🇺🇸
SLSLLC
2026-09-18 23:36:03
(9 minutes ago)
35.194.168.135 - - [18/Sep/2026:23:36:00 +0000] "GET /.env HTTP/2.0" 403 1921 "-" "Mozilla/5.0 (Wind ...
show more
35.194.168.135 - - [18/Sep/2026:23:36:00 +0000] "GET /.env HTTP/2.0" 403 1921 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇩🇪
4server
2026-09-18 22:47:24
(58 minutes ago)
[SatSep1900:47:20.5321752026][security2:error][pid1800:tid2042][client35.194.168.135:0]ModSecurity:A ...
show more
[SatSep1900:47:20.5321752026][security2:error][pid1800:tid2042][client35.194.168.135:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.bluecirclecapital.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"aq2_eL7gMvxx7Aef9C3ozgAAANM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-18 21:09:30
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Alt255
2026-09-18 18:54:30
(4 hours ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.194.168.135 - - [18/Sep/2026:20:54:23 +0200] "GET /.git/config HTTP/1.1" 404 6850 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-18 17:12:04
(6 hours ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Savvii
2026-09-18 14:45:18
(9 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
todix
2026-09-18 07:30:04
(16 hours ago)
WebAttack or semilar from 35.194.168.135
Web App Attack
2026-09-18 06:34:37
(17 hours ago)
35.194.168.135 - - [18/Sep/2026:03:34:36 -0300] "GET /.git/config HTTP/1.1" 403 829 "-" "Mozilla/5.0 ...
show more
35.194.168.135 - - [18/Sep/2026:03:34:36 -0300] "GET /.git/config HTTP/1.1" 403 829 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
🇮🇳
evicky2002
2026-09-18 06:00:02
(17 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇳🇱
Site.eu
2026-09-17 18:55:11
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-17 15:06:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.194.168.135 (135.168.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.168.135 (135.168.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 11:06:23.961592 2026] [security2:error] [pid 7626:tid 7626] [client 35.194.168.135:52548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.buyperfumeonline.net"] [uri "/.git/config"] [unique_id "aqwB7xzs8bGkBS8F1EmlnwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
svr
2026-09-17 11:03:41
(1 day ago)
HC-Flood Web Scanner
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 10:13:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.194.168.135 (135.168.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.168.135 (135.168.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:13:26.654437 2026] [security2:error] [pid 19798:tid 19902] [client 35.194.168.135:47990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.buy-directv.com.exede-sales.com"] [uri "/.git/config"] [unique_id "aqu9RtYvbzONyL5caX7iqwAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-17 09:34:42
(1 day ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.194.168.135 - - [17/Sep/2026:11:34:29 +0200] "GET /.git/config HTTP/1.1" 404 2126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-17 08:29:16
(1 day ago)
Excessive multi-domain requests
Brute-Force