๐ช๐ธ
robotstxt
2026-10-26 11:40:41
(6 hours ago)
35.194.185.235 - - [26/Oct/2026:11:40:24 +0000] "GET /wp-includes/js/jquery/ui/tabs.min.js.map HTTP/ ...
show more
35.194.185.235 - - [26/Oct/2026:11:40:24 +0000] "GET /wp-includes/js/jquery/ui/tabs.min.js.map HTTP/2.0" 403 21665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "35.194.185.235" edge="172.68.22.219"
35.194.185.235 - - [26/Oct/2026:11:40:24 +0000] "GET /wp-content/themes/generatepress/assets/js/menu.min.js.map HTTP/2.0" 403 21665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "35.194.185.235" edge="172.68.22.219"
35.194.185.235 - - [26/Oct/2026:11:40:24 +0000] "GET /wp-content/plugins/ccoo-covenants/includes/theme/js/tabs.js.map HTTP/2.0" 403 21665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "35.194.185.235" edge="172.68.22.219"
35.194.185.235 - - [26/Oct/2026:11:40:24 +0000] "GET /wp-content/plugins/search-filter/assets-v1/frontend/components/combobox.js.map HTTP/2.0" 403
...
show less
Web App Attack
๐ฉ๐ช
onlyops.app
2026-10-26 07:00:19
(11 hours ago)
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-mods ...
show more
Web application firewall (ModSecurity) detected malicious traffic | detected by Fail2Ban (plesk-modsecurity jail) | onlyops.app
show less
Exploited Host
๐ณ๐ฑ
Alt255
2026-10-26 05:35:51
(12 hours ago)
[ti-30al] Web exploit scanning: 5 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 5 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.194.185.235 - - [26/Oct/2026:06:35:32 +0100] "GET /.env?import&raw HTTP/2.0" 403 420 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.194.185.235 - - [26/Oct/2026:06:35:32 +0100] "GET /__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc HTTP/2.0" 503 2995 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.194.185.235 - - [26/Oct/2026:06:35:32 +0100] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 503 2995 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
35.194.185.235 - - [26/Oct/20
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-26 05:19:14
(13 hours ago)
35.194.185.235 (TW/Taiwan/Taipei City/Taipei/235.185.194.35.bc.googleusercontent.com/[redacted]), mo ...
show more
35.194.185.235 (TW/Taiwan/Taipei City/Taipei/235.185.194.35.bc.googleusercontent.com/[redacted]), more than 70 Apache 403 hits
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-25 21:46:04
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.185.235 (235.185.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.185.235 (235.185.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 17:46:00.069335 2026] [security2:error] [pid 24160:tid 24160] [client 35.194.185.235:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.gregquinn.com"] [uri "/build/.env"] [unique_id "at54mN05gxRlfjCVoDs62gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-25 17:29:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.194.185.235 (235.185.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.185.235 (235.185.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 13:29:29.423017 2026] [security2:error] [pid 4992:tid 4992] [client 35.194.185.235:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.grainavi.com"] [uri "/.env.secret"] [unique_id "at48eUj7sS7qFibmG00f1gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 16:57:17
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
๐ง๐ท
radardatelecom
2026-10-25 16:51:01
(1 day ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-25 15:25:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฌ๐ง
masterguru
2026-10-25 14:37:44
(1 day ago)
Too much 404 requests in 1 minute. Operator GE matched 20 at IP:block_script. (46020-185)
Hacking
๐ฎ๐ฉ
Burayot
2026-10-24 19:19:36
(1 day ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.194.185.235 (TW/Taiwan/235.185.19 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 35.194.185.235 (TW/Taiwan/235.185.194.35.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-24 17:16:37
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
snappic
2026-10-24 07:41:30
(2 days ago)
Scanning for .env files & DuckDuckGo Bot User Agent Spoofing [GET /api/fs/read?allowOutsideWorkspace ...
show more
Scanning for .env files & DuckDuckGo Bot User Agent Spoofing [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)]
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
Klaverstyn
2026-10-23 23:47:45
(2 days ago)
Persistent attacker, repeat offender
Hacking
๐ณ๐ฑ
Alt255
2026-10-23 16:29:08
(3 days ago)
[ti-27al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-27al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.194.185.235 - - [23/Oct/2026:18:28:59 +0200] "GET /sitemap.xml HTTP/1.1" 404 2107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.194.185.235 - - [23/Oct/2026:18:28:59 +0200] "GET /sitemap_index.xml HTTP/1.1" 404 2107 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.194.185.235 - - [23/Oct/2026:18:29:00 +0200] "GET /z9x8c7v6b5-debug-trigger-adminer.klesan.com HTTP/1.1" 404 2107 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.194.185.235 - - [23/Oct/2026:18:29:00 +0200] "GET /zqvub0835y4nqmk85ehy HTTP/1.1" 404 7825 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML
...
show less
Bad Web Bot
Web App Attack