🇨🇭
TheCoon
2026-11-08 11:11:42
UTC ·
(4 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-24 16:33:03
UTC ·
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-23 06:38:08
UTC ·
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-21 06:59:40
UTC ·
(3 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇳🇱
homeshowdomain.nl
2026-05-02 22:09:02
UTC ·
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-01.
Web App Attack
SSH
Hacking
🇮🇳
evicky2002
2026-05-02 06:00:00
UTC ·
(6 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇸🇬
securejdprop
2026-05-01 15:46:34
UTC ·
(6 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🚨 Network 🕵 scan 🎩 Nuclei 👨💻). Ip 35.188.92.12 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-05-01 15:46:32.678342293 +0000 UTC
Hacking
Web App Attack
🇨🇭
TheCoon
2026-05-01 07:15:02
UTC ·
(6 months ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇩🇪
iNetWorker
2026-05-01 07:01:44
UTC ·
(6 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 07:01:42
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 35.188.92.12 (12.92.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 03:01:37.524278 2026] [security2:error] [pid 12249:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.188.92.12 (12.92.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 03:01:37.524278 2026] [security2:error] [pid 12249:tid 12249] [client 35.188.92.12:56732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "learningbyshipping.com"] [uri "/.git/config"] [unique_id "afRP0WTFyfYJHQw-CI11QwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 05:53:50
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 35.188.92.12 (12.92.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 01:53:45.043751 2026] [security2:error] [pid 30801:tid 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.188.92.12 (12.92.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 01:53:45.043751 2026] [security2:error] [pid 30801:tid 30801] [client 35.188.92.12:54544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "llew.life"] [uri "/.git/config"] [unique_id "afQ_6dpimI0rPvqeYh1A9wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-05-01 05:25:15
UTC ·
(6 months ago)
[FriMay0107:25:12.8843252026][security2:error][pid3710738:tid3710762][client35.188.92.12:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[FriMay0107:25:12.8843252026][security2:error][pid3710738:tid3710762][client35.188.92.12:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autodiscover.buletti-panettoni.ch\"][uri\"/.git/config\"][unique_id\"afQ5OPAswC50bL3Y_JsPDQAAANU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 04:10:19
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 35.188.92.12 (12.92.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 00:10:15.087194 2026] [security2:error] [pid 23743:tid 23 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.188.92.12 (12.92.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 00:10:15.087194 2026] [security2:error] [pid 23743:tid 23743] [client 35.188.92.12:47300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "robotrodeo.net"] [uri "/.git/config"] [unique_id "afQnp6tDO3rUKQ2JyquMpgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
6kilowatti
2026-05-01 03:53:37
UTC ·
(6 months ago)
35.188.92.12 - - [01/May/2026:06:53:36 +0300] "GET /.git/config HTTP/1.1" 500 2466 "-" "Mozilla/5.0 (X11; U; FreeBSD i386; de-CH; rv:1.9.2.8) Gecko/20100729 Firefox/3.6.8"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 03:52:53
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 35.188.92.12 (12.92.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 23:52:47.621545 2026] [security2:error] [pid 9088:tid 908 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.188.92.12 (12.92.188.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 23:52:47.621545 2026] [security2:error] [pid 9088:tid 9088] [client 35.188.92.12:52990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alecmcatee.com"] [uri "/.git/config"] [unique_id "afQjj-7KNWBQPCXOdGLwSAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
