This IP address has been reported a total of
24
times from
22 distinct
sources.
35.196.34.238 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
CrowdSec: scanning for vulnerable or sensitive paths. Scenario=crowdsecurity/http-probing; events=11 ...
show moreCrowdSec: scanning for vulnerable or sensitive paths. Scenario=crowdsecurity/http-probing; events=11; window=2026-10-16T17:07:42.147179542Z .. 2026-10-16T17:07:42.755155531Z. Tried: GET /robots.txt | GET /qsvn24d535u2rfq5g55w | GET /build/manifest.json | GET /dist/.vite/manifest.json | GET /.vite/manifest.json | GET /7ddzpqu7m38nok112srh | GET /dist/manifest.json | GET /....//....//....//..../.env | GET /app/..;/.env | GET /....//....//....//..../proc/self/environ (+1 more). Automated report, no manual review.
show less
Web app attack: 7 requests for known vulnerable paths (.env, xmlrpc.php, web shells, config backups) ...
show moreWeb app attack: 7 requests for known vulnerable paths (.env, xmlrpc.php, web shells, config backups) within one hour. Reported automatically by BotZoom.
show less
ModSecurity detection - Rules: 920450(HTTP header is restricted by policy (/x-middleware-subrequest/ ...
show moreModSecurity detection - Rules: 920450(HTTP header is restricted by policy (/x-middleware-subrequest/))
show less
{"level":"info","ts":1792165422.57979,"logger":"http.log.access.log1","msg":"handled request","reque ...
show more{"level":"info","ts":1792165422.57979,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.196.34.238","remote_port":"41994","client_ip":"35.196.34.238","proto":"HTTP/2.0","method":"GET","host":"status.pasarella.eu","uri":"/asset-manifest.json","headers":{"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Priority":["u=0, i"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Mode":["navigate"],"X-Nextjs-Data":["1"],"Sec-Fetch-Dest":["document"],"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\""],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Ch-Ua-Platform":["\"Linux\""],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:
...
show less
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ...
show moreBlocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Google LLC (US), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 49/100.
show less
Bad Web Bot
Web App Attack
Showing 1 to
15
of 24 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩