🇳🇱
Cloud86 B.V.
2026-06-15 01:13:05
(11 hours ago)
categories: DDoS Attack
DDoS Attack
🇺🇸
TPI-Abuse
2026-06-15 00:59:52
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 35.226.76.132 (132.76.226.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.226.76.132 (132.76.226.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:59:48.604027 2026] [security2:error] [pid 12422:tid 12422] [client 35.226.76.132:56198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||impressionista.net|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "impressionista.net"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai9OhFepUeDcw78N8gJOPwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 22:44:46
(14 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇨🇦
electronico
2026-06-14 21:58:44
(15 hours ago)
35.226.76.132 - - [15/Jun/2026:08:58:44 +1100] "GET /backend/actuator/configprops HTTP/1.1" 404 5879 ...
show more
35.226.76.132 - - [15/Jun/2026:08:58:44 +1100] "GET /backend/actuator/configprops HTTP/1.1" 404 5879 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36"
35.226.76.132 - - [15/Jun/2026:08:58:44 +1100] "GET /app/actuator/configprops HTTP/1.1" 404 5879 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36"
35.226.76.132 - - [15/Jun/2026:08:58:44 +1100] "GET /app/actuator/logfile HTTP/1.1" 404 5879 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.31 (KHTML like Gecko) Chrome/26.0.1410.63 Safari/537.31"
35.226.76.132 - - [15/Jun/2026:08:58:44 +1100] "GET /actuator/heapdump HTTP/1.1" 404 5879 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.14) Gecko/20110218 AlexaToolbar/alxf-2.0 Firefox/3.6.14"
35.226.76.132 - - [15/Jun/2026:08:58:44 +1100] "GET /v1/actuator/env HTTP/1.1" 404 5879 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64;
...
show less
Brute-Force
Web App Attack
🇫🇮
mickp
2026-06-14 19:27:35
(17 hours ago)
35.226.76.132 - - [14/Jun/2026:19:27:33 +0000] "GET /actuator/httptrace HTTP/1.1" 302 0 "-" "Mozilla ...
show more
35.226.76.132 - - [14/Jun/2026:19:27:33 +0000] "GET /actuator/httptrace HTTP/1.1" 302 0 "-" "Mozilla/5.0 (compatible; Konqueror/3.3; Linux 2.6.8-gentoo-r3; X11;"
35.226.76.132 - - [14/Jun/2026:19:27:33 +0000] "GET /actuator/heapdump HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Linux; U; Android 4.0.3; en-us; KFTT Build/IML74K) AppleWebKit/535.19 (KHTML, like Gecko) Silk/2.1 Mobile Safari/535.19 Silk-Accelerated=true"
35.226.76.132 - - [14/Jun/2026:19:27:33 +0000] "GET /actuator/configprops HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 6.1; rv:21.0) Gecko/20130401 Firefox/21.0"
35.226.76.132 - - [14/Jun/2026:19:27:33 +0000] "GET /heapdump HTTP/1.1" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.80 Safari/537.36"
35.226.76.132 - - [14/Jun/2026:19:27:33 +0000] "GET /configprops HTTP/1.1" 302 0 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.3) Gecko/20091020 Linux Mint/8 (Helena) Firefox/3.5.3"
35.226.76.132 - - [14/Jun/2026:19:27:
...
show less
Bad Web Bot
Web App Attack
🇮🇹
clamehost.it
2026-06-14 07:02:06
(1 day ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇲🇾
Rizzy
2026-06-14 04:09:12
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇦🇹
penguin-solutions.at
2026-06-14 02:51:27
(1 day ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇧🇷
Halux
2026-06-14 02:19:50
(1 day ago)
35.226.76.132 Web Application Firewall multiple violations
Hacking
Web App Attack
🇫🇷
dynamix
2026-06-14 00:21:00
(1 day ago)
Multiple WAF Violations
Web App Attack
🇫🇮
pixiekat
2026-06-13 22:48:38
(1 day ago)
[Sat Jun 13 23:48:37.252760 2026] [authz_core:error] [pid 1837215:tid 1837275] [client 35.226.76.132 ...
show more
[Sat Jun 13 23:48:37.252760 2026] [authz_core:error] [pid 1837215:tid 1837275] [client 35.226.76.132:58608] AH01630: client denied by server configuration: /var/www/html/v1
[Sat Jun 13 23:48:37.256729 2026] [authz_core:error] [pid 1898778:tid 1898813] [client 35.226.76.132:58582] AH01630: client denied by server configuration: /var/www/html/logfile
[Sat Jun 13 23:48:37.275417 2026] [authz_core:error] [pid 1898778:tid 1898814] [client 35.226.76.132:58636] AH01630: client denied by server configuration: /var/www/html/api
[Sat Jun 13 23:48:37.276401 2026] [authz_core:error] [pid 1898778:tid 1898817] [client 35.226.76.132:58594] AH01630: client denied by server configuration: /var/www/html/actuator
[Sat Jun 13 23:48:37.279833 2026] [authz_core:error] [pid 1837215:tid 1837282] [client 35.226.76.132:58644] AH01630: client denied by server configuration: /var/www/html/api
...
show less
Brute-Force