🇳🇱
e.fierstra
2026-09-19 12:59:04
(16 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇩🇪
Séfora Srl
2026-09-18 20:23:12
(1 day ago)
crowdsecurity/http-sensitive-files detected by CrowdSec
Web App Attack
Anonymous
2026-09-18 16:07:03
(1 day ago)
Automated web scanner. Requested suspicious paths: /auth/login | /login | /.aws/credentials | /accou ...
show more
Automated web scanner. Requested suspicious paths: /auth/login | /login | /.aws/credentials | /account/login. UTC: 2026-09-18 15:41:17.
show less
Web App Attack
🇳🇱
e.fierstra
2026-09-18 10:22:17
(1 day ago)
excessive HTTP 404 errors
Bad Web Bot
🇫🇷
dynamix
2026-09-18 10:02:47
(1 day ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Alt255
2026-09-18 07:28:35
(1 day ago)
[ti-07al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-07al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.185.31.138 - - [18/Sep/2026:09:28:15 +0200] "GET /api/config HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
35.185.31.138 - - [18/Sep/2026:09:28:15 +0200] "GET /z9x8c7v6b5-debug-trigger-account.businesspsr.com HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
35.185.31.138 - - [18/Sep/2026:09:28:15 +0200] "GET /api/v1/settings HTTP/1.1" 404 7386 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.185.31.138 - - [18/Sep/2026:09:28:15 +0200] "GET /settings.json HTTP/1.1" 404 7386 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://de
...
show less
Bad Web Bot
Web App Attack
🇦🇺
HostFission
2026-09-18 07:01:51
(1 day ago)
PSAD port scan detected
Port Scan
🇮🇩
sockominfo
2026-09-18 02:00:47
(2 days ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Email Spam
🇬🇧
Marten Mark
2026-09-17 22:43:24
(2 days ago)
35.185.31.138 - - [17/Sep/2026:22:43:22 +0000] "GET /.vite/manifest.json HTTP/2.0" 404 5335 "-" "Moz ...
show more
35.185.31.138 - - [17/Sep/2026:22:43:22 +0000] "GET /.vite/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36"
35.185.31.138 - - [17/Sep/2026:22:43:22 +0000] "GET /dist/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36"
35.185.31.138 - - [17/Sep/2026:22:43:22 +0000] "GET /dist/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36"
35.185.31.138 - - [17/Sep/2026:22:43:22 +0000] "GET /build/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36"
35.185.31.138 - - [17/Sep/2026:22:43:22 +0000] "GET /build/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, lik
...
show less
Port Scan
Web App Attack
🇳🇱
Alt255
2026-09-17 22:42:51
(2 days ago)
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.185.31.138 - - [18/Sep/2026:00:42:39 +0200] "GET /backend/.env HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-17 22:21:59
(2 days ago)
Brute-Force
Web App Attack
🇺🇸
[email protected]
2026-09-17 16:19:52
(2 days ago)
CrowdSec ban: crowdsecurity/unifi-flood-detection (duration: 71h59m49s)
Port Scan
Anonymous
2026-09-17 14:45:19
(2 days ago)
[Thu Sep 17 16:45:18.631621 2026] [proxy_fcgi:error] [pid 389614:tid 389677] [remote 35.185.31.138:5 ...
show more
[Thu Sep 17 16:45:18.631621 2026] [proxy_fcgi:error] [pid 389614:tid 389677] [remote 35.185.31.138:50906] AH01071: Got error 'Primary script unknown'
[Thu Sep 17 16:45:18.663305 2026] [proxy_fcgi:error] [pid 389614:tid 389659] [remote 35.185.31.138:50906] AH01071: Got error 'Primary script unknown'
[Thu Sep 17 16:45:18.663305 2026] [proxy_fcgi:error] [pid 389614:tid 389648] [remote 35.185.31.138:50906] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-09-17 13:24:50
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.185.31.138 (US/United States/138. ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.185.31.138 (US/United States/138.31.185.35.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
🇳🇱
Savvii
2026-09-17 11:43:40
(2 days ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack