🇸🇪
SkyDancer
2026-11-06 19:43:29
UTC ·
(6 hours ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
Hacking
Brute-Force
🇩🇪
LRob
2026-11-06 19:30:54
UTC ·
(6 hours ago)
Wordlist path sweep | method: GET | path: /.vite/manifest.json, /rck8by1oc5s3cllw1zfn, /1fa51vsq799n3cs9s957 (+3 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36, Mozilla/5.0 ...
show more
Wordlist path sweep | method: GET | path: /.vite/manifest.json, /rck8by1oc5s3cllw1zfn, /1fa51vsq799n3cs9s957 (+3 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)
show less
Port Scan
Web App Attack
🇩🇪
ghostwarriors
2026-11-06 19:20:08
UTC ·
(6 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇫🇷
Murazaki
2026-11-06 18:59:58
UTC ·
(7 hours ago)
cloud.balamb.fr 35.187.153.115 - - [06/Nov/2026:19:59:57 +0100] "-" 500 170 "-" "-" "-"
...
Hacking
🇹🇷
Jova
2026-11-06 18:52:23
UTC ·
(7 hours ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇩🇪
Holger
2026-11-06 18:29:01
UTC ·
(7 hours ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 17:36:06
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.187.153.115 (115.153.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:35:58.947448 2026] [security2:error] [pid 1880260: ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.153.115 (115.153.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:35:58.947448 2026] [security2:error] [pid 1880260:tid 1880274] [client 35.187.153.115:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.peluqueriabuhos.com"] [uri "/.env.development"] [unique_id "au4P_l8v7VaKrU_39sv4hwAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
niedson
2026-11-06 17:30:01
UTC ·
(8 hours ago)
Automated scanning for exposed secrets: repeated requests for multiple distinct credential paths (.env variants, .git metadata, .ssh private keys, .aws/credentials). Unsolicited. Reported automatically.
Web App Attack
🇺🇸
mnsf
2026-11-06 17:05:20
UTC ·
(9 hours ago)
Too many Status 40X (15)
Scanning/Probing (14)
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-11-06 14:51:27
UTC ·
(11 hours ago)
{"level":"info","ts":1793976687.4880257,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"35.187.153.115","remote_port":"32844","client_ip":"35.187.153.115","proto":"HTTP/2.0","method":"GET","host":"pdyb.status.updown.io ...
show more
{"level":"info","ts":1793976687.4880257,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"35.187.153.115","remote_port":"32844","client_ip":"35.187.153.115","proto":"HTTP/2.0","method":"GET","host":"pdyb.status.updown.io","uri":"/rush.json","headers":{"X-Remote-Addr":["172.29.223.116"],"X-Client-Ip":["172.29.223.116"],"X-Real-Ip":["172.29.223.116"],"User-Agent":["CCBot/2.0 (https://commoncrawl.org/faq/)"],"X-Forwarded-For":["172.29.223.116"],"Forwarded":["for=172.29.223.116"],"X-Remote-Ip":["172.29.223.116"],"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Cookie":["REDACTED"],"Cluster-Client-Ip":["172.29.223.116"],"X-Originating-Ip":["172.29.223.116"],"X-Proxyuser-Ip":["172.29.223.116"],"True-Client-Ip":["172.29.223.116"],"Accept":["*/*"],"X-Custom-Ip-Authorization":[
...
show less
DDoS Attack
Web App Attack
🇬🇧
noise.agency
2026-11-06 14:39:50
UTC ·
(11 hours ago)
35.187.153.115 (TW/Taiwan/115.153.187.35.bc.googleusercontent.com), more than 10 Apache 403 hits
Hacking
🇧🇪
taivas.nl
2026-11-06 14:32:09
UTC ·
(11 hours ago)
Bad_requests
Bad Web Bot
🇳🇱
Alt255
2026-11-06 14:30:16
UTC ·
(11 hours ago)
[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 35.187.153.115 - - \[06/Nov/2026:15:29:58 +0100\] "GET /z9x8c7v6b5-debug-trigger-docker.peelbergh.nl HTTP/1.1" 404 2105 "-" "Mozilla/5.0 ...
show more
[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 35.187.153.115 - - \[06/Nov/2026:15:29:58 +0100\] "GET /z9x8c7v6b5-debug-trigger-docker.peelbergh.nl HTTP/1.1" 404 2105 "-" "Mozilla/5.0 \(compatible\; ChatGLM-Spider/1.0\; +https://zhipuai.cn/\)"
35.187.153.115 - - \[06/Nov/2026:15:29:58 +0100\] "GET /clits0onbssraaj64yc2 HTTP/1.1" 404 2105 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Claude-SearchBot/1.0\; [email protected] \)"
35.187.153.115 - - \[06/Nov/2026:15:29:59 +0100\] "GET /jmm63jo4vohannbaysuq HTTP/1.1" 404 2105 "-" "Mozilla/5.0 \(compatible\; Meta-ExternalFetcher/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)"
35.187.153.115 - - \[06/Nov/2026:15:29:59 +0100\] "POST /graphql HTTP/1.1"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-06 14:13:39
UTC ·
(12 hours ago)
Try to access /.git/config%3F.css
Web App Attack
🇻🇳
hoangviet88vn
2026-11-06 14:05:06
UTC ·
(12 hours ago)
Coraza WAF auto-report: 402 blocked req in 70min, e.g. '/api/.env.bak' (CRS: 920450,949110,920440,930130,934100,930100,930110,932160,920500,930120). Automated scanner/exploit probing.
Web App Attack
Hacking
