🇩🇪
Savvii
2026-11-10 13:52:31
UTC ·
(52 minutes ago)
20 attempts against mh-misbehave-ban on light
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
EmilGH
2026-11-10 13:40:11
UTC ·
(1 hour ago)
35.195.85.59 - - [10/Nov/2026:13:40:11 +0000] "GET /.aws/config HTTP/1.1" 404 798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:13:40:11 +0000] "GET /.amplifyrc HTTP/1.1" 404 459 "-" "Mozilla/5.0 (Wi ...
show more
35.195.85.59 - - [10/Nov/2026:13:40:11 +0000] "GET /.aws/config HTTP/1.1" 404 798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:13:40:11 +0000] "GET /.amplifyrc HTTP/1.1" 404 459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:13:40:11 +0000] "GET /.boto HTTP/1.1" 404 459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:13:40:11 +0000] "GET /.aws/.env HTTP/1.1" 403 786 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:13:40:11 +0000] "GET /.aws/credentials HTTP/1.1" 404 783 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:13:40:11 +0000] "GET /.claude/settings.local.json HTTP/1.1" 404 783 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:13:40:11 +0000] "GET /.aws/credentials.bak HTTP/1.1" 403 786 "-"
...
show less
Bad Web Bot
Web App Attack
🇧🇬
HighWay
2026-11-10 13:37:42
UTC ·
(1 hour ago)
35.195.85.59 - - [10/Nov/2026:13:37:28 +0000] "GET /actuator/env HTTP/1.1" 404 67400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:13:37:29 +0000] "GET /credentials.json HTTP/1.1" 404 67401 "-" "Mozi ...
show more
35.195.85.59 - - [10/Nov/2026:13:37:28 +0000] "GET /actuator/env HTTP/1.1" 404 67400 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:13:37:29 +0000] "GET /credentials.json HTTP/1.1" 404 67401 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
crypto i trust, hold i must
2026-11-10 13:32:56
UTC ·
(1 hour ago)
Web scanner path: /.docker/.env
Web App Attack
Anonymous
2026-11-10 13:32:40
UTC ·
(1 hour ago)
35.195.85.59 - - [10/Nov/2026:13:32:40 +0000] "GET /.aws/.env HTTP/2.0" 302 359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
Bad Web Bot
Web App Attack
🇩🇪
gadix
2026-11-10 13:32:33
UTC ·
(1 hour ago)
[10/Nov/2026:14:32:29.848019 +0100] avMc7bY1GF7sIgfCIC_ABAAAAE0 35.195.85.59 39470 127.0.0.1 7081
[10/Nov/2026:14:32:29.850388 +0100] avMc7bY1GF7sIgfCIC_ABQAAAE4 35.195.85.59 39466 127.0.0.1 7081
[10/
...
Web App Attack
🇳🇱
Savvii
2026-11-10 13:23:43
UTC ·
(1 hour ago)
20 attempts against mh-misbehave-ban on sonic
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
Saec
2026-11-10 13:03:28
UTC ·
(1 hour ago)
Honeypot caught: /phpinfo.php via trading.saec.me. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36.
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
🇺🇸
gamabe
2026-11-10 12:55:34
UTC ·
(1 hour ago)
Detected crowdsecurity/http-sensitive-files attack pattern. Reported by CrowdSec IDS.
Hacking
🇩🇪
Hans Wurst
2026-11-10 12:55:10
UTC ·
(1 hour ago)
Many 404-Error: Suspicion of URL-Fuzzing/Bot-Scan.
Web App Attack
🇦🇺
Klaverstyn
2026-11-10 12:50:39
UTC ·
(1 hour ago)
Excessive HTTP request rate
Web App Attack
🇺🇸
bruce_buskill
2026-11-10 12:45:08
UTC ·
(1 hour ago)
Web exploit/scan attempts against a university web server; blocked.
Web App Attack
Hacking
🇦🇺
Proxay Fox
2026-11-10 12:38:30
UTC ·
(2 hours ago)
35.195.85.59 - - [10/Nov/2026:22:38:28 +1000] "GET /.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.195.85.59" 228 562 TLSv1.3/TLS_AES_256_GCM_SHA384 . b90b3f8c22be254654c7afeb4a02d0c5a7f7301672b3208a2fb6 ...
show more
35.195.85.59 - - [10/Nov/2026:22:38:28 +1000] "GET /.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.195.85.59" 228 562 TLSv1.3/TLS_AES_256_GCM_SHA384 . b90b3f8c22be254654c7afeb4a02d0c5a7f7301672b3208a2fb600d5b245fcc6
35.195.85.59 - - [10/Nov/2026:22:38:28 +1000] "GET /.env.anthropic HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.195.85.59" 235 562 TLSv1.3/TLS_AES_256_GCM_SHA384 . 7518ed742b261d7bd64ae3178f8d076d81a3468d77615ee0488bbd717ab23c8a
35.195.85.59 - - [10/Nov/2026:22:38:28 +1000] "GET /.aws/.env HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.195.85.59" 232 562 TLSv1.3/TLS_AES_256_GCM_SHA384 . 9fabdb658d308f40fe043ad78766113ac037bc7adb2c05690e1a27ccb6ca77e9
35.195.85.59 - - [10/Nov/2026:22:38:28 +1000] "GET /.docker/config.json HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "35.195.85.59" 239 562 TLSv1.3/TLS_A
...
show less
Brute-Force
Web App Attack
🇪🇸
loadsoporte
2026-11-10 12:36:23
UTC ·
(2 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇩🇪
lolyay
2026-11-10 12:35:11
UTC ·
(2 hours ago)
35.195.85.59 - - [10/Nov/2026:12:35:09 +0000] "GET /.aws/credentials HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:12:35:10 +0000] "GET /.docker/laravel/app/.env HTTP/1.1" 403 134 " ...
show more
35.195.85.59 - - [10/Nov/2026:12:35:09 +0000] "GET /.aws/credentials HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [10/Nov/2026:12:35:10 +0000] "GET /.docker/laravel/app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
Bad Web Bot