๐ฉ๐ช
rh24
2026-09-01 12:00:07
(18 hours ago)
Blacklisted for CAPTCHA_DOS_ALERT after 101 captcha requests
DDoS Attack
Web App Attack
๐ฉ๐ช
maxpower
2026-08-31 19:12:29
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 13.229.156.14 (SG/Singapore/ec2-13-229-1 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 13.229.156.14 (SG/Singapore/ec2-13-229-156-14.ap-southeast-1.compute.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 13.229.156.14 - - [31/Aug/2026:21:12:28 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 129 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" "172.21.172.171" host=mail.olscitaly.com
show less
Port Scan
๐ช๐ธ
el-brujo
2026-08-31 18:43:48
(1 day ago)
Cloudflare WAF: Request Path: /v2/.env Request Query: Host: chat.elhacker.net userAgent: Mozilla/5. ...
show more
Cloudflare WAF: Request Path: /v2/.env Request Query: Host: chat.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0 Action: block Source: firewallManaged ASN Description: Amazon.com, Inc. Country: SG Method: GET Timestamp: 2026-08-31T18:43:48Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ฉ๐ช
maxpower
2026-08-31 16:47:08
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 13.229.156.14 (SG/Singapore/ec2-13-229-1 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 13.229.156.14 (SG/Singapore/ec2-13-229-156-14.ap-southeast-1.compute.amazonaws.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 13.229.156.14 - - [31/Aug/2026:18:47:03 +0200] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/2.0" 200 4754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" "10.86.173.145" host=mail.abruzzotour.it
show less
Port Scan
๐ช๐ธ
el-brujo
2026-08-31 15:57:32
(1 day ago)
Cloudflare WAF: Request Path: /.git/HEAD Request Query: Host: ns2.elhacker.net userAgent: Mozilla/5 ...
show more
Cloudflare WAF: Request Path: /.git/HEAD Request Query: Host: ns2.elhacker.net userAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0 Action: block Source: firewallManaged ASN Description: Amazon.com, Inc. Country: SG Method: GET Timestamp: 2026-08-31T15:57:32Z ruleId: 23548ee2b36547a1be09bb2c0550c529. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ช๐ธ
el-brujo
2026-08-31 14:52:22
(1 day ago)
13.229.156.14 - - [31/Aug/2026:16:52:22 +0200] "GET /build/manifest.json HTTP/2.0" 404 15873 "-" "Mo ...
show more
13.229.156.14 - - [31/Aug/2026:16:52:22 +0200] "GET /build/manifest.json HTTP/2.0" 404 15873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
13.229.156.14 - - [31/Aug/2026:16:52:22 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 15873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
13.229.156.14 - - [31/Aug/2026:16:52:22 +0200] "GET /dist/manifest.json HTTP/2.0" 404 15873 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
...
show less
DDoS Attack
Hacking
๐ฒ๐พ
Rizzy
2026-08-31 13:24:18
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ซ๐ท
Baking333
2026-08-31 13:03:16
(1 day ago)
[redacted] 13.229.156.14 - - [31/Aug/2026:14:03:15 +0100] "GET /@fs/home/ec2-user/.aws/credentials?r ...
show more
[redacted] 13.229.156.14 - - [31/Aug/2026:14:03:15 +0100] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 200 169 0/13958 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" [redacted] 13.229.156.14 - - [31/Aug/2026:14:03:15 +0100] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 200 5423 0/22740 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Marc
2026-08-31 12:11:29
(1 day ago)
13.229.156.14 - - [31/Aug/2026:14:11:28 +0200] "GET /.aws/config HTTP/2.0" 404 314 "-" "Mozilla/5.0 ...
show more
13.229.156.14 - - [31/Aug/2026:14:11:28 +0200] "GET /.aws/config HTTP/2.0" 404 314 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 13.229.156.14 - - [31/Aug/2026:14:11:28 +0200] "GET /secure HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 13.229.156.14 - - [31/Aug/2026:14:11:28 +0200] "GET /signin HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
๐บ๐ธ
dtorrer
2026-08-31 10:56:28
(1 day ago)
General vulnerability scan.
Port Scan
๐ฆ๐บ
clapper
2026-08-31 10:56:10
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 13.229.156.14 (SG/Singapore/ec2-13-229-156-14.a ...
show more
(mod_security) mod_security (id:949110) triggered by 13.229.156.14 (SG/Singapore/ec2-13-229-156-14.ap-southeast-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub
show less
Brute-Force
Bad Web Bot
๐ฑ๐ป
garmtech.com
2026-08-31 07:14:41
(1 day ago)
Attempted access to sensitive endpoint (/login) detected. Automated scan or unauthorized probing.
Web App Attack
๐ช๐ธ
librebit
2026-08-31 07:13:52
(1 day ago)
Brute force
Brute-Force
๐ช๐ธ
el-brujo
2026-08-31 03:08:33
(2 days ago)
13.229.156.14 - - [31/Aug/2026:05:08:32 +0200] "GET /dist/manifest.json HTTP/2.0" 404 15989 "-" "Moz ...
show more
13.229.156.14 - - [31/Aug/2026:05:08:32 +0200] "GET /dist/manifest.json HTTP/2.0" 404 15989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
13.229.156.14 - - [31/Aug/2026:05:08:32 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 15989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
13.229.156.14 - - [31/Aug/2026:05:08:33 +0200] "GET /build/manifest.json HTTP/2.0" 404 15989 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
...
show less
DDoS Attack
Hacking
๐ช๐ธ
el-brujo
2026-08-31 00:09:49
(2 days ago)
13.229.156.14 - - [31/Aug/2026:02:09:49 +0200] "GET /build/manifest.json HTTP/2.0" 404 4620 "-" "Moz ...
show more
13.229.156.14 - - [31/Aug/2026:02:09:49 +0200] "GET /build/manifest.json HTTP/2.0" 404 4620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
13.229.156.14 - - [31/Aug/2026:02:09:49 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 4620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
13.229.156.14 - - [31/Aug/2026:02:09:49 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 4620 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
...
show less
DDoS Attack
Hacking