ThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.238.37.165
2 ...
show moreThreatBook Intelligence: http_proxy,Zombie more details on https://threatbook.io/ip/104.238.37.165
2026-04-11 02:51:02 /,{"body":"0x%5B%5D=androxgh0st","content_type":"application/x-www-form-urlencoded","header":{"Accept":["*/*"],"Accept-Encoding":["gzip"],"Connection":["close"],"Content-Length":["20"],"Content-Type":["application/x-www-form-urlencoded"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"]},"host":"44.243.95.195","method":"POST","proto":"HTTP/1.1","remote_addr":"104.238.37.165:60245","status_code":200,"url":"/","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.5845.140 Safari/537.36"}
2026-04-11 02:51:02 /.env
show less
Malicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.e ...
show moreMalicious IP detected by WAF with anomaly score 10.0. Attack types: Exposure of environment file (.env), Timestamp deviates by 1.2 hours, Suspicious short random path (+2 more). Activity: 175 requests to 9 URLs. Time: 2025-08-14 21:06:07 (America/Bogota). Origin: US. Source: Automated WAF log analysis.
show less
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.238.37.165 (US/U ...
show more(apache-useragents) Failed apache-useragents trigger with match [redacted] from 104.238.37.165 (US/United States/-)
show less