🇩🇪
EGP Abuse Dept
2026-10-19 09:31:09
(3 days ago)
Scanning for web/db/file exploits on security-seals.global
SQL Injection
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2026-10-19 09:17:29
(3 days ago)
35.229.177.139 - - [19/Oct/2026:10:17:26 +0100] "GET /robots.txt HTTP/1.1" 404 6476 "-" "Mozilla/5.0 ...
show more
35.229.177.139 - - [19/Oct/2026:10:17:26 +0100] "GET /robots.txt HTTP/1.1" 404 6476 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.229.177.139 - - [19/Oct/2026:10:17:26 +0100] "GET /admin/login HTTP/1.1" 404 6476 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
35.229.177.139 - - [19/Oct/2026:10:17:26 +0100] "GET /admin HTTP/1.1" 404 6476 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
🇫🇮
Christopher Hughes
2026-10-19 09:03:26
(3 days ago)
35.229.177.139 - - [19/Oct/2026:10:03:26 +0100] "GET /img../.env HTTP/2.0" 401 410 "-" "Mozilla/5.0 ...
show more
35.229.177.139 - - [19/Oct/2026:10:03:26 +0100] "GET /img../.env HTTP/2.0" 401 410 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇫🇮
Christopher Hughes
2026-10-19 08:27:17
(3 days ago)
35.229.177.139 - - [19/Oct/2026:09:27:16 +0100] "GET /z9x8c7v6b5-debug-trigger-demo.waterwaysnetwork ...
show more
35.229.177.139 - - [19/Oct/2026:09:27:16 +0100] "GET /z9x8c7v6b5-debug-trigger-demo.waterwaysnetwork.co.uk HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
2026-10-19 08:21:15
(3 days ago)
Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Probing ...
show more
Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Probing for exposed secret / credential files; Web application attack: http path traversal probing; Web application attack: http sensitive files
show less
Hacking
Web App Attack
🇩🇪
updown.io
2026-10-19 06:19:59
(3 days ago)
{"level":"info","ts":1792390797.8556786,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1792390797.8556786,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.229.177.139","remote_port":"43546","client_ip":"35.229.177.139","proto":"HTTP/2.0","method":"POST","host":"status.varlog.sh","uri":"/graphql","headers":{"Content-Length":["86"],"Sec-Fetch-Mode":["cors"],"Priority":["u=1, i"],"Sec-Fetch-Site":["same-origin"],"Accept":["*/*"],"Origin":["https://status.varlog.sh"],"Content-Type":["application/json"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Microsoft Edge\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Sec-Ch-Ua-Platform":["\"macOS\""],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"],"Sec-Ch-Ua-Mobile":["?0"],"Referer":["https://status.varlog.sh"],"Accept-Language":["en-US,en;q=0.9"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Dest":["empty"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","ser
...
show less
DDoS Attack
Web App Attack
🇫🇷
Quarks Solutions
2026-10-19 05:59:29
(3 days ago)
crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-19 05:41:29
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.229.177.139 (139.177.229.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.229.177.139 (139.177.229.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 01:41:25.986766 2026] [security2:error] [pid 19009:tid 19009] [client 35.229.177.139:56400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gsvip.com.ec"] [uri "/.env.local"] [unique_id "atWthV359aj1lsqQ8OVYbQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-19 05:30:08
(3 days ago)
316 requests with url.path */@fs/*
128 requests with url.path */proc/*
Brute-Force
Bad Web Bot
🇮🇹
Inartis
2026-10-19 03:48:33
(4 days ago)
35.229.177.139 - - [19/Oct/2026:05:48:21 +0200] "GET /.env.supabase HTTP/1.1" 403 7801 "-" "Mozilla/ ...
show more
35.229.177.139 - - [19/Oct/2026:05:48:21 +0200] "GET /.env.supabase HTTP/1.1" 403 7801 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.229.177.139 - - [19/Oct/2026:05:48:25 +0200] "GET /admin HTTP/1.1" 301 7970 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
35.229.177.139 - - [19/Oct/2026:05:48:25 +0200] "GET /admin/login HTTP/1.1" 301 7976 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-10-19 03:13:59
(4 days ago)
URL Probing: /api/v1/.env
Web App Attack
🇫🇷
Batz
2026-10-19 03:08:56
(4 days ago)
Automated Web Bot hunting for hidden .env / AI API Credentials
Port Scan
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-19 03:08:21
(4 days ago)
Multiple WAF Violations
Web App Attack
🇩🇪
raph
2026-10-19 03:02:59
(4 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇩🇪
bescared
2026-10-19 02:00:16
(4 days ago)
F2B - Malicious activity detected. Excessive port scans. -8ff06ede-
Port Scan