🇳🇱
Site.eu
2026-10-14 07:21:14
(3 days ago)
Excessive multi-domain requests
Brute-Force
🇬🇧
openstrike.co.uk
2026-10-13 05:16:02
(4 days ago)
16 attacks on password/key grabbing URLs:
GET /Dockerrun.aws.json HTTP/1.1
Hacking
🇳🇱
homeshowdomain.nl
2026-10-12 21:59:53
(4 days ago)
Auto-ban: >3000 req/min op 2026-10-12
Web App Attack
SSH
Hacking
🇵🇱
wHosts
2026-10-12 19:03:43
(4 days ago)
Blocked by Fail2Ban
Web App Attack
🇭🇳
unph
2026-10-12 18:40:21
(4 days ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
🇨🇦
Mediashaker
2026-10-12 18:28:10
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.240.82.224 (BE/Belgium/224.82.240.35 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.240.82.224 (BE/Belgium/224.82.240.35.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
thieuleu
2026-10-12 18:27:23
(4 days ago)
Unauthorized connection attempt blocked by firewall policy. Web application hardening active.
Brute-Force
Exploited Host
🇺🇸
jormaster3k
2026-10-12 18:23:48
(4 days ago)
Attack against Apache (too many 404s)
Web App Attack
🇺🇸
jmr777
2026-10-12 17:59:00
(4 days ago)
IM360 WAF: Direct access to AWS CLI credential directory||MV:/@fs/root/.aws/credentials||RSV:8.75||T ...
show more
IM360 WAF: Direct access to AWS CLI credential directory||MV:/@fs/root/.aws/credentials||RSV:8.75||T:APACHE||
Sensor:
modsec
Rule:
77442534
Abuser:
35.240.82.224
show less
Web App Attack
🇫🇮
diego021
2026-10-12 17:43:03
(4 days ago)
35.240.82.224 pythonpirate.tech - [12/Oct/2026:12:43:01 -0500] "GET /webpack-stats.json HTTP/2.0" 40 ...
show more
35.240.82.224 pythonpirate.tech - [12/Oct/2026:12:43:01 -0500] "GET /webpack-stats.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.240.82.224 pythonpirate.tech - [12/Oct/2026:12:43:01 -0500] "GET /z9x8c7v6b5-debug-trigger-pythonpirate.tech HTTP/2.0" 404 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.240.82.224 pythonpirate.tech - [12/Oct/2026:12:43:01 -0500] "GET /dist/manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.240.82.224 pythonpirate.tech - [12/Oct/2026:12:43:01 -0500] "GET /pe9lp26jwbh6gilhd9hl HTTP/2.0" 404 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
Web App Attack
🇦🇺
clapper
2026-10-12 17:19:43
(4 days ago)
(mod_security) mod_security (id:949110) triggered by 35.240.82.224 (BE/Belgium/224.82.240.35.bc.goog ...
show more
(mod_security) mod_security (id:949110) triggered by 35.240.82.224 (BE/Belgium/224.82.240.35.bc.googleusercontent.com): 3 in the last 3600 secs; ID: LUC
show less
Brute-Force
Bad Web Bot
🇳🇱
Alt255
2026-10-12 17:19:06
(4 days ago)
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35. ...
show more
[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.240.82.224 - - \[12/Oct/2026:19:18:53 +0200\] "GET /.env.supabase HTTP/1.1" 403 626 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Claude-SearchBot/1.0\; [email protected] \)"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-12 17:06:54
(4 days ago)
38.185 requests in 1 hour (1w6d22h)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-12 16:54:24
(4 days ago)
(mod_security) mod_security (id:210580) triggered by 35.240.82.224 (224.82.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210580) triggered by 35.240.82.224 (224.82.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:54:19.053143 2026] [security2:error] [pid 3379:tid 3379] [client 35.240.82.224:0] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||puertaalcieloisla.com|F|2"] [data "Matched Data: proc/self/environ found within ARGS:filename: file:/proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "puertaalcieloisla.com"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "as0Qu4N3-iL4Agu4w4F6mgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-10-12 16:39:48
(4 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack