🇧🇬
HighWay
2026-09-19 14:14:57
UTC ·
(1 month ago)
35.201.152.104 - - [19/Sep/2026:14:14:53 +0000] "GET /.git/HEAD HTTP/1.1" 403 4810 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.201.152.104 - - [19/Sep/2026:14:14:53 +0000] "GET /.git/config HTTP/1.1 ...
show more
35.201.152.104 - - [19/Sep/2026:14:14:53 +0000] "GET /.git/HEAD HTTP/1.1" 403 4810 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.201.152.104 - - [19/Sep/2026:14:14:53 +0000] "GET /.git/config HTTP/1.1" 403 4809 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.201.152.104 - - [19/Sep/2026:14:14:53 +0000] "GET /.env HTTP/1.1" 403 421 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Port Scan
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 03:03:49
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.201.152.104 (104.152.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 23:03:43.838240 2026] [security2:error] [pid 17395:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.152.104 (104.152.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 23:03:43.838240 2026] [security2:error] [pid 17395:tid 17422] [client 35.201.152.104:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.raytbrown.com"] [uri "/.git/config"] [unique_id "aq37j_boj3CEtM_EIDfWVQAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-18 21:59:07
UTC ·
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-17.
Web App Attack
SSH
Hacking
🇳🇱
Savvii
2026-09-18 20:25:09
UTC ·
(1 month ago)
20 attempts against mh-misbehave-ban on melon
Brute-Force
Bad Web Bot
Web App Attack
🇦🇪
CG
2026-09-18 16:31:08
UTC ·
(1 month ago)
Web application attack, Automated scan
Web App Attack
Hacking
SQL Injection
🇮🇩
Burayot
2026-09-18 14:53:24
UTC ·
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.201.152.104 (TW/Taiwan/104.152.201.35.bc.googleusercontent.com): 2 in the last 3600 secs
Web App Attack
🇫🇷
dynamix
2026-09-18 14:45:02
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇨🇭
dalslab ltd
2026-09-18 13:33:33
UTC ·
(1 month ago)
[18/Sep/2026:15:33:31 +0200] - 404 404 - GET https ai.dalslab.com "/static/manifest.json" [Client 35.201.152.104] [Length 22] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ...
show more
[18/Sep/2026:15:33:31 +0200] - 404 404 - GET https ai.dalslab.com "/static/manifest.json" [Client 35.201.152.104] [Length 22] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-"
[18/Sep/2026:15:33:32 +0200] - 405 405 - POST https ai.dalslab.com "/graphql" [Client 35.201.152.104] [Length 31] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "https://ai.dalslab.com"
[18/Sep/2026:15:33:32 +0200] - 404 404 - GET https ai.dalslab.com "/static//.env" [Client 35.201.152.104] [Length 22] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "-"
[18/Sep/2026:15:33:32 +0200] - 404 404 - GET https ai.dalslab.com "/static//app/.env" [Client 35.201.152.104] [Length 22] [Gzip -] [Sent-to 10.1.1.246] "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https:/
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
2026-09-18 11:01:10
UTC ·
(1 month ago)
Web App Attack
🇩🇪
raph
2026-09-18 02:21:04
UTC ·
(1 month ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-09-17 23:56:04
UTC ·
(1 month ago)
{"level":"info","ts":1789689358.0557857,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.201.152.104","remote_port":"50660","client_ip":"35.201.152.104","proto":"HTTP/2.0","method":"POST","host":"eu.pandahut.net","ur ...
show more
{"level":"info","ts":1789689358.0557857,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.201.152.104","remote_port":"50660","client_ip":"35.201.152.104","proto":"HTTP/2.0","method":"POST","host":"eu.pandahut.net","uri":"/graphql","headers":{"Priority":["u=1, i"],"Accept-Language":["en-US,en;q=0.9"],"Accept":["*/*"],"Sec-Fetch-Mode":["cors"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Dest":["empty"],"Content-Length":["86"],"Cookie":["REDACTED"],"Sec-Fetch-Site":["same-origin"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Mobile":["?0"],"Content-Type":["application/json"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Referer":["https://eu.pandahut.net"],"Origin":["https://eu.pandahut.net"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Brave\";v=\"152\""]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_nam
...
show less
DDoS Attack
Web App Attack
🇮🇹
VHosting
2026-09-17 22:30:04
UTC ·
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-17 22:22:15
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-09-17 21:48:44
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇺🇸
deskpass.com
2026-09-17 17:13:32
UTC ·
(1 month ago)
POST /icecoder/lib/terminal-xhr.php
Web App Attack
