๐ต๐ฑ
mscode.pl
2026-10-11 06:21:44
(4 days ago)
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Pro ...
show more
Triggered Cloudflare WAF (firewallManaged) from TW.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Zone: zszdeploy.msikorski.me
Endpoint: /client/.env
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )
show less
Bad Web Bot
๐ฉ๐ช
BlueWire Hosting
2026-10-11 05:57:58
(4 days ago)
Aggressive scanning resulting into 404
Bad Web Bot
๐ณ๐ฑ
enpepet
2026-10-11 05:48:07
(4 days ago)
GENERAL: parametres: [url:git=] UA:Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/s ...
show more
GENERAL: parametres: [url:git=] UA:Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html) URL:/.git/HEAD
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
๐ช๐ธ
robotstxt
2026-10-11 05:36:27
(4 days ago)
35.187.151.121 - - [11/Oct/2026:05:35:26 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 13687 " ...
show more
35.187.151.121 - - [11/Oct/2026:05:35:26 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 13687 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="35.187.151.121"
35.187.151.121 - - [11/Oct/2026:05:35:26 +0000] "GET /z9x8c7v6b5-debug-trigger-www.legir.cat HTTP/2.0" 403 14489 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" "-" edge="35.187.151.121"
35.187.151.121 - - [11/Oct/2026:05:35:26 +0000] "GET /build/manifest.json HTTP/2.0" 403 13751 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="35.187.151.121"
35.187.151.121 - - [11/Oct/2026:05:35:27 +0000] "GET /dist/manifest.json HTTP/2.0" 403 13744 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="35.187.151.121"
35.187.151.121
...
show less
Web App Attack
๐ซ๐ท
masterguru
2026-10-11 05:36:22
(4 days ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-201)
show less
Bad Web Bot
๐ช๐ธ
robotstxt
2026-10-11 05:02:57
(4 days ago)
35.187.151.121 - - [11/Oct/2026:05:02:54 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/se ...
show more
35.187.151.121 - - [11/Oct/2026:05:02:54 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="35.187.151.121"
35.187.151.121 - - [11/Oct/2026:05:02:54 +0000] "GET /appearance/../../.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.187.151.121"
35.187.151.121 - - [11/Oct/2026:05:02:54 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.187.151.121"
35.187.151.121 - - [11/Oct/2026:05:02:54 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.187.151.121"
35.187.151.121 - - [11/Oct/2026:05:02:54 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="35.187.151.121"
...
show less
Web Spam
Web App Attack
๐ช๐ธ
scaballe
2026-10-11 04:55:32
(4 days ago)
Web App Attack
๐ฆ๐บ
clapper
2026-10-11 04:41:09
(4 days ago)
(mod_security) mod_security (id:980001) triggered by 35.187.151.121 (TW/Taiwan/121.151.187.35.bc.goo ...
show more
(mod_security) mod_security (id:980001) triggered by 35.187.151.121 (TW/Taiwan/121.151.187.35.bc.googleusercontent.com): 5 in the last 3600 secs; ID: Clar
show less
Brute-Force
Bad Web Bot
๐น๐ท
hostopya.com
2026-10-11 04:35:06
(4 days ago)
[plesk-apache] 6 failed attempt(s). Log: [Sun Oct 11 07:34:51.851964 2026] [authz_core:error] [pid 2 ...
show more
[plesk-apache] 6 failed attempt(s). Log: [Sun Oct 11 07:34:51.851964 2026] [authz_core:error] [pid 2081330] [client 35.187.151.121:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/.htpasswd|[Sun Oct 11 07:34:52.310716 2026] [authz_core:error] [pid 2080639] [client 35.187.151.121:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/gcp-credentials.json|[Sun Oct 11 07:34:53.191053 2026] [authz_core:error] [pid 2055603] [client 35.187.151.121:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env|[Sun Oct 11 07:34:55.552242 2026] [authz_core:error] [pid 1842727] [client 35.187.151.121:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/env|[Sun Oct 11 07:35:05.585087 2026] [authz_core:error] [pid 1510876] [client 35.187.151.121:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/.htpasswd
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Skyrider
2026-10-11 03:45:16
(4 days ago)
crowdsecurity/http-probing
Web App Attack
๐ฉ๐ช
Laplus
2026-10-11 03:29:04
(4 days ago)
35.187.151.121 - - [11/Oct/2026:05:29:02 +0200] "GET /.github/workflows/deploy.yml HTTP/1.1" 200 449 ...
show more
35.187.151.121 - - [11/Oct/2026:05:29:02 +0200] "GET /.github/workflows/deploy.yml HTTP/1.1" 200 449 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
35.187.151.121 - - [11/Oct/2026:05:29:02 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 200 449 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
35.187.151.121 - - [11/Oct/2026:05:29:02 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 200 449 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
35.187.151.121 - - [11/Oct/2026:05:29:02 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 200 449 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-"
35.187.151.121 - - [11/Oct/2026:05:29:02 +0200] "GET /@fs/../.en
...
show less
Hacking
Web App Attack
๐ฉ๐ช
updown.io
2026-10-11 03:26:42
(4 days ago)
{"level":"info","ts":1791689199.7550747,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791689199.7550747,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.187.151.121","remote_port":"47430","client_ip":"35.187.151.121","proto":"HTTP/2.0","method":"POST","host":"status.blank.no","uri":"/graphql","headers":{"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Mode":["cors"],"Priority":["u=1, i"],"Sec-Ch-Ua-Mobile":["?0"],"Accept":["*/*"],"Sec-Fetch-Dest":["empty"],"Content-Length":["86"],"Content-Type":["application/json"],"Accept-Language":["en-US,en;q=0.9"],"Origin":["https://status.blank.no"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Referer":["https://status.blank.no"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"Sec-Fetch-Site":["same-origin"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.blank.no","e
...
show less
DDoS Attack
Web App Attack
๐ฉ๐ช
Laplus
2026-10-11 01:07:39
(4 days ago)
35.187.151.121 - - [11/Oct/2026:03:07:37 +0200] "GET /static../.env HTTP/1.1" 403 153 "-" "Mozilla/5 ...
show more
35.187.151.121 - - [11/Oct/2026:03:07:37 +0200] "GET /static../.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-"
35.187.151.121 - - [11/Oct/2026:03:07:37 +0200] "GET /files../.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "-"
35.187.151.121 - - [11/Oct/2026:03:07:37 +0200] "GET /css../.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "-"
35.187.151.121 - - [11/Oct/2026:03:07:37 +0200] "GET /uploads../.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
35.187.151.121 - - [11/Oct/2026:03:07:37 +0200] "GET /images../.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "-"
35.187.151.121 - - [11/Oct/2026:03:07:37 +0200] "GET /media../.env HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; Qwenbo
...
show less
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-11 00:20:18
(4 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-135)
Bad Web Bot
Anonymous
2026-10-11 00:20:06
(4 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection