๐ช๐ธ
jmh888
2026-10-19 08:45:27
(33 minutes ago)
35.194.214.9 - - [19/Oct/2026:09:45:26 +0100] "GET /assets/manifest.json HTTP/1.1" 404 457 "-" "Mozi ...
show more
35.194.214.9 - - [19/Oct/2026:09:45:26 +0100] "GET /assets/manifest.json HTTP/1.1" 404 457 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.194.214.9 - - [19/Oct/2026:09:45:26 +0100] "GET /static/manifest.json HTTP/1.1" 404 457 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.194.214.9 - - [19/Oct/2026:09:45:26 +0100] "GET /manifest.json HTTP/1.1" 404 4402 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.194.214.9 - - [19/Oct/2026:09:45:26 +0100] "GET /webpack-stats.json HTTP/1.1" 404 4401 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.194.214.9 - - [19/Oct/2026:09:45:26 +0100] "GET /i5z1b06n36m0d70zbyug HTTP/1.1" 404 457 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
3
...
show less
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-19 07:51:40
(1 hour ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
๐ฉ๐ช
FD-IX
2026-10-19 04:16:51
(5 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐บ๐ธ
H24
2026-10-19 03:46:28
(5 hours ago)
/lib/terminal-xhr.php /icecoder/lib/terminal-xhr.php /workspace/.env /@fs/app/.env /@fs/proc/self/cw ...
show more
/lib/terminal-xhr.php /icecoder/lib/terminal-xhr.php /workspace/.env /@fs/app/.env /@fs/proc/self/cwd/.env /.env /@fs/src/.env /@fs/home/ubuntu/.aws/credentials /@fs/../.env /client/.env
show less
Web App Attack
๐ณ๐ฑ
MyGlobalFlowers
2026-10-19 03:13:29
(6 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
nasset
2026-10-19 02:56:20
(6 hours ago)
35.194.214.9 - - [18/Oct/2026:19:56:20 -0700] "GET /@fs/app/.env?raw?? HTTP/1.1" 403 584 "-" "Mozill ...
show more
35.194.214.9 - - [18/Oct/2026:19:56:20 -0700] "GET /@fs/app/.env?raw?? HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" TLSv1.3 TLS_AES_256_GCM_SHA384
35.194.214.9 - - [18/Oct/2026:19:56:20 -0700] "GET /.env.prod.local HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" TLSv1.3 TLS_AES_256_GCM_SHA384
35.194.214.9 - - [18/Oct/2026:19:56:20 -0700] "GET /.envrc HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" TLSv1.3 TLS_AES_256_GCM_SHA384
35.194.214.9 - - [18/Oct/2026:19:56:20 -0700] "GET /.env.config HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" TLSv1.3 TLS_AES_256_GCM_SHA384
35.194.214.9 - - [18/Oct/2026:19:56:20 -0700] "GET /.env.testing HTTP/1.1" 403 584 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" TLSv1.3 TLS_AES_256_GCM_SHA384
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
agenciahypelab.com.br
2026-10-19 01:29:06
(7 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ซ๐ท
dynamix
2026-10-19 00:43:27
(8 hours ago)
Multiple WAF Violations
Web App Attack
๐ฌ๐ง
consul.to
2026-10-18 23:31:39
(9 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-18 22:38:59
(10 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
ICS Labs
2026-10-18 21:34:10
(11 hours ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-18 UTC.
Brute-Force
๐ณ๐ฑ
Savvii
2026-10-18 21:04:43
(12 hours ago)
20 attempts against mh-misbehave-ban on yonder-shared-dev-02
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-18 20:04:04
(13 hours ago)
IVski WAF | Sensitive file probe detected - looking for .git
Hacking
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-18 18:05:31
(15 hours ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.194.214.9 - - [18/Oct/2026:20:05:24 +0200] "GET /.ssh/config HTTP/2.0" 403 372 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-18 16:13:47
(17 hours ago)
35.194.214.9 - - [18/Oct/2026:18:13:43 +0200] "GET /dist/.vite/manifest.json HTTP/1.1" 404 30216
35. ...
show more
35.194.214.9 - - [18/Oct/2026:18:13:43 +0200] "GET /dist/.vite/manifest.json HTTP/1.1" 404 30216
35.194.214.9 - - [18/Oct/2026:18:13:44 +0200] "GET /service-account.json HTTP/1.1" 404 30268
35.194.214.9 - - [18/Oct/2026:18:13:44 +0200] "POST /graphql HTTP/1.1" 404 30166
35.194.214.9 - - [18/Oct/2026:18:13:44 +0200] "GET /docker-compose.yaml HTTP/1.1" 404 30283
35.194.214.9 - - [18/Oct/2026:18:13:44 +0200] "GET /Dockerfile HTTP/1.1" 404 30291
35.194.214.9 - - [18/Oct/2026:18:13:44 +0200] "GET /serverless.yml HTTP/1.1" 404 30394
35.194.214.9 - - [18/Oct/2026:18:13:44 +0200] "GET /docker-compose.yml HTTP/1.1" 404 30266
35.194.214.9 - - [18/Oct/2026:18:13:44 +0200] "GET /fly.toml HTTP/1.1" 404 30268
35.194.214.9 - - [18/Oct/2026:18:13:44 +0200] "GET /railway.toml HTTP/1.1" 404 30269
35.194.214.9 - - [18/Oct/2026:18:13:44 +0200] "GET /netlify.toml HTTP/1.1" 404 30340
...
show less
Web Spam
Web App Attack