๐ฌ๐ง
PeravixGroup
2026-08-22 06:00:03
(5 minutes ago)
Imunify360 WAF block (graylisted)
Web App Attack
Anonymous
2026-08-22 05:06:27
(59 minutes ago)
35.243.184.64 - - [22/Aug/2026:00:06:25 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWe ...
show more
35.243.184.64 - - [22/Aug/2026:00:06:25 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot)" 35.243.184.64
35.243.184.64 - - [22/Aug/2026:00:06:25 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot)" 35.243.184.64
35.243.184.64 - - [22/Aug/2026:00:06:25 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot)" 35.243.184.64
35.243.184.64 - - [22/Aug/2026:00:06:25 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.com/gptbot)" 35.243.184.64
35.243.184.64 - - [22/Aug/2026:00:06:25 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.0; +https://openai.
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-22 04:14:54
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.243.184.64 (64.184.243.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.184.64 (64.184.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 00:14:49.767185 2026] [security2:error] [pid 30015:tid 30015] [client 35.243.184.64:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bbproductionsonline.com"] [uri "/.env.js"] [unique_id "aokiOdIh_bpGKRcuhaCwUgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-08-22 03:49:04
(2 hours ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.243.184.64 (US/United States/64.18 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.243.184.64 (US/United States/64.184.243.35.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
Hacking
๐ฌ๐ง
Apache
2026-08-22 00:25:35
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.243.184.64 (US/United States/64.184.243.35.b ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.184.64 (US/United States/64.184.243.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
๐ฑ๐ป
garmtech.com
2026-08-22 00:24:42
(5 hours ago)
Attempted access to sensitive endpoint (/config/master.key) detected. Automated scan or unauthorized ...
show more
Attempted access to sensitive endpoint (/config/master.key) detected. Automated scan or unauthorized probing.
show less
Web App Attack
Anonymous
2026-08-21 23:40:14
(6 hours ago)
35.243.184.64 - - [22/Aug/2026:01:40:14 +0200] "GET /.aws/credentials HTTP/1.1" 403 124 "-" "Mozilla ...
show more
35.243.184.64 - - [22/Aug/2026:01:40:14 +0200] "GET /.aws/credentials HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.243.184.64 - - [22/Aug/2026:01:40:14 +0200] "GET /.aws/config HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.243.184.64 - - [22/Aug/2026:01:40:14 +0200] "GET /wp-json HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.243.184.64 - - [22/Aug/2026:01:40:14 +0200] "GET /__/firebase/init.json HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.243.184.64 - - [22/Aug/2026:01:40:14 +0200] "GET /assets/manifest.json HTTP/1.1" 404 184 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
35.243.184.64 - - [22/Aug/2026:01:40:14 +0200] "GET /z9x8c7v6b5-debug-trigger
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ฎ
NoaQT
2026-08-21 22:28:37
(7 hours ago)
2026-08-21T22:28:36.277460+00:00 ingress-1 haproxy[16887]: 35.243.184.64:36038 [21/Aug/2026:22:28:36 ...
show more
2026-08-21T22:28:36.277460+00:00 ingress-1 haproxy[16887]: 35.243.184.64:36038 [21/Aug/2026:22:28:36.276] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 74/74/0/0/0 0/0 "GET https://www.benigarautomocion.com/.gitlab-ci.yml HTTP/2.0"
2026-08-21T22:28:36.352996+00:00 ingress-1 haproxy[16887]: 35.243.184.64:36038 [21/Aug/2026:22:28:36.352] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 74/74/0/0/0 0/0 "POST https://www.benigarautomocion.com/v1/graphql HTTP/2.0"
2026-08-21T22:28:36.368894+00:00 ingress-1 haproxy[16887]: 35.243.184.64:36038 [21/Aug/2026:22:28:36.367] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 74/74/0/0/0 0/0 "GET https://www.benigarautomocion.com/.env HTTP/2.0"
2026-08-21T22:28:36.373676+00:00 ingress-1 haproxy[16887]: 35.243.184.64:36038 [21/Aug/2026:22:28:36.372] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 74/74/0/0/0 0/0 "GET https://www.benigarautomocion.com/.github/workflows/deploy.yml HTTP/2.0"
2026-08-21T22:28:36.373899+
...
show less
DDoS Attack
๐บ๐ธ
Ar1s
2026-08-21 22:12:19
(7 hours ago)
[1:2610542] TGI HUNT gitrepo HTTP Probe ::: Port: 80/TCP
Exploited Host
๐ซ๐ฎ
NoaQT
2026-08-21 21:39:30
(8 hours ago)
2026-08-21T21:39:30.328470+00:00 ingress-1 haproxy[16887]: 35.243.184.64:53048 [21/Aug/2026:21:39:30 ...
show more
2026-08-21T21:39:30.328470+00:00 ingress-1 haproxy[16887]: 35.243.184.64:53048 [21/Aug/2026:21:39:30.327] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 89/89/0/0/0 0/0 "GET https://www.benigarautomocion.com/.git-credentials HTTP/2.0"
2026-08-21T21:39:30.419661+00:00 ingress-1 haproxy[16887]: 35.243.184.64:53048 [21/Aug/2026:21:39:30.419] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 89/89/0/0/0 0/0 "GET https://www.benigarautomocion.com/.gitconfig HTTP/2.0"
2026-08-21T21:39:30.429726+00:00 ingress-1 haproxy[16887]: 35.243.184.64:53048 [21/Aug/2026:21:39:30.429] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 89/89/0/0/0 0/0 "POST https://www.benigarautomocion.com/v1/graphql HTTP/2.0"
2026-08-21T21:39:30.437905+00:00 ingress-1 haproxy[16887]: 35.243.184.64:53048 [21/Aug/2026:21:39:30.437] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 89/89/0/0/0 0/0 "GET https://www.benigarautomocion.com/.github/workflows/deploy.yml HTTP/2.0"
2026-08-21T21:39:30
...
show less
DDoS Attack
๐ซ๐ท
masterguru
2026-08-21 21:24:06
(8 hours ago)
Restricted File Access Attempt. Matched phrase ".aws/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐จ๐ญ
๐จ๐ญ Hosting
2026-08-21 05:10:33
(1 day ago)
Automated WAF report: 100-125 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
Anonymous
2026-08-21 05:06:31
(1 day ago)
Trying to access config files
Web App Attack
๐ธ๐ช
vaia.cloud
2026-08-21 01:25:02
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ฉ๐ช
Philister11
2026-08-21 01:24:25
(1 day ago)
CrowdSec: crowdsecurity/http-crawl-non_statics (US/AS396982)
Bad Web Bot
Web App Attack