This IP address has been reported a total of
10
times from
8 distinct
sources.
35.196.117.25 was first reported on
September 15th 2026 , and the most recent report was
1 week ago United States of America
with 4
reports;
Switzerland
with 1
report;
Czechia
with 1
report.
The most common categories in these recent reports were:
Web App Attack
10
times;
Brute-Force
6
times;
Bad Web Bot
4
times;
SSH
1
time;
Hacking
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 week ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
sternwart
2026-09-16 03:55:44
(1 week ago)
Automatisch erkannt: Zugriff auf /.git/config (xn--waschbr-alarm-gfb.ch)
Web App Attack
Bad Web Bot
🇿🇦
conure.sh
2026-09-16 03:13:47
(1 week ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇺🇸
WellSpring
2026-09-16 00:48:58
(1 week ago)
env leak on 920.today/public/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-15 22:02:12
(1 week ago)
Auto-ban: >3000 req/min op 2026-09-15
Web App Attack
SSH
Hacking
🇸🇪
vaia.cloud
2026-09-15 18:00:05
(1 week ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-15 16:25:04
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 13:19:33
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.196.117.25 (25.117.196.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.117.25 (25.117.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:19:26.082108 2026] [security2:error] [pid 19753:tid 19753] [client 35.196.117.25:50698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aroilcontrolsystem.com"] [uri "/.git/config"] [unique_id "aqlF3rntCJOQEgCZTDFCNwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-15 10:57:48
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 10:41:45
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.196.117.25 (25.117.196.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.117.25 (25.117.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:41:40.115196 2026] [security2:error] [pid 9217:tid 9217] [client 35.196.117.25:40456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arnoldwell.com"] [uri "/.git/config"] [unique_id "aqkg5P-4no4EC1vKCE-DZQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 07:56:35
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.196.117.25 (25.117.196.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.196.117.25 (25.117.196.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 03:56:27.318370 2026] [security2:error] [pid 14126:tid 14126] [client 35.196.117.25:38234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arnebowman.com"] [uri "/.git/config"] [unique_id "aqj6K65JdChIQJLZJYTA0QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
10
of 10 reports
