🇪🇸
robotstxt
2026-10-09 02:46:06
UTC ·
(1 month ago)
35.252.221.72 - - [09/Oct/2026:02:45:34 +0000] "-" 400 193 "-" "-" "-" edge="35.252.221.72"
35.252.221.72 - - [09/Oct/2026:02:45:35 +0000] "-" 400 193 "-" "-" "-" edge="35.252.221.72"
35.252.221.72 - - [09/Oct/2026:02:45:35 +0000] "-" 400 193 "-" "-" ...
show more
35.252.221.72 - - [09/Oct/2026:02:45:34 +0000] "-" 400 193 "-" "-" "-" edge="35.252.221.72"
35.252.221.72 - - [09/Oct/2026:02:45:35 +0000] "-" 400 193 "-" "-" "-" edge="35.252.221.72"
35.252.221.72 - - [09/Oct/2026:02:45:35 +0000] "-" 400 193 "-" "-" "-" edge="35.252.221.72"
35.252.221.72 - - [09/Oct/2026:02:45:35 +0000] "-" 400 193 "-" "-" "-" edge="35.252.221.72"
35.252.221.72 - - [09/Oct/2026:02:45:35 +0000] "-" 400 193 "-" "-" "-" edge="35.252.221.72"
...
show less
Web Spam
Web App Attack
🇳🇱
Alt255
2026-10-09 02:42:01
UTC ·
(1 month ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.252.221.72 - - [09/Oct/2026:04:41:46 +0200] "GET /.htpasswd HTTP/2.0" 403 346 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatib ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.252.221.72 - - [09/Oct/2026:04:41:46 +0200] "GET /.htpasswd HTTP/2.0" 403 346 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 02:41:19
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 22:41:15.719348 2026] [security2:error] [pid 23586:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 22:41:15.719348 2026] [security2:error] [pid 23586:tid 23586] [client 35.252.221.72:36628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maunakeavista.com"] [uri "/.htpasswd"] [unique_id "ashUS-B3Ox6pI2p9cYEhfwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-10-09 02:10:51
UTC ·
(1 month ago)
35.252.221.72 - - [09/Oct/2026:02:10:20 +0000] "GET /wp-content/cache/autoptimize/js/autoptimize_c0a7994c5aa3fec626476e359cdabc89.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari ...
show more
35.252.221.72 - - [09/Oct/2026:02:10:20 +0000] "GET /wp-content/cache/autoptimize/js/autoptimize_c0a7994c5aa3fec626476e359cdabc89.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="35.252.221.72"
35.252.221.72 - - [09/Oct/2026:02:10:20 +0000] "GET /?370cd1=07dad60dc6.js& HTTP/2.0" 403 2 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="35.252.221.72"
35.252.221.72 - - [09/Oct/2026:02:10:20 +0000] "GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/2.0" 403 15417 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="35.252.221.72"
35.252.221.72 - - [09/Oct/2026:02:10:21 +0000] "GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb HTTP/2.0" 403 15392 "-" "Mozilla/5.0 (X11; Linux
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 02:09:59
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 22:09:52.944159 2026] [security2:error] [pid 13384:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 22:09:52.944159 2026] [security2:error] [pid 13384:tid 13384] [client 35.252.221.72:44030] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||janbloom-art.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "janbloom-art.com"] [uri "/z9x8c7v6b5-debug-trigger-janbloom-art.com"] [unique_id "ashM8GyUEGn24jhF-A018QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 01:50:00
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:49:54.862428 2026] [security2:error] [pid 11372:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:49:54.862428 2026] [security2:error] [pid 11372:tid 11372] [client 35.252.221.72:51508] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||grancanariaholidays.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grancanariaholidays.com"] [uri "/z9x8c7v6b5-debug-trigger-grancanariaholidays.com"] [unique_id "ashIQgjWMz4Z-UM-v1WLrwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-09 01:49:40
UTC ·
(1 month ago)
Aggressive web scan
Web App Attack
🇩🇪
svr
2026-10-09 01:46:37
UTC ·
(1 month ago)
Abusive Automated Web Scanner
Web App Attack
🇩🇪
EGP Abuse Dept
2026-10-09 01:29:51
UTC ·
(1 month ago)
Scanning for web/db/file exploits on www.duovizion.com
SQL Injection
Bad Web Bot
Web App Attack
🇬🇧
WebNiraj
2026-10-09 01:10:13
UTC ·
(1 month ago)
(mod_security) mod_security (id:949110) triggered by 35.252.221.72 (US/United States/72.221.252.35.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
Brute-Force
🇺🇸
TPI-Abuse
2026-10-09 01:06:24
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:06:20.471484 2026] [security2:error] [pid 13110:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 21:06:20.471484 2026] [security2:error] [pid 13110:tid 13110] [client 35.252.221.72:55356] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bodybuildbid.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bodybuildbid.com"] [uri "/z9x8c7v6b5-debug-trigger-bodybuildbid.com"] [unique_id "asg-DI10LjpUF9oKJj4slgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-09 00:17:19
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:17:15.256100 2026] [security2:error] [pid 24676:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:17:15.256100 2026] [security2:error] [pid 24676:tid 24676] [client 35.252.221.72:35976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allafricaadventures.com"] [uri "/.htpasswd"] [unique_id "asgyi1EI0yCQBEKmVOHAsgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 23:43:53
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 19:43:46.966788 2026] [security2:error] [pid 11762:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 19:43:46.966788 2026] [security2:error] [pid 11762:tid 11764] [client 35.252.221.72:55766] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aliqsha.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aliqsha.com"] [uri "/z9x8c7v6b5-debug-trigger-aliqsha.com"] [unique_id "asgqsq6B67YDY1L4LBGb6wAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-10-08 23:13:11
UTC ·
(1 month ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 23:08:54
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 19:08:50.858269 2026] [security2:error] [pid 4542:tid 4 ...
show more
(mod_security) mod_security (id:210730) triggered by 35.252.221.72 (72.221.252.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 19:08:50.858269 2026] [security2:error] [pid 4542:tid 4542] [client 35.252.221.72:34578] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||alhashim.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "alhashim.com"] [uri "/z9x8c7v6b5-debug-trigger-alhashim.com"] [unique_id "asgigkEHK7K6nCYEJbMp7gAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
