🇩🇪
updown.io
2026-10-22 17:51:53
(6 hours ago)
{"level":"info","ts":1792691510.730356,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1792691510.730356,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.240.192.10","remote_port":"48670","client_ip":"35.240.192.10","proto":"HTTP/2.0","method":"GET","host":"status.blank.no","uri":"/dist/manifest.json","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Fetch-User":["?1"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"Accept-Language":["en-US,en;q=0.9"],"Upgrade-Insecure-Requests":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\"
...
show less
DDoS Attack
Web App Attack
2026-10-22 16:19:29
(7 hours ago)
Aggressive web scan
Web App Attack
🇳🇴
ScamAware
2026-10-22 15:14:04
(8 hours ago)
Fail2Ban: scanning web server by bare IP address
Port Scan
Bad Web Bot
🇩🇪
ghostwarriors
2026-10-22 14:20:19
(9 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-10-22 14:09:21
(10 hours ago)
35.240.192.10 - - [22/Oct/2026:16:09:19 +0200] "GET /signin HTTP/2.0" 404 31026 "-" "Mozilla/5.0 (Wi ...
show more
35.240.192.10 - - [22/Oct/2026:16:09:19 +0200] "GET /signin HTTP/2.0" 404 31026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
35.240.192.10 - - [22/Oct/2026:16:09:19 +0200] "GET /admin/login HTTP/2.0" 404 31026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
35.240.192.10 - - [22/Oct/2026:16:09:19 +0200] "GET /signup HTTP/2.0" 404 31026 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
35.240.192.10 - - [22/Oct/2026:16:09:19 +0200] "GET /login HTTP/2.0" 302 57 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
35.240.192.10 - - [22/Oct/2026:16:09:19 +0200] "GET /auth HTTP/2.0" 404 31035 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,
show less
Bad Web Bot
🇳🇴
ScamAware
2026-10-22 14:05:11
(10 hours ago)
Fail2Ban: probing for .env/.git/wp-login and similar
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-22 14:05:02
(10 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
konseptit
2026-10-22 13:57:35
(10 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.240.192.10 (SG/Singapore/10.192.240. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.240.192.10 (SG/Singapore/10.192.240.35.bc.googleusercontent.com)
show less
SQL Injection
🇳🇴
jad-abuse
2026-10-22 13:53:35
(10 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, path_traversal, aws_creds, ssh_keys, dotfile_probe, source_backup. Observed by 1 sensor(s); 294 hits.
show less
Web App Attack
🇹🇷
rtbh.com.tr
2024-09-09 20:54:48
(2 years ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇹🇷
rtbh.com.tr
2024-09-07 20:54:52
(2 years ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇧🇪
cmbplf
2024-09-06 12:24:27
(2 years ago)
3.172 requests to */xmlrpc.php
361 requests to */wp-includes/wlwmanifest.xml
Brute-Force
Bad Web Bot
🇦🇺
MAGIC
2024-09-06 12:02:16
(2 years ago)
VM1 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2024-09-06 11:27:13
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 35.240.192.10 (10.192.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:225170) triggered by 35.240.192.10 (10.192.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 06 07:27:08.700186 2024] [security2:error] [pid 27410:tid 27410] [client 35.240.192.10:56577] [client 35.240.192.10] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||jamesmsmall.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "jamesmsmall.com"] [uri "/blog/wp-json/wp/v2/users/"] [unique_id "ZtrnDFL_xnD9JsjBvnWB4wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Dolphi
2024-09-06 11:20:03
(2 years ago)
POST //xmlrpc.php
Brute-Force
Web App Attack