🇺🇸
ALSCO®️
2026-11-05 22:00:40
UTC ·
(1 day ago)
Report By ALSCO Security Team: Unauthorized Connection Attempt
Web App Attack
🇺🇸
Secure Gateway®️
2026-11-05 22:00:39
UTC ·
(1 day ago)
Report By Secure Gateway Security Team: Unauthorized Connection Attempt
Hacking
🇺🇸
Charlesiv
2026-11-05 13:08:10
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /Dockerfile
Timestamp: 2026-11-05T12:56:57Z
Ray ID: a55c058018983fa5
UA: Mozilla/5.0 (compatible; cohere-ai; +http ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /Dockerfile
Timestamp: 2026-11-05T12:56:57Z
Ray ID: a55c058018983fa5
UA: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
show less
Bad Web Bot
🇵🇱
Woytass
2026-11-05 11:27:05
UTC ·
(1 day ago)
CSF permanent block; ports=*; (mod_security) mod_security (id:949110) triggered by 35.186.148.148 (SG/Singapore/148.148.186.35.bc.googleusercontent.com): 5 in the last 3600 secs
Web App Attack
🇫🇷
Little Iguana
2026-11-05 11:11:34
UTC ·
(1 day ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
🇺🇸
masterguru
2026-11-05 10:51:14
UTC ·
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000-164)
Bad Web Bot
🇩🇪
maxpower
2026-11-05 10:02:44
UTC ·
(1 day ago)
(PERMBLOCK) 35.186.148.148 (SG/Singapore/148.148.186.35.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
Port Scan
🇩🇪
maxpower
2026-11-05 09:23:01
UTC ·
(1 day ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 35.186.148.148 (SG/Singapore/148.148.186.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/11/05 10:23:00 [error] 1249142#124 ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 35.186.148.148 (SG/Singapore/148.148.186.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/11/05 10:23:00 [error] 1249142#1249142: *3418295 access forbidden by rule, client: 35.186.148.148, server: italpmiabruzzo.conapipescara.it, request: "GET /wp-config.php.old HTTP/2.0", host: "mail.italpmiabruzzo.it"
2026/11/05 10:23:00 [error] 1249142#1249142: *3418295 access forbidden by rule, client: 35.186.148.148, server: italpmiabruzzo.conapipescara.it, request: "GET /wp-config.php.bak HTTP/2.0", host: "mail.italpmiabruzzo.it"
2026/11/05 10:23:00 [error] 1249142#1249142: *3418295 access forbidden by rule, client: 35.186.148.148, server: italpmiabruzzo.conapipescara.it, request: "GET /wp-config.php~ HTTP/2.0", host: "mail.italpmiabruzzo.it"
show less
Port Scan
🇩🇪
sebham03
2026-11-05 08:22:30
UTC ·
(1 day ago)
Automated sensitive-file/web application path probing on 2026-11-05 from 08:21:34 to 08:22:30 UTC: 121 HTTP requests, including 19 strong probe-indicator requests targeting 19 distinct normalized paths. Responses: HTTP 200: 33, HTTP 301: 1, HTTP 404: ...
show more
Automated sensitive-file/web application path probing on 2026-11-05 from 08:21:34 to 08:22:30 UTC: 121 HTTP requests, including 19 strong probe-indicator requests targeting 19 distinct normalized paths. Responses: HTTP 200: 33, HTTP 301: 1, HTTP 404: 26, HTTP 499: 61. Response contents not verified; no successful sensitive-file access, authentication or compromise established.
show less
Web App Attack
Anonymous
2026-11-05 07:34:15
UTC ·
(1 day ago)
35.186.148.148 - - [05/Nov/2026:15:34:06 +0800] "GET /sitemap_index.xml HTTP/1.1" 404 322 "https://itdefence.asia/sitemap_index.xml" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "-"
35.186.148.148 - - [05/Nov/2026:15:34:10 +0800] "GET ...
show more
35.186.148.148 - - [05/Nov/2026:15:34:06 +0800] "GET /sitemap_index.xml HTTP/1.1" 404 322 "https://itdefence.asia/sitemap_index.xml" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "-"
35.186.148.148 - - [05/Nov/2026:15:34:10 +0800] "GET /webpack-stats.json HTTP/1.1" 404 322 "https://itdefence.asia/webpack-stats.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-"
35.186.148.148 - - [05/Nov/2026:15:34:10 +0800] "GET /kyu6z5aiz9jsjp7itxw1 HTTP/1.1" 404 322 "https://itdefence.asia/kyu6z5aiz9jsjp7itxw1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "-"
35.186.148.148 - - [05/Nov/2026:15:34:10 +0800] "GET /static/manifest.json HTTP/1.1" 404 322 "https://itdefence.asia/static/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobil
...
show less
Web App Attack
🇧🇪
cmbplf
2026-11-05 05:26:45
UTC ·
(1 day ago)
1.555 requests with url.path *.env
189 requests with url.path */proc/*
119 requests with url.path *.php.bak
115 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
🇫🇷
masterguru
2026-11-05 05:02:32
UTC ·
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:user-agent. (1100000-131)
Bad Web Bot
Anonymous
2026-11-05 05:01:29
UTC ·
(1 day ago)
35.186.148.148 - - [05/Nov/2026:05:01:28 +0000] "-" 400 166 "-" "-"
35.186.148.148 - - [05/Nov/2026:05:01:28 +0000] "-" 400 166 "-" "-"
35.186.148.148 - - [05/Nov/2026:05:01:28 +0000] "-" 400 166 "-" "-"
...
Brute-Force
🇺🇸
Charlesiv
2026-11-05 05:00:17
UTC ·
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-11-05T04:49:45Z
Ray ID: a5593bd0bddca439
UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https:// ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-11-05T04:49:45Z
Ray ID: a5593bd0bddca439
UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)
show less
Bad Web Bot
🇺🇸
masterguru
2026-11-05 04:39:03
UTC ·
(1 day ago)
URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ . ...
show more
URL file extension is restricted by policy. String match within ".asa/ .asax/ .ascx/ .axd/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .config/ .conf/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dll/ .dos/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .ini/ .key/ .licx/ .lnk/ .log/ .mdb/ .old/ .pass/ .pdb/ .pol/ .printer/ .pwd/ .rdb/ .resources/ .resx/ .sql/ .swp/ .sys/ .vb/ .vbs/ .vbproj/ .vsdisco/ .webinfo/ .xsd/ .xsx/" at TX:extension. (920440-163)
show less
Hacking