Anonymous
2026-10-19 06:12:12
(3 days ago)
Unauthorized SSH login attempts
Brute-Force
SSH
๐ซ๐ท
dynamix
2026-10-19 04:03:08
(3 days ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-19 03:39:56
(3 days ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 35.234.240.159 (CA/Canada/159.240.234.35.bc. ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 35.234.240.159 (CA/Canada/159.240.234.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.234.240.159 - - [19/Oct/2026:05:39:51 +0200] "GET /build/.env HTTP/2.0" 406 317 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.234.240.159 - - [19/Oct/2026:05:39:51 +0200] "GET /.next/.env HTTP/2.0" 406 317 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.234.240.159 - - [19/Oct/2026:05:39:51 +0200] "GET /server/.env HTTP/2.0" 406 317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
show less
Port Scan
๐ช๐ธ
robotstxt
2026-10-19 03:29:14
(3 days ago)
35.234.240.159 - - [19/Oct/2026:03:29:11 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge ...
show more
35.234.240.159 - - [19/Oct/2026:03:29:11 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.234.240.159"
35.234.240.159 - - [19/Oct/2026:03:29:11 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.234.240.159"
35.234.240.159 - - [19/Oct/2026:03:29:11 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="35.234.240.159"
35.234.240.159 - - [19/Oct/2026:03:29:11 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="35.234.240.159"
35.234.240.159 - - [19/Oct/2026:03:29:12 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.234.240.159"
...
show less
Web Spam
Web App Attack
๐ช๐ธ
el-brujo
2026-10-19 03:13:16
(3 days ago)
Cloudflare WAF: Request Path: /app Request Query: Host: chat.elhacker.net userAgent: Mozilla/5.0 (c ...
show more
Cloudflare WAF: Request Path: /app Request Query: Host: chat.elhacker.net userAgent: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler) Action: block Source: firewallManaged ASN Description: Google LLC Country: CA Method: POST Timestamp: 2026-10-19T03:13:16Z ruleId: e7e4b386797e417c998d872956c390a1.
show less
Hacking
SQL Injection
Web App Attack
Anonymous
2026-10-19 03:04:56
(3 days ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐ฉ๐ช
rh24
2026-10-18 17:25:09
(3 days ago)
(badbots) Bad bot user-agent [redacted] from 35.234.240.159 (CA/Canada/159.240.234.35.bc.googleuserc ...
show more
(badbots) Bad bot user-agent [redacted] from 35.234.240.159 (CA/Canada/159.240.234.35.bc.googleusercontent.com)
show less
Hacking
Anonymous
2026-10-18 16:50:24
(3 days ago)
35.234.240.159 - - [18/Oct/2026:18:50:22 +0200] "GET /firebase-service-account.json HTTP/1.1" 404 60 ...
show more
35.234.240.159 - - [18/Oct/2026:18:50:22 +0200] "GET /firebase-service-account.json HTTP/1.1" 404 60394
35.234.240.159 - - [18/Oct/2026:18:50:23 +0200] "GET /secrets.env HTTP/1.1" 404 65174
35.234.240.159 - - [18/Oct/2026:18:50:23 +0200] "GET /serviceAccountKey.json HTTP/1.1" 404 65207
35.234.240.159 - - [18/Oct/2026:18:50:23 +0200] "GET /dist/manifest.json HTTP/1.1" 404 65196
35.234.240.159 - - [18/Oct/2026:18:50:23 +0200] "GET /asset-manifest.json HTTP/1.1" 404 65198
35.234.240.159 - - [18/Oct/2026:18:50:23 +0200] "GET /z9x8c7v6b5-debug-trigger-veravalor.com HTTP/1.1" 404 65255
35.234.240.159 - - [18/Oct/2026:18:50:23 +0200] "GET /static/manifest.json HTTP/1.1" 404 65202
35.234.240.159 - - [18/Oct/2026:18:50:23 +0200] "GET /webpack-stats.json HTTP/1.1" 404 65195
35.234.240.159 - - [18/Oct/2026:18:50:23 +0200] "GET /modules/blockreassurance/views/dist/front.js.map HTTP/1.1" 404 60455
35.234.240.159 - - [18/Oct/2026:18:50:23 +0200] "GET /assets/manifest.json HTTP/1.1" 404 65202
...
show less
Web Spam
Web App Attack
๐ซ๐ท
GabrielJST
2026-10-18 15:23:50
(4 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.234.240.159 (CA/C ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.234.240.159 (CA/Canada/159.240.234.35.bc.googleusercontent.com)
show less
Bad Web Bot
๐ฉ๐ช
LRob
2026-10-18 14:28:54
(4 days ago)
Wordlist path sweep | method: GET | path: /3c6z84w8wq621j01leyk, /lib/terminal-xhr.php, /manifest.js ...
show more
Wordlist path sweep | method: GET | path: /3c6z84w8wq621j01leyk, /lib/terminal-xhr.php, /manifest.json (+3 more) | ua: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot), Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/), Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36 (+1 more)
show less
Port Scan
Web App Attack
๐ง๐ช
cmbplf
2026-10-18 14:27:14
(4 days ago)
536 requests with url.path *.env
130 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
๐บ๐ธ
kosada.com
2026-10-18 07:21:47
(4 days ago)
Repeated requests for suspicious nonexistent URLs, for example: /7lv3wzcco243hiok1v7n (HTTP/1.1 port ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /7lv3wzcco243hiok1v7n (HTTP/1.1 port 443, bogus vhost, user agent: "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )")
show less
Web App Attack
Anonymous
2026-10-18 06:49:56
(4 days ago)
Blocked by ModSec and CSF
Port Scan
๐ฉ๐ช
EGP Abuse Dept
2026-10-18 06:17:01
(4 days ago)
Scanning for web/db/file exploits on www.destrik.com
SQL Injection
Bad Web Bot
Web App Attack
๐จ๐ฆ
SSH-Admin
2026-10-18 04:00:16
(4 days ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack