๐ง๐ช
voormedia
2026-07-21 00:29:31
(4 days ago)
Accessed trap at '/.env'
Web App Attack
๐ช๐ธ
el-brujo
2026-07-21 00:25:45
(4 days ago)
35.221.218.53 - - [21/Jul/2026:02:25:40 +0200] "GET /rclone.conf HTTP/2.0" 404 15889 "-" "Mozilla/5. ...
show more
35.221.218.53 - - [21/Jul/2026:02:25:40 +0200] "GET /rclone.conf HTTP/2.0" 404 15889 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.221.218.53 - - [21/Jul/2026:02:25:40 +0200] "GET /.aws/credentials HTTP/2.0" 404 15889 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] "
35.221.218.53 - - [21/Jul/2026:02:25:40 +0200] "GET /.gitconfig HTTP/2.0" 404 15889 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
35.221.218.53 - - [21/Jul/2026:02:25:40 +0200] "GET /.aws/config HTTP/2.0" 404 15889 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] "
35.221.218.53 - - [21/Jul/2026:02:25:40 +0200] "GET /.env.example HTTP/2.0" 404 15889 "-" "Mozilla/5.0 (compatible; Applebot-Extended/0.1; +http://www.apple.com/go/applebot)"
35.221.218.53 - - [21/Jul/2026:02:25
...
show less
DDoS Attack
Hacking
Anonymous
2026-07-21 00:05:00
(4 days ago)
[Tue Jul 21 02:04:56.300270 2026] [access_compat:error] [pid 379371:tid 379371] [client 35.221.218.5 ...
show more
[Tue Jul 21 02:04:56.300270 2026] [access_compat:error] [pid 379371:tid 379371] [client 35.221.218.53:0] AH01797: client denied by server configuration: /var/www/aucoffre/.aws
[Tue Jul 21 02:04:56.653948 2026] [access_compat:error] [pid 379141:tid 379141] [client 35.221.218.53:0] AH01797: client denied by server configuration: /var/www/aucoffre/rclone.conf
[Tue Jul 21 02:04:57.008923 2026] [access_compat:error] [pid 379373:tid 379373] [client 35.221.218.53:0] AH01797: client denied by server configuration: /var/www/aucoffre/.aws
[Tue Jul 21 02:04:58.594700 2026] [access_compat:error] [pid 379188:tid 379188] [client 35.221.218.53:0] AH01797: client denied by server configuration: /var/www/aucoffre/localhost.key
[Tue Jul 21 02:04:58.926662 2026] [access_compat:error] [pid 379075:tid 379075] [client 35.221.218.53:0] AH01797: client denied by server configuration: /var/www/aucoffre/.zshrc
...
show less
Web Spam
Web App Attack
๐บ๐ธ
mw
2026-07-21 00:02:01
(4 days ago)
GET /wp-config.php.bak HTTP/1.1
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-07-21 00:00:28
(4 days ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Email Spam
Anonymous
2026-07-21 00:00:00
(4 days ago)
"Security violation, excess traffic against library/education infrastructure"
Brute-Force
Anonymous
2026-07-20 23:43:47
(4 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ช๐ธ
el-brujo
2026-07-20 23:43:19
(4 days ago)
35.221.218.53 - - [21/Jul/2026:01:43:15 +0200] "GET /.aws/config HTTP/2.0" 404 15829 "-" "Mozilla/5. ...
show more
35.221.218.53 - - [21/Jul/2026:01:43:15 +0200] "GET /.aws/config HTTP/2.0" 404 15829 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
35.221.218.53 - - [21/Jul/2026:01:43:15 +0200] "GET /.aws/credentials HTTP/2.0" 404 15829 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)"
35.221.218.53 - - [21/Jul/2026:01:43:15 +0200] "GET /.env.production HTTP/2.0" 404 15829 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.221.218.53 - - [21/Jul/2026:01:43:15 +0200] "GET /z9x8c7v6b5-debug-trigger-elhacker.net HTTP/2.0" 404 15829 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] "
35.221.218.53 - - [21/Jul/2026:01:43:15 +0200] "GET /.git-credentials HTTP/2.0" 404 15829 "-" "Mozilla/5.0 (compatible; Applebot-Extended/0.1; +http://www.apple.com/go/applebot)"
35.221.218.53 - - [21/Jul/2026
...
show less
DDoS Attack
Hacking
๐ฉ๐ช
macrob
2026-07-20 23:32:02
(4 days ago)
2026/07/20 23:32:00 [error] 2087333#2087333: *394228217 access forbidden by rule, client: 35.221.218 ...
show more
2026/07/20 23:32:00 [error] 2087333#2087333: *394228217 access forbidden by rule, client: 35.221.218.53, server: ca5h.win, request: "GET /.aws/config HTTP/1.1", host: "ca5h.win"
2026/07/20 23:32:00 [error] 2087333#2087333: *394228218 access forbidden by rule, client: 35.221.218.53, server: ca5h.win, request: "GET /.s3cfg HTTP/1.1", host: "ca5h.win"
2026/07/20 23:32:00 [error] 2087333#2087333: *394228222 access forbidden by rule, client: 35.221.218.53, server: ca5h.win, request: "GET /firebase-adminsdk.json HTTP/1.1", host: "ca5h.win"
...
show less
Web App Attack
๐ณ๐ฑ
MyGlobalFlowers
2026-07-20 23:12:54
(4 days ago)
Multiple WAF Violations
Web App Attack
๐ง๐ช
voormedia
2026-07-20 23:12:13
(4 days ago)
Accessed trap at '/.aws/credentials'
Web App Attack
Anonymous
2026-07-20 23:03:03
(4 days ago)
35.221.218.53 - - [21/Jul/2026:07:03:03 +0800] "GET /api/.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 App ...
show more
35.221.218.53 - - [21/Jul/2026:07:03:03 +0800] "GET /api/.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] "
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
jormaster3k
2026-07-20 23:00:33
(4 days ago)
Attack against Apache (too many 404s)
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-07-20 23:00:09
(4 days ago)
Access to sensitive configuration files detected.. Threat Score: 7.1/10 (HIGH). Reported by Tangeran ...
show more
Access to sensitive configuration files detected.. Threat Score: 7.1/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-07-20 22:52:34
(4 days ago)
35.221.218.53 - - [20/Jul/2026:23:52:34 +0100] "GET /.ssh/authorized_keys HTTP/2.0" 302 50 "-" "Mozi ...
show more
35.221.218.53 - - [20/Jul/2026:23:52:34 +0100] "GET /.ssh/authorized_keys HTTP/2.0" 302 50 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack