|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
LogGuard auto-report | score=135 | flags=web-app-attack,flood | reasons=[+35] burst_10s_hard: 272 req in 10s (threshold 100); [+20] burst_60s_suspicious: 272 req in 60s (threshold 200); [+20] burst_60s_suspicious: 272 req in 60s (threshold 200); [+10 ...
show more
LogGuard auto-report | score=135 | flags=web-app-attack,flood | reasons=[+35] burst_10s_hard: 272 req in 10s (threshold 100); [+20] burst_60s_suspicious: 272 req in 60s (threshold 200); [+20] burst_60s_suspicious: 272 req in 60s (threshold 200); [+10] error_ratio_suspicious: 60% error rate in 60s (164/272); [+25] path_diversity_severe: 241 unique paths in 60s (threshold 50)
show less
|
DDoS Attack
Web App Attack
|
|
🇩🇪
Gwyneth Llewelyn
|
|
2026/10/14 03:36:40 [error] 4060693#4060693: *3031709 access forbidden by rule, client: 35.240.206.247, server: vp-arc.org, request: "GET /files../.env HTTP/2.0", host: "vp-arc.org"
2026/10/14 03:36:40 [error] 4060693#4060693: *3031709 access forbidd ...
show more
2026/10/14 03:36:40 [error] 4060693#4060693: *3031709 access forbidden by rule, client: 35.240.206.247, server: vp-arc.org, request: "GET /files../.env HTTP/2.0", host: "vp-arc.org"
2026/10/14 03:36:40 [error] 4060693#4060693: *3031709 access forbidden by rule, client: 35.240.206.247, server: vp-arc.org, request: "GET /images../.env HTTP/2.0", host: "vp-arc.org"
2026/10/14 03:36:40 [error] 4060693#4060693: *3031709 access forbidden by rule, client: 35.240.206.247, server: vp-arc.org, request: "GET /assets../.env HTTP/2.0", host: "vp-arc.org"
show less
|
Brute-Force
Web App Attack
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
|
Web App Attack
Hacking
|
|
🇫🇷
✨
|
|
Domain : dizzyheights.org
Rule : hack
2026-10-14 01:50:24 ***hidden-privacy*** GET /proc/self/environ - 443 - 35.240.206.247 HTTP/2 Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; https://developers.facebook.com/docs/sharing/webmasters/crawler) - ...
show more
Domain : dizzyheights.org
Rule : hack
2026-10-14 01:50:24 ***hidden-privacy*** GET /proc/self/environ - 443 - 35.240.206.247 HTTP/2 Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; https://developers.facebook.com/docs/sharing/webmasters/crawler) - dizzyheights.org 404 0 0 109858 477 3899 - -
show less
|
Hacking
SQL Injection
Brute-Force
|
|
🇦🇺
aranguren.org
|
|
35.240.206.247 - - [14/Oct/2026:12:42:39 +1100] "GET /webpack-stats.json HTTP/2.0" 404 985 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
35.240.206.247 - - [14/Oct/2026:12:42:39 ...
show more
35.240.206.247 - - [14/Oct/2026:12:42:39 +1100] "GET /webpack-stats.json HTTP/2.0" 404 985 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
35.240.206.247 - - [14/Oct/2026:12:42:39 +1100] "GET /ub6ehoyzch8qsgmw23hr HTTP/2.0" 404 985 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.240.206.247 - - [14/Oct/2026:12:42:39 +1100] "GET /3mo2tx49hu0z2qw90l7t HTTP/2.0" 404 985 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
|
Bad Web Bot
|
|
🇪🇸
elcruzado.es
|
|
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.240.206.247 (SG/Singapore/247.206.240.35.bc.googleusercontent.com)
|
Bad Web Bot
|
|
🇩🇪
iGroupware
|
|
{"req/ip"=>{:discriminator=>"35.240.206.247", :count=>501, :period=>180, :limit=>500, :epoch_time=>1791934077}}
|
Web App Attack
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇫🇷
suble.org
|
|
[Tue Oct 13 22:39:08.050484 2026] [access_compat:error] [pid 568435:tid 568435] [client 35.240.206.247:57926] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/cloud/config/firebase-admin.json
[Tue Oct 13 22:39:08.244478 2026] ...
show more
[Tue Oct 13 22:39:08.050484 2026] [access_compat:error] [pid 568435:tid 568435] [client 35.240.206.247:57926] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/cloud/config/firebase-admin.json
[Tue Oct 13 22:39:08.244478 2026] [access_compat:error] [pid 573420:tid 573420] [client 35.240.206.247:49084] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/cloud/config/gcp-credentials.json
[Tue Oct 13 22:39:08.648605 2026] [access_compat:error] [pid 473411:tid 473411] [client 35.240.206.247:49134] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/cloud/config/.env
[Tue Oct 13 22:39:14.069803 2026] [access_compat:error] [pid 573500:tid 573500] [client 35.240.206.247:50274] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/cloud/data/.env
...
show less
|
Web App Attack
|
|
🇳🇿
Tripwire
|
|
Unauthorized admin access - /admin/login
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force
Web App Attack
Hacking
|
|
🇫🇷
cydit.eu
|
|
phpMyAdmin attack detected by fail2ban on thor.cydit.eu
|
Web App Attack
|
|
🇩🇪
Blexyel
|
|
35.240.206.247 - - [13/Oct/2026:20:43:31 +0200] "GET /.git/config HTTP/1.1" 422 496 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
|
Brute-Force
Web App Attack
|
|
🇲🇾
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
