๐จ๐ท
Klicks
2026-10-09 13:50:00
(2 weeks ago)
Request URL: https://api.1.net:443/trace.axd
Request path: /trace.axd
User host address: 35.204.97.42
Web App Attack
Web Spam
๐ฌ๐ง
openstrike.co.uk
2026-10-09 05:15:34
(2 weeks ago)
9 attacks on password/key grabbing URLs:
GET /.git-credentials HTTP/1.1
Hacking
๐ธ๐ฌ
simpeg-adm.bandung.go.id
2026-10-09 03:41:32
(2 weeks ago)
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/7m6nherl8dyrkc9wkj3y"
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/lib/terminal-xhr.php"
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/nhi5hnr9jn6ckpzric6z"
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/.vite/manifest.j ...
show more
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/7m6nherl8dyrkc9wkj3y"
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/lib/terminal-xhr.php"
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/nhi5hnr9jn6ckpzric6z"
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/.vite/manifest.json"
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/z9x8c7v6b5-debug-trigger-app.marcossanchez.net"
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/dist/manifest.json"
09/Oct/2026:03:41:31 +0000;35.204.97.42;"/dist/.vite/manifest.json"
...
show less
Web Spam
Brute-Force
Web App Attack
๐ซ๐ท
largo-it.net
2026-10-09 03:15:13
(2 weeks ago)
[09/Oct/2026:05:15:12.532] HTTP 404 - GET https://api2.largo-it.net/.well-known/jwks.json
[09/Oct/2026:05:15:12.958] HTTP 404 - GET https://api2.largo-it.net/.git-credentials
[09/Oct/2026:05:15:13.101] HTTP 404 - GET https://api2.largo-it.net/.gitlab ...
show more
[09/Oct/2026:05:15:12.532] HTTP 404 - GET https://api2.largo-it.net/.well-known/jwks.json
[09/Oct/2026:05:15:12.958] HTTP 404 - GET https://api2.largo-it.net/.git-credentials
[09/Oct/2026:05:15:13.101] HTTP 404 - GET https://api2.largo-it.net/.gitlab-ci.yml
[09/Oct/2026:05:15:13.141] HTTP 404 - GET https://api2.largo-it.net/.github/workflows/deploy.yml
[09/Oct/2026:05:15:13.384] HTTP 404 - GET https://api2.largo-it.net/.npmrc
[09/Oct/2026:05:15:13.414] HTTP 404 - GET https://api2.largo-it.net/.htpasswd
[09/Oct/2026:05:15:13.424] HTTP 404 - GET https://api2.largo-it.net/.ssh/id_rsa
[09/Oct/2026:05:15:13.482] HTTP 404 - GET https://api2.largo-it.net/.ssh/id_ed25519
show less
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
zumbo.net
2026-10-09 02:38:51
(2 weeks ago)
[Fri Oct 09 05:38:48.822448 2026] [proxy_fcgi:error] [pid 1552179:tid 1552183] [client 35.204.97.42:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 05:38:49.093496 2026] [proxy_fcgi:error] [pid 1552178:tid 1552228] [client 35.204.97.42:0] ...
show more
[Fri Oct 09 05:38:48.822448 2026] [proxy_fcgi:error] [pid 1552179:tid 1552183] [client 35.204.97.42:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 05:38:49.093496 2026] [proxy_fcgi:error] [pid 1552178:tid 1552228] [client 35.204.97.42:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 05:38:49.342340 2026] [proxy_fcgi:error] [pid 1552178:tid 1552198] [client 35.204.97.42:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 05:38:49.353547 2026] [proxy_fcgi:error] [pid 1552178:tid 1552223] [client 35.204.97.42:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 09 05:38:49.374292 2026] [proxy_fcgi:error] [pid 1552178:tid 1552192] [client 35.204.97.42:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐ณ๐ด
Abuse Buster
2026-10-09 02:37:12
(2 weeks ago)
35.204.97.42 - - [09/Oct/2026:04:37:10 +0200] "GET /ylgbj0b5awvn59g3w0sl HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +http ...
show more
35.204.97.42 - - [09/Oct/2026:04:37:10 +0200] "GET /ylgbj0b5awvn59g3w0sl HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
35.204.97.42 - - [09/Oct/2026:04:37:10 +0200] "GET /i84nk3g1pfrpuf3kv0sb HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.204.97.42 - - [09/Oct/2026:04:37:10 +0200] "GET /z9x8c7v6b5-debug-trigger-api.wingthor.net HTTP/2.0" 404 22 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
...
show less
Web App Attack
๐บ๐ธ
Charlesiv
2026-10-09 02:12:26
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /__debug__/
Timestamp: 2026-10-09T01:51:57Z
Ray ID: a479be3efecc4c90
UA: Mozilla/5.0 (compatible; Qwenbot/1.0; +ht ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /__debug__/
Timestamp: 2026-10-09T01:51:57Z
Ray ID: a479be3efecc4c90
UA: Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)
show less
Bad Web Bot
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-09 01:45:46
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
๐ธ๐ช
mrmister
2026-10-09 01:33:40
(2 weeks ago)
Automated report from a Cowrie/web honeypot (no legitimate users). web honeypot: 290 requests. Last seen 2026-10-09 01:14:40 UTC.
Web App Attack
๐ซ๐ฎ
stinpriza
2026-10-09 01:21:41
(2 weeks ago)
Web App Attack
Web App Attack
๐ฌ๐ง
andypiper
2026-10-09 01:02:55
(2 weeks ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ฉ๐ช
Hazzard
2026-10-09 00:50:39
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐บ๐ธ
ersei.net
2026-10-09 00:38:29
(2 weeks ago)
Web app exploiting
Web App Attack
๐ญ๐ฐ
zhengka
2026-10-09 00:30:04
(2 weeks ago)
ZhengKa WAF detected scan_probe. Rule: scan_probe #/(?:\.env|\.git|\.svn|composer\.json|composer\.lock|id_rsa|server-status)(?:$|[/?])#. Method: GET. URI: /.ssh/id_rsa. Incident: 05BF28108A5151BB. UA: Mozilla/5.0 (compatible; Bravebot/1.0; +https://b ...
show more
ZhengKa WAF detected scan_probe. Rule: scan_probe #/(?:\.env|\.git|\.svn|composer\.json|composer\.lock|id_rsa|server-status)(?:$|[/?])#. Method: GET. URI: /.ssh/id_rsa. Incident: 05BF28108A5151BB. UA: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
show less
Port Scan
Web App Attack
๐ฌ๐ง
consul.to
2026-10-09 00:11:54
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack