๐ฉ๐ช
IVski.com
2026-10-14 01:31:51
(1 day ago)
IVski WAF | Webshell probe detected - requesting common script extensions
Hacking
Brute-Force
Web App Attack
๐ฆ๐บ
Klaverstyn
2026-10-12 23:42:11
(2 days ago)
Persistent attacker, repeat offender
Hacking
๐บ๐ธ
Secure Gatewayยฎ๏ธ
2026-10-12 22:00:44
(2 days ago)
Report By Secure Gateway Security Team: Unsolicited Connection Attempt
Hacking
๐บ๐ธ
ALSCOยฎ๏ธ
2026-10-12 22:00:44
(2 days ago)
Report By ALSCO Security Team: Potential CSRF Attack Detected
Hacking
๐ฉ๐ช
Dennis
2026-10-12 14:40:40
(3 days ago)
35.237.200.237 has been banned for triggering http-probing (11 events over 231.088632ms).
Brute-Force
Web App Attack
๐ฉ๐ช
itsvic.dev
2026-10-12 14:29:35
(3 days ago)
35.237.200.237 - - [12/Oct/2026:14:29:34 +0000] "social.itsvic.dev" "GET /api/.env/public/.env HTTP/ ...
show more
35.237.200.237 - - [12/Oct/2026:14:29:34 +0000] "social.itsvic.dev" "GET /api/.env/public/.env HTTP/2.0" 404 312 26 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.237.200.237 - - [12/Oct/2026:14:29:34 +0000] "social.itsvic.dev" "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 312 90 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.237.200.237 - - [12/Oct/2026:14:29:35 +0000] "social.itsvic.dev" "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 404 312 155 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
jormaster3k
2026-10-12 14:19:25
(3 days ago)
Attack against Apache (too many 404s)
Web App Attack
๐ซ๐ท
security.rdmc.fr
2026-10-12 12:34:31
(3 days ago)
Sensitive File Scan
Web App Attack
๐บ๐ธ
Operator873
2026-10-12 09:04:50
(3 days ago)
2026/10/12 04:04:48 [error] 734114#0: *1380470 access forbidden by rule, client: 35.237.200.237, ser ...
show more
2026/10/12 04:04:48 [error] 734114#0: *1380470 access forbidden by rule, client: 35.237.200.237, server: [OBFUSCATED], request: "GET / HTTP/1.1", host: "preview.n5txl.com"
2026/10/12 04:04:48 [error] 734114#0: *1380470 access forbidden by rule, client: 35.237.200.237, server: [OBFUSCATED], request: "GET / HTTP/1.1", host: "preview.n5txl.com"
2026/10/12 04:04:48 [error] 734114#0: *1380470 access forbidden by rule, client: 35.237.200.237, server: [OBFUSCATED], request: "GET /z9x8c7v6b5-debug-trigger-preview.n5txl.com HTTP/1.1", host: "preview.n5txl.com"
2026/10/12 04:04:48 [error] 734114#0: *1380470 access forbidden by rule, client: 35.237.200.237, server: [OBFUSCATED], request: "GET /z9x8c7v6b5-debug-trigger-preview.n5txl.com HTTP/1.1", host: "preview.n5txl.com"
2026/10/12 04:04:48 [error] 734114#0: *1380471 access forbidden by rule, client: 35.237.200.237, server: [OBFUSCATED], request: "GET /login HTTP/1.1", host: "preview.n5txl.com"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-12 07:32:08
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.237.200.237 (US/United States/237.20 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.237.200.237 (US/United States/237.200.237.35.bc.googleusercontent.com)
show less
SQL Injection
๐ง๐ท
SOC-BR
2026-10-12 07:21:42
(3 days ago)
Attack detected by Fortinet - applications3: Vercel.Next.js.x-middleware-subrequest.Authentication.B ...
show more
Attack detected by Fortinet - applications3: Vercel.Next.js.x-middleware-subrequest.Authentication.Bypass - 2026-10-11 17:38:55 - Source Port 57314
show less
Port Scan
Hacking
๐ฆ๐น
SchiWaGoA
2026-10-12 05:35:05
(3 days ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
๐ฆ๐บ
aranguren.org
2026-10-12 03:10:44
(3 days ago)
35.237.200.237 - - [12/Oct/2026:14:10:43 +1100] "GET /y161repxdfkxzwxqt35g HTTP/2.0" 404 994 "-" "Mo ...
show more
35.237.200.237 - - [12/Oct/2026:14:10:43 +1100] "GET /y161repxdfkxzwxqt35g HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.237.200.237 - - [12/Oct/2026:14:10:43 +1100] "GET /webpack-stats.json HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
35.237.200.237 - - [12/Oct/2026:14:10:43 +1100] "GET /z9x8c7v6b5-debug-trigger-mail.luisaranguren.com HTTP/2.0" 404 994 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
...
show less
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-12 02:55:39
(3 days ago)
[ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 35. ...
show more
[ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 35.237.200.237 - - \[12/Oct/2026:04:55:22 +0200\] "GET /.env.backup HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; Meta-ExternalFetcher/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)"
35.237.200.237 - - \[12/Oct/2026:04:55:22 +0200\] "GET /.env.save HTTP/1.1" 403 5934 "-" "Mozilla/5.0 \(compatible\; Bytespider\; [email protected] \) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-12 02:37:40
(3 days ago)
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.237.200.237 - - [12/Oct/2026:04:37:29 +0200] "GET /static../.env HTTP/2.0" 404 1422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack