🇳🇱
Site.eu
2026-10-18 08:01:51
UTC ·
(3 weeks ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
iwle
2026-10-14 20:15:10
UTC ·
(3 weeks ago)
[Wed Oct 14 16:15:05.101448 2026] [:error] [pid 1794401:tid 1794452] [client 35.221.55.38:0] [client 35.221.55.38] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATI ...
show more
[Wed Oct 14 16:15:05.101448 2026] [:error] [pid 1794401:tid 1794452] [client 35.221.55.38:0] [client 35.221.55.38] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mail.ufscards.com"] [uri "/static../.env"] [unique_id "as_iySFhuHMj0UjR331hmwAAARc"]
[Wed Oct 14 16:15:05.128954 2026] [:error] [pid 1681308:tid 1681389] [client 35.221.55.38:0] [client 35.221.55.38] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [
...
show less
Web App Attack
🇳🇱
debestelapp
2026-10-14 19:25:09
UTC ·
(3 weeks ago)
Web App Attack
🇫🇷
IRISIO
2026-10-14 18:07:54
UTC ·
(3 weeks ago)
scans/SQL injection/spam posts : 38468 queries
Web App Attack
SQL Injection
🇺🇸
TPI-Abuse
2026-10-14 16:42:37
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.221.55.38 (38.55.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:42:32.911394 2026] [security2:error] [pid 4285:tid 430 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.221.55.38 (38.55.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 12:42:32.911394 2026] [security2:error] [pid 4285:tid 4307] [client 35.221.55.38:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.uoexpanse.com"] [uri "/assets../.env"] [unique_id "as-w-N-i6T4e0e6mXNQmCwAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
gadix
2026-10-14 15:08:13
UTC ·
(3 weeks ago)
[14/Oct/2026:17:08:11.218871 +0200] as-a2-3xHtBfOMufRvf79wAAAEc 35.221.55.38 57330 127.0.0.1 7081
[14/Oct/2026:17:08:12.084018 +0200] as-a3O3xHtBfOMufRvf8AwAAAE0 35.221.55.38 57522 127.0.0.1 7081
[14/
...
Web App Attack
🇳🇱
Brict IT
2026-10-14 15:05:33
UTC ·
(3 weeks ago)
DDoS Attack
FTP Brute-Force
🇩🇪
Gwyneth Llewelyn
2026-10-14 14:19:10
UTC ·
(3 weeks ago)
35.221.55.38 - - [14/Oct/2026:15:19:08 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://o ...
show more
35.221.55.38 - - [14/Oct/2026:15:19:08 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
show less
Bad Web Bot
🇧🇷
radardatelecom
2026-10-14 14:16:03
UTC ·
(3 weeks ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇦🇺
AWW-Admin
2026-10-14 14:09:02
UTC ·
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 35.221.55.38 (US/United States/38.55.221.35.bc.googleusercontent.com)
SQL Injection
🇺🇸
jormaster3k
2026-10-14 14:07:48
UTC ·
(3 weeks ago)
Attack against Apache (too many 404s)
Web App Attack
🇪🇸
masterguru
2026-10-14 14:01:00
UTC ·
(3 weeks ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
Hacking
🇧🇬
HighWay
2026-10-14 13:14:37
UTC ·
(3 weeks ago)
35.221.55.38 - - [14/Oct/2026:13:14:34 +0000] "GET /z0ubecmtcwn2wvyyhlzh HTTP/1.1" 404 595 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.221.55.38 - - [14/Oct/2026:13:14:34 +0000] "GET /$2 HTTP/1.1" 404 595 "-" "Mozilla/ ...
show more
35.221.55.38 - - [14/Oct/2026:13:14:34 +0000] "GET /z0ubecmtcwn2wvyyhlzh HTTP/1.1" 404 595 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.221.55.38 - - [14/Oct/2026:13:14:34 +0000] "GET /$2 HTTP/1.1" 404 595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
35.221.55.38 - - [14/Oct/2026:13:14:34 +0000] "GET /user/login HTTP/1.1" 404 595 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
35.221.55.38 - - [14/Oct/2026:13:14:35 +0000] "GET /j1ub0y3831lcjr3l11yy HTTP/1.1" 404 5730 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.221.55.38 - - [14/Oct/2026:13:14:35 +0000] "GET /panel HTTP/1.1" 404 5729 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
35.221.55.38 - - [14/Oct/2026:13:14:35 +0000] "GET /reset-password
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-10-14 12:28:19
UTC ·
(3 weeks ago)
(PERMBLOCK) 35.221.55.38 (US/United States/District of Columbia/Washington/38.55.221.35.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
Hacking
2026-10-14 12:20:52
UTC ·
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 35.221.55.38 (US/United States/38.55.221.35.bc.googleusercontent.com)
SQL Injection
