🇧🇪
cmbplf
2026-06-13 04:00:49
(1 week ago)
3.922 requests from abuseipdb.com blacklisted IP (6mos4w19h)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 18:41:58
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (110.19.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (110.19.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 14:41:51.621943 2026] [security2:error] [pid 26517:tid 26539] [client 35.198.19.110:45016] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.juantrece.com.emehache.net|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.juantrece.com.emehache.net"] [uri "/.config/gcloud/credentials.db"] [unique_id "aihebw2h4JVEV_D2vtxLbAAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 17:44:06
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (110.19.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (110.19.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 13:44:01.007001 2026] [security2:error] [pid 8321:tid 8343] [client 35.198.19.110:52146] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.louisgfazzi.jd-web-designs.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.louisgfazzi.jd-web-designs.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aihQ4auOi0AMJs_I6g4hFAAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-06-09 17:28:02
(2 weeks ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
2026-06-09 17:05:11
(2 weeks ago)
Aggressive web scan
Web App Attack
🇬🇧
Apache
2026-06-09 16:30:25
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (BR/Brazil/110.19.198.35.bc.googl ...
show more
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (BR/Brazil/110.19.198.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇨🇦
Mediashaker
2026-06-09 12:03:37
(2 weeks ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 35.198.19.110 (BR/Brazil ...
show more
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 35.198.19.110 (BR/Brazil/110.19.198.35.bc.googleusercontent.com)
show less
Port Scan
🇺🇸
TPI-Abuse
2026-06-09 11:56:17
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (110.19.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (110.19.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:56:14.499914 2026] [security2:error] [pid 26976:tid 26976] [client 35.198.19.110:49552] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mhservice.mayan.abecasis.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mhservice.mayan.abecasis.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aif_XqknMUrxSzU2dTTbXwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-06-09 08:27:15
(2 weeks ago)
Web scanning / probing for vulnerable paths | URL: /server.xml | Evidence: altovolta.es 35.198.19.11 ...
show more
Web scanning / probing for vulnerable paths | URL: /server.xml | Evidence: altovolta.es 35.198.19.110 - - [09/Jun/2026:10:26:06 +0200] \"GET /server.xml HTTP/1.1\" 404 208 \"-\" \"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36\" GEOIP_COUNTRY_CODE=BR | ASN: GOOGLE-CLOUD-PLATFORM | Country: BR
show less
Port Scan
Web App Attack
🇨🇭
Origon
2026-06-09 08:24:59
(2 weeks ago)
http-crawl-non_statics - IP: 35.198.19.110 - time="2026-06-09T10:24:58+02:00" level=info msg="(555f ...
show more
http-crawl-non_statics - IP: 35.198.19.110 - time="2026-06-09T10:24:58+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-crawl-non_statics by ip 35.198.19.110 (BR/396982) : 4h ban on Ip 35.198.19.110" module=db
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 08:24:04
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (110.19.198.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.198.19.110 (110.19.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:23:58.407059 2026] [security2:error] [pid 28972:tid 28972] [client 35.198.19.110:43044] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||elizabeth-furlow.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "elizabeth-furlow.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aifNnmeblaboKA3i1Rg1cwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-09 06:54:13
(2 weeks ago)
Restricted File Access Attempt. Matched phrase ".aws/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
2026-06-09 06:19:15
(2 weeks ago)
(caddyscan) Scanner path probe from 35.198.19.110 (BR/Brazil/110.19.198.35.bc.googleusercontent.com) ...
show more
(caddyscan) Scanner path probe from 35.198.19.110 (BR/Brazil/110.19.198.35.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 35.198.19.110 - - [09/Jun/2026:06:19:13 +0000] "GET /actuator/httptrace HTTP/1.1"
[REDACTED] 200 2627 35.198.19.110 - - [09/Jun/2026:06:19:13 +0000] "GET /server/actuator/env HTTP/1.1"
[REDACTED] 200 2627 35.198.19.110 - - [09/Jun/2026:06:19:13 +0000] "GET /v1/actuator/env HTTP/1.1"
[REDACTED] 200 2627 35.198.19.110 - - [09/Jun/2026:06:19:13 +0000] "GET /actuator/configprops HTTP/1.1"
[REDACTED] 200 2627 35.198.19.110 - - [09/Jun/2026:06:19:13 +0000] "GET /backend/actuator/env HTTP/1.1"
show less
Port Scan
🇺🇸
mnsf
2026-06-09 06:07:10
(2 weeks ago)
Too many Status 40X (11)
Scanning/Probing (61)
Request Overload (383)
Brute-Force
Web App Attack
🇷🇴
iulianh
2026-06-09 03:38:10
(2 weeks ago)
*
Brute-Force
SSH