🇺🇸
EmilGH
2026-10-21 11:36:12
(4 days ago)
35.194.196.21 - - [21/Oct/2026:11:36:10 +0000] "GET /aosh8sxfb4s7gqpwwzr2 HTTP/1.1" 404 535 "-" "Moz ...
show more
35.194.196.21 - - [21/Oct/2026:11:36:10 +0000] "GET /aosh8sxfb4s7gqpwwzr2 HTTP/1.1" 404 535 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.194.196.21 - - [21/Oct/2026:11:36:10 +0000] "GET /z9x8c7v6b5-debug-trigger-instigatortv.com HTTP/1.1" 404 535 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.194.196.21 - - [21/Oct/2026:11:36:11 +0000] "GET /webpack-stats.json HTTP/1.1" 404 535 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
35.194.196.21 - - [21/Oct/2026:11:36:11 +0000] "GET /fsr6eerb673kh2zrttow HTTP/1.1" 404 4495 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.194.196.21 - - [21/Oct/2026:11:36:11 +0000] "GET /dist/manifest.json HTTP/1.1" 404 4494 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/53
...
show less
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-10-21 11:20:37
(4 days ago)
Scanning for web/db/file exploits on www.installatiebedrijfheuvelland.nl
SQL Injection
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-10-21 11:20:17
(4 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-21 10:54:53
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-10-21 10:27:40
(4 days ago)
35.194.196.21 - - [21/Oct/2026:10:27:28 +0000] "GET /robots.txt HTTP/2.0" 403 93 "https://ccoo.cat/r ...
show more
35.194.196.21 - - [21/Oct/2026:10:27:28 +0000] "GET /robots.txt HTTP/2.0" 403 93 "https://ccoo.cat/robots.txt" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "35.194.196.21" edge="162.158.243.187"
35.194.196.21 - - [21/Oct/2026:10:27:30 +0000] "GET /asset-manifest.json HTTP/2.0" 403 34579 "https://ccoo.cat/asset-manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "35.194.196.21" edge="172.69.221.63"
35.194.196.21 - - [21/Oct/2026:10:27:30 +0000] "GET /assets/manifest.json HTTP/2.0" 403 34562 "https://ccoo.cat/assets/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "35.194.196.21" edge="172.69.221.63"
35.194.196.21 - - [21/Oct/2026:10:27:30 +0000] "GET /dist/manifest.json HTTP/2.0" 403 34552 "https://ccoo.cat/dist/manifest.json" "Mozilla/5.0 (Linux; Android 10
...
show less
Web App Attack
🇳🇱
ConsulHosting
2026-10-21 04:32:29
(4 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
2026-10-21 04:22:26
(4 days ago)
Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Web app ...
show more
Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
show less
Hacking
Web App Attack
🇨🇭
ca
2026-10-21 04:09:03
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics
Web App Attack
Bad Web Bot
🇩🇪
4server
2026-10-21 03:34:07
(4 days ago)
[WedOct2105:34:01.3673172026][security2:error][pid3332542:tid3332677][client35.194.196.21:0]ModSecur ...
show more
[WedOct2105:34:01.3673172026][security2:error][pid3332542:tid3332677][client35.194.196.21:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.spazi-web-hosting.artisteer-italia.org\"][uri\"/graphql\"][unique_id\"atgyqQvFBazmpp1Z9L4lZgAAAJg\"]\,referer:https://www.spazi-web-hosting.artisteer-italia.org
show less
Port Scan
Brute-Force
Web App Attack
🇹🇷
hostopya.com
2026-10-21 03:15:25
(4 days ago)
[plesk-apache] 6 failed attempt(s). Log: [Wed Oct 21 06:15:22.816874 2026] [authz_core:error] [pid 3 ...
show more
[plesk-apache] 6 failed attempt(s). Log: [Wed Oct 21 06:15:22.816874 2026] [authz_core:error] [pid 3415854] [client 35.194.196.21:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env|[Wed Oct 21 06:15:22.849191 2026] [authz_core:error] [pid 3415949] [client 35.194.196.21:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/gcp-credentials.json|[Wed Oct 21 06:15:22.867184 2026] [authz_core:error] [pid 3085372] [client 35.194.196.21:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/.htpasswd|[Wed Oct 21 06:15:23.895931 2026] [authz_core:error] [pid 3085375] [client 35.194.196.21:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/env|[Wed Oct 21 06:15:24.892964 2026] [authz_core:error] [pid 3085372] [client 35.194.196.21:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env.dev
show less
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-10-21 02:10:56
(4 days ago)
{"level":"info","ts":1792548654.038712,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1792548654.038712,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.194.196.21","remote_port":"49342","client_ip":"35.194.196.21","proto":"HTTP/2.0","method":"POST","host":"status.funnelcloud.services","uri":"/graphql","headers":{"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Google Chrome\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Referer":["https://status.funnelcloud.services"],"Priority":["u=1, i"],"Sec-Ch-Ua-Mobile":["?1"],"Origin":["https://status.funnelcloud.services"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"],"Sec-Fetch-Site":["same-origin"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Content-Length":["86"],"Sec-Fetch-Mode":["cors"],"Accept-Language":["en-US,en;q=0.9"],"Content-Type":["application/json"],"Sec-Ch-Ua-Platform":["\"Android\""],"Accept":["*/*"],"Sec-Fetch-Dest":["empty"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto
...
show less
DDoS Attack
Web App Attack
🇹🇷
Jova
2026-10-20 23:13:36
(4 days ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
🇳🇱
debestelapp
2026-10-20 22:40:13
(4 days ago)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-20 22:01:07
(4 days ago)
Auto-ban: >3000 req/min op 2026-10-20
Web App Attack
SSH
Hacking
🇩🇪
kkw
2026-10-20 21:17:46
(4 days ago)
[REDACTED] 35.194.196.21 - - [20/Oct/2026:23:17:45 +0200] "GET /uploads../.env HTTP/2.0" 301 393 "-" ...
show more
[REDACTED] 35.194.196.21 - - [20/Oct/2026:23:17:45 +0200] "GET /uploads../.env HTTP/2.0" 301 393 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
Web App Attack
