๐ซ๐ฎ
Christopher Hughes
2026-07-26 12:51:07
(7 minutes ago)
35.245.52.152 - - [26/Jul/2026:13:51:07 +0100] "GET /z9x8c7v6b5-debug-trigger-cms.tmxnews.co.uk HTTP ...
show more
35.245.52.152 - - [26/Jul/2026:13:51:07 +0100] "GET /z9x8c7v6b5-debug-trigger-cms.tmxnews.co.uk HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-07-26 11:37:59
(1 hour ago)
35.245.52.152 - - [26/Jul/2026:12:37:58 +0100] "GET /.aws/credentials HTTP/2.0" 404 246 "-" "Mozilla ...
show more
35.245.52.152 - - [26/Jul/2026:12:37:58 +0100] "GET /.aws/credentials HTTP/2.0" 404 246 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ญ๐บ
DumaNet
2026-07-26 11:26:00
(1 hour ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 26. 12:49:09
Source IP: 35.245 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 26. 12:49:09
Source IP: 35.245.52.152
Portion of the log(s):
35.245.52.152 - [26/Jul/2026:12:49:09 +0200] "GET /.git-credentials HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.245.52.152 - [26/Jul/2026:12:49:09 +0200] "GET /.env.old HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.245.52.152 - [26/Jul/2026:12:49:09 +0200] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.245.52.152 - [26/Jul/2026:12:49:09 +0200] "GET /.env.local HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.245.52.152 - [26/Jul/2026:12:49:09 +0200] "GET /.env.backup HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWeb
show less
Web App Attack
Hacking
๐ซ๐ฎ
Christopher Hughes
2026-07-26 10:41:06
(2 hours ago)
35.245.52.152 - - [26/Jul/2026:11:41:06 +0100] "GET /gcp-credentials.json HTTP/2.0" 404 269 "-" "Moz ...
show more
35.245.52.152 - - [26/Jul/2026:11:41:06 +0100] "GET /gcp-credentials.json HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
Anonymous
2026-07-26 07:54:54
(5 hours ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-config.php.bak
Web App Attack
๐ณ๐ฑ
Site.eu
2026-07-26 06:44:27
(6 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฎ๐ณ
evicky2002
2026-07-26 06:00:00
(6 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ซ๐ท
dynamix
2026-07-26 03:28:09
(9 hours ago)
Multiple WAF Violations
Web App Attack
๐ช๐ธ
el-brujo
2026-07-26 02:15:03
(10 hours ago)
[Sun Jul 26 04:15:03.136085 2026] [proxy_fcgi:error] [pid 324688:tid 324733] [remote 35.245.52.152:0 ...
show more
[Sun Jul 26 04:15:03.136085 2026] [proxy_fcgi:error] [pid 324688:tid 324733] [remote 35.245.52.152:0] AH01071: Got error 'Primary script unknown\n'
[Sun Jul 26 04:15:03.227859 2026] [proxy_fcgi:error] [pid 302119:tid 302211] [remote 35.245.52.152:0] AH01071: Got error 'Primary script unknown\n'
...
show less
Hacking
Web App Attack
Anonymous
2026-07-25 21:17:49
(15 hours ago)
Automatically blocked after 11 security events. Observed repeated web application attack probes. Sou ...
show more
Automatically blocked after 11 security events. Observed repeated web application attack probes. Source: Cloudflare security controls.
show less
Hacking
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-07-25 17:37:08
(19 hours ago)
Try to access /.git/config
Web App Attack
Anonymous
2026-07-25 15:21:33
(21 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.245.52.152 (US/United States/152.52. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.245.52.152 (US/United States/152.52.245.35.bc.googleusercontent.com)
show less
SQL Injection
๐ซ๐ท
IRISIO
2026-07-25 13:29:15
(23 hours ago)
scans/SQL injection/spam posts : 1592 queries
Web App Attack
SQL Injection
๐ซ๐ท
Thaliruth
2026-07-25 13:23:47
(23 hours ago)
35.245.52.152 - - [25/Jul/2026:15:23:46 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 403 5988 "-" "Mozilla/ ...
show more
35.245.52.152 - - [25/Jul/2026:15:23:46 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 403 5988 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.245.52.152 - - [25/Jul/2026:15:23:46 +0200] "GET /.git/HEAD HTTP/1.1" 403 5988 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] )"
...
show less
Brute-Force
Web App Attack
๐ซ๐ท
bazter.pro
2026-07-25 12:36:29
(1 day ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack