🇦🇺
aranguren.org
2026-11-06 09:41:29
UTC ·
(2 days ago)
35.203.102.64 - - [06/Nov/2026:20:41:26 +1100] "GET /.git/config%3F.css HTTP/2.0" 301 288 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" TLSv1.3 TLS_AES_128_GCM_SHA256
35.203.102. ...
show more
35.203.102.64 - - [06/Nov/2026:20:41:26 +1100] "GET /.git/config%3F.css HTTP/2.0" 301 288 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" TLSv1.3 TLS_AES_128_GCM_SHA256
35.203.102.64 - - [06/Nov/2026:20:41:28 +1100] "GET /.git/config HTTP/2.0" 301 281 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" TLSv1.3 TLS_AES_128_GCM_SHA256
...
show less
Web App Attack
🇳🇱
middelkoopcc
2026-11-06 09:33:01
UTC ·
(2 days ago)
2026-11-06 10:31:43 GET /storage/.env [301] && 2026-11-06 10:31:43 GET /config/.env.php [301] && 2026-11-06 10:31:43 GET /.env.php.bak [301] && 218 more within 20 minutes
Web App Attack
🇵🇱
Bonn333
2026-11-06 08:59:58
UTC ·
(2 days ago)
CrowdSec: scanning for vulnerable or sensitive paths. Scenario=crowdsecurity/http-probing; events=11; window=2026-11-06T08:59:55.763361929Z .. 2026-11-06T08:59:56.54604841Z. Tried: GET /robots.txt | GET /z9x8c7v6b5-debug-trigger-git.bonn333.eu | GET ...
show more
CrowdSec: scanning for vulnerable or sensitive paths. Scenario=crowdsecurity/http-probing; events=11; window=2026-11-06T08:59:55.763361929Z .. 2026-11-06T08:59:56.54604841Z. Tried: GET /robots.txt | GET /z9x8c7v6b5-debug-trigger-git.bonn333.eu | GET /.vite/manifest.json | GET /build/manifest.json | GET /dist/manifest.json | GET /dist/.vite/manifest.json | GET /v2/.env | GET /portal/.env | GET /env.old | GET /.env.supabase (+1 more). Automated report, no manual review.
show less
Web App Attack
Bad Web Bot
🇩🇪
Gwyneth Llewelyn
2026-11-06 08:43:42
UTC ·
(2 days ago)
2026/11/06 08:43:40 [error] 3084#3084: *1109564 access forbidden by rule, client: 35.203.102.64, server: [redacted], request: "GET /dev/.env HTTP/2.0", host: "wiki.betatechnologies.info"
2026/11/06 08:43:40 [error] 3084#3084: *1109564 access forbidde ...
show more
2026/11/06 08:43:40 [error] 3084#3084: *1109564 access forbidden by rule, client: 35.203.102.64, server: [redacted], request: "GET /dev/.env HTTP/2.0", host: "wiki.betatechnologies.info"
2026/11/06 08:43:40 [error] 3084#3084: *1109564 access forbidden by rule, client: 35.203.102.64, server: [redacted], request: "GET /production/.env HTTP/2.0", host: "wiki.betatechnologies.info"
2026/11/06 08:43:40 [error] 3084#3084: *1109564 access forbidden by rule, client: 35.203.102.64, server: [redacted], request: "GET /v1/.env HTTP/2.0", host: "wiki.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇫🇷
/dev/null
2026-11-06 08:42:59
UTC ·
(2 days ago)
Web attack | malicious scanning detected.
Hacking
Web App Attack
🇵🇱
Budyn
2026-11-06 08:39:17
UTC ·
(2 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: grafana.budyn.ovh | Path: /dist/.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10. ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: grafana.budyn.ovh | Path: /dist/.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-11-06 08:33:17
UTC ·
(2 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-06 08:21:17
UTC ·
(2 days ago)
[ti-tinov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.203.102.64 - - [06/Nov/2026:09:20:58 +0100] "GET /sitemap.xml HTTP/2.0" 404 1629 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like ...
show more
[ti-tinov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.203.102.64 - - [06/Nov/2026:09:20:58 +0100] "GET /sitemap.xml HTTP/2.0" 404 1629 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.203.102.64 - - [06/Nov/2026:09:21:10 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 1877 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.203.102.64 - - [06/Nov/2026:09:21:11 +0100] "GET /settings/billing HTTP/2.0" 404 1877 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
35.203.102.64 - - [06/Nov/2026:09:21:11 +0100] "GET /settings HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari
...
show less
Bad Web Bot
Web App Attack
🇩🇰
floyd_dk
2026-11-06 08:15:41
UTC ·
(2 days ago)
35.203.102.64 - - [06/Nov/2026:08:15:40 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.203.102.64 - - [06/Nov/2026:08:15:40 +0000] "GET /si ...
show more
35.203.102.64 - - [06/Nov/2026:08:15:40 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.203.102.64 - - [06/Nov/2026:08:15:40 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.203.102.64 - - [06/Nov/2026:08:15:40 +0000] "GET /assets/manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.203.102.64 - - [06/Nov/2026:08:15:40 +0000] "GET /static/manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.203.102.64 - - [06/Nov/2026:08:15:40 +0000] "GET /z9x8c7v6b5-debug-trigger-wp.floyd.dk HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://ope
...
show less
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-06 08:12:09
UTC ·
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 35.203.102.64 (CA/Canada/64.102.203.35.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇩🇪
thesimonmanuel
2026-11-06 08:09:42
UTC ·
(2 days ago)
35.203.102.64 - - [06/Nov/2026:13:39:34 +0530] "GET /swagger HTTP/2.0" 404 2092 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
Web App Attack
Anonymous
2026-11-06 08:04:14
UTC ·
(2 days ago)
Web application attack: http cve 2021 41773; Web application attack: http sensitive files; Web application attack: http path traversal probing; Probing for exposed secret / credential files
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-11-06 08:03:35
UTC ·
(2 days ago)
excessive HTTP 404 errors
Bad Web Bot
🇫🇷
EDSL
2026-11-06 07:16:17
UTC ·
(2 days ago)
[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 443)
Port Scan
Hacking
Web App Attack
🇺🇸
jormaster3k
2026-11-06 05:43:33
UTC ·
(2 days ago)
Attack against Apache (too many 404s)
Web App Attack