๐ฎ๐ฉ
Diskominfo Lumajang
2026-09-01 06:50:02
(1 hour ago)
Security Event Detected by SOC Diskominfo Lumajang: event=alert, hits=12
Brute-Force
Anonymous
2026-09-01 01:20:45
(7 hours ago)
Portscan: TCP/8443, TCP/8080, TCP/9443, TCP/2376, TCP/9000, TCP/2375, TCP/3000, TCP/5000, TCP/8888, ...
show more
Portscan: TCP/8443, TCP/8080, TCP/9443, TCP/2376, TCP/9000, TCP/2375, TCP/3000, TCP/5000, TCP/8888, TCP/8000, TCP/5173, TCP/8081, TCP/9090
show less
Port Scan
๐ณ๐ฟ
Antinson
2026-08-31 23:37:30
(9 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
๐ต๐ฑ
sledzik1984
2026-08-31 22:54:15
(9 hours ago)
35.240.163.160 - - [01/Sep/2026:00:54:07 +0200] "GET /wp-config.php HTTP/1.1" 200 31 "-" "Mozilla/5. ...
show more
35.240.163.160 - - [01/Sep/2026:00:54:07 +0200] "GET /wp-config.php HTTP/1.1" 200 31 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)"
35.240.163.160 - - [01/Sep/2026:00:54:15 +0200] "GET /sendgrid/.env.php HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)"
35.240.163.160 - - [01/Sep/2026:00:54:15 +0200] "GET /twilio/.env.php HTTP/1.1" 404 125 "-" "Mozilla/5.0 (Windows NT 10.0; rv:127.12) Gecko/20100101 Firefox/127.12; compatible; Twitterbot/1.0"
...
show less
Web App Attack
๐ต๐ฑ
sledzik1984
2026-08-31 22:33:07
(10 hours ago)
35.240.163.160 - - [01/Sep/2026:00:33:00 +0200] "GET /wp-config.php HTTP/1.1" 200 31 "-" "Mozilla/5. ...
show more
35.240.163.160 - - [01/Sep/2026:00:33:00 +0200] "GET /wp-config.php HTTP/1.1" 200 31 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)"
35.240.163.160 - - [01/Sep/2026:00:33:06 +0200] "GET /sendgrid/.env.php HTTP/1.1" 404 125 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php)"
35.240.163.160 - - [01/Sep/2026:00:33:06 +0200] "GET /twilio/.env.php HTTP/1.1" 404 188 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/109.0.4283.184 Mobile Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
YF
2026-08-31 22:00:12
(10 hours ago)
Distributed subnet attack โ coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
๐ฉ๐ช
sdos.es
2026-08-31 21:41:48
(11 hours ago)
"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env"
Web App Attack
๐บ๐ธ
i553041
2026-08-31 19:05:41
(13 hours ago)
35.240.163.160 - - [31/Aug/2026:19:05:36 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh ...
show more
35.240.163.160 - - [31/Aug/2026:19:05:36 +0000] "GET / HTTP/1.1" 200 409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Firefox/150.0; compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.240.163.160 - - [31/Aug/2026:19:05:37 +0000] "GET /__aws_leak_probe_e06b1863__ HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)"
35.240.163.160 - - [31/Aug/2026:19:05:37 +0000] "GET /static../.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.942.233 Mobile Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html"
35.240.163.160 - - [31/Aug/2026:19:05:38 +0000] "GET /media../.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)"
35.240.163.160 - - [31/Aug/2026:19:05:38 +0000] "GET /@fs/proc/self/environ HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbo
...
show less
Brute-Force
SSH
๐จ๐ญ
ca
2026-08-31 11:38:12
(21 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
๐ง๐ช
sid3windr
2026-08-31 11:02:22
(21 hours ago)
GET /@fs/../.env?raw?? (Tarpitted for , wasted 120B)
Web App Attack
๐บ๐ธ
lavnet.net
2026-08-31 09:15:44
(23 hours ago)
35.240.163.160 - - [31/Aug/2026:09:15:42 +0000] "GET /__aws_leak_probe_1dd54848__ HTTP/1.1" 404 6074 ...
show more
35.240.163.160 - - [31/Aug/2026:09:15:42 +0000] "GET /__aws_leak_probe_1dd54848__ HTTP/1.1" 404 6074 "http://198.58.105.244:80/__aws_leak_probe_1dd54848__" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.3374.210 Mobile Safari/537.36; compatible; GPTBot/1.2; +https://openai.com/gptbot"
35.240.163.160 - - [31/Aug/2026:09:15:42 +0000] "GET /static../.env HTTP/1.1" 404 6074 "http://198.58.105.244:80/static../.env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Version/17.3 Safari/605.1.15"
35.240.163.160 - - [31/Aug/2026:09:15:43 +0000] "GET /@vite/env HTTP/1.1" 404 2050 "http://198.58.105.244:80/@vite/env" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.2376.71 Mobile Safari/537.36; compatible; TelegramBot/1.0"
35.240.163.160 - - [31/Aug/2026:09:15:43 +0000] "GET /aws/credentials HTTP/1.1"
...
show less
Brute-Force
Anonymous
2026-08-31 06:36:13
(1 day ago)
Bot detected scanning for vulnerable pages
Port Scan
๐บ๐ธ
kelliwic.net
2026-08-31 05:12:03
(1 day ago)
Port scan detected (F2B)
Port Scan
๐ฉ๐ช
Bedios GmbH
2026-08-31 01:48:50
(1 day ago)
Login credentials theft attempt
Hacking
๐บ๐ธ
MakoWish
2026-08-31 00:22:21
(1 day ago)
Fuzzing for misconfigured web servers.
Hacking
Web App Attack