🇳🇿
Antinson
2026-09-07 20:27:36
UTC ·
(2 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇮🇳
evicky2002
2026-07-14 10:21:11
UTC ·
(3 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇮🇳
evicky2002
2026-07-09 06:00:00
UTC ·
(4 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇩🇪
Blexyel
2026-05-15 16:26:37
UTC ·
(5 months ago)
35.194.201.232 - - [15/May/2026:08:49:14 +0200] "GET /.git/config HTTP/1.1" 502 552 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/534.35 (KHTML, like Gecko) Chrome/11.0.696.65 Safari/534.35 Puffin/2.9174AT"
...
Brute-Force
Web App Attack
2026-05-15 10:39:03
UTC ·
(5 months ago)
Unauthorized SSH login attempts
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-05-15 10:24:36
UTC ·
(5 months ago)
(mod_security) mod_security (id:949110) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 06:24:29.159873 2026] [security2:error] [pid 9694:tid ...
show more
(mod_security) mod_security (id:949110) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 06:24:29.159873 2026] [security2:error] [pid 9694:tid 9694] [client 35.194.201.232:51480] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "donkeywaffle.com"] [uri "/.git/config"] [unique_id "agb0XcqFCJhTopalol60BAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-15 09:13:02
UTC ·
(5 months ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 07:48:57
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:48:49.932132 2026] [security2:error] [pid 21174:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:48:49.932132 2026] [security2:error] [pid 21174:tid 21174] [client 35.194.201.232:39632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saveourstats.com"] [uri "/.git/config"] [unique_id "agbP4fqKwEGNZ984LaYGXQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-05-15 07:18:23
UTC ·
(5 months ago)
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-15 07:10:53
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:10:49.583760 2026] [security2:error] [pid 11048:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 03:10:49.583760 2026] [security2:error] [pid 11048:tid 11048] [client 35.194.201.232:57990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.progressivefileshare.org"] [uri "/.git/config"] [unique_id "agbG-cedixeOwnIKEAUq4QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 06:03:44
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:03:36.324265 2026] [security2:error] [pid 21870:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 02:03:36.324265 2026] [security2:error] [pid 21870:tid 21870] [client 35.194.201.232:48318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mentalmolecule.theknowledgemaster.com"] [uri "/.git/config"] [unique_id "aga3OJ12tM5ZH_RcpZEKcgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
INTEQ
2026-05-15 06:03:32
UTC ·
(5 months ago)
Web attack from 35.194.201.232
Web App Attack
🇫🇷
masterguru
2026-05-15 05:41:29
UTC ·
(5 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.194.201.232 (TW/Taiwan/232.201.194.35.bc.googleusercontent.com): 2 in the last 3600 secs (0-193)
Hacking
🇩🇪
4server
2026-05-15 05:03:57
UTC ·
(5 months ago)
[FriMay1507:03:51.8721132026][security2:error][pid239330:tid239377][client35.194.201.232:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[FriMay1507:03:51.8721132026][security2:error][pid239330:tid239377][client35.194.201.232:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"esengineering.ch\"][uri\"/.git/config\"][unique_id\"agapNwdD2wJHdNohFF0w8AAAAEA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-15 04:53:24
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:53:18.446935 2026] [security2:error] [pid 28585:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.201.232 (232.201.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:53:18.446935 2026] [security2:error] [pid 28585:tid 28585] [client 35.194.201.232:49784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amazingthailand.convoyforkids.com"] [uri "/.git/config"] [unique_id "agamvrp9q5URIYMCFxX3PgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack