTP/1.0" 404 25591 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
...
show less
|
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐น๐ท
cagatayakinci.com
|
|
159.65.12.217 - - [15/May/2026:09:33:09 +0300] "GET /app-ads.txt HTTP/1.1" 404 11587 "-" "Mozilla/5. ...
show more
159.65.12.217 - - [15/May/2026:09:33:09 +0300] "GET /app-ads.txt HTTP/1.1" 404 11587 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:09:33:19 +0300] "GET /.well-known/apple-app-site-association HTTP/1.1" 404 11587 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:09:33:24 +0300] "GET /apple-app-site-association HTTP/1.1" 404 11587 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:09:33:29 +0300] "GET /.well-known/assetlinks.json HTTP/1.1" 404 11587 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:09:33:34 +0300] "GET /.well-known/gpc.json HTTP/1.1" 404 11587 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:09:33:39 +0300] "GET /.well-known/nodeinfo HTTP/1.1"
...
show less
|
Web App Attack
Port Scan
|
|
|
๐ฆ๐บ
aranguren.org
|
|
159.65.12.217 - - [15/May/2026:01:29:03 +1000] "GET /.well-known/apple-app-site-association HTTP/1.1 ...
show more
159.65.12.217 - - [15/May/2026:01:29:03 +1000] "GET /.well-known/apple-app-site-association HTTP/1.1" 302 - "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:01:29:08 +1000] "GET /apple-app-site-association HTTP/1.1" 302 - "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [15/May/2026:01:29:13 +1000] "GET /.well-known/apple-app-site-association HTTP/1.1" 302 - "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
...
show less
|
Web App Attack
|
|
|
๐ฎ๐ณ
evicky2002
|
|
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking
Brute-Force
SSH
|
|
|
๐ฉ๐ช
Viveronese
|
|
HTTP vulnerability scanning
|
Web App Attack
|
|
|
๐ฌ๐ง
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
|
๐ซ๐ท
bazter.pro
|
|
Fail2Ban: plesk-bot-aggressive - 15 failures
|
Port Scan
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
Lee Daniel
|
|
159.65.12.217 - - [12/May/2026:23:50:41 -0400] "GET /apple-app-site-association HTTP/1.0" 404 18496 ...
show more
159.65.12.217 - - [12/May/2026:23:50:41 -0400] "GET /apple-app-site-association HTTP/1.0" 404 18496 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [12/May/2026:23:50:46 -0400] "GET /.well-known/apple-app-site-association HTTP/1.0" 404 18532 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [12/May/2026:23:50:51 -0400] "GET /apple-app-site-association HTTP/1.0" 404 18496 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [12/May/2026:23:50:56 -0400] "GET /.well-known/assetlinks.json HTTP/1.0" 404 18499 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [12/May/2026:23:51:01 -0400] "GET /.well-known/assetlinks.json HTTP/1.0" 404 18499 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
...
show less
|
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
๐บ๐ธ
Lee Daniel
|
|
159.65.12.217 - - [11/May/2026:16:54:26 -0400] "GET /apple-app-site-association HTTP/1.0" 404 36014 ...
show more
159.65.12.217 - - [11/May/2026:16:54:26 -0400] "GET /apple-app-site-association HTTP/1.0" 404 36014 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [11/May/2026:16:54:31 -0400] "GET /.well-known/apple-app-site-association HTTP/1.0" 404 36036 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [11/May/2026:16:54:36 -0400] "GET /apple-app-site-association HTTP/1.0" 404 36012 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [11/May/2026:16:54:41 -0400] "GET /.well-known/assetlinks.json HTTP/1.0" 404 36016 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
159.65.12.217 - - [11/May/2026:16:54:46 -0400] "GET /.well-known/assetlinks.json HTTP/1.0" 404 36014 "-" "Mozilla/5.0 (compatible; WellKnownBot/0.1; +https://well-known.dev/about/#bot)"
...
show less
|
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
|
|