This IP address has been reported a total of
27
times from
25 distinct
sources.
35.206.225.28 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 7
reports;
United States of America
with 5
reports;
Germany
with 4
reports.
The most common categories in these recent reports were:
Web App Attack
19
times;
Brute-Force
10
times;
Hacking
7
times;
Bad Web Bot
5
times;
Port Scan
3
times;
Other
10
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
Anonymous
| [Dangerous/Taiwan] Aggressive IP 35.206.225.28 (~30 hits). Type: DoS Defender- Web server 400 erro ...
show more| [Dangerous/Taiwan] Aggressive IP 35.206.225.28 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 35.206.225.28 (TW/Taiwan/28.225.206.35. ...
show more(mod_security) mod_security triggered on hostname [redacted] 35.206.225.28 (TW/Taiwan/28.225.206.35.bc.googleusercontent.com)
show less
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.206.225.28 - - [13/Oct/2026:02:23:52 +0200] "GET /.git/config HTTP/2.0" 404 35617 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
time="2026-10-12T23:58:01Z" level=info msg="Access to https://code.sw0ok.dev/ (method GET) is not au ...
show moretime="2026-10-12T23:58:01Z" level=info msg="Access to https://code.sw0ok.dev/ (method GET) is not authorized to user <anonymous>, responding with status code 302 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fcode.sw0ok.dev%2F&rm=GET" method=GET path=/api/authz/forward-auth remote_ip=35.206.225.28
time="2026-10-12T23:58:01Z" level=info msg="Access to https://code.sw0ok.dev/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fcode.sw0ok.dev%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=35.206.225.28
time="2026-10-12T23:58:01Z" level=info msg="Access to https://code.sw0ok.dev/ (method POST) is not authorized to user <anonymous>, responding with status code 303 with location redirect to https://auth.sw0ok.dev/?rd=https%3A%2F%2Fcode.sw0ok.dev%2F&rm=POST" method=GET path=/api/authz/forward-auth remote_ip=35.206.225.28
time="2026-10-12T23:58:01Z" level=info
...
show less
{"level":"info","ts":"2026-10-12T22:05:39Z","logger":"http.log.access.log4","msg":"handled request", ...
show more{"level":"info","ts":"2026-10-12T22:05:39Z","logger":"http.log.access.log4","msg":"handled request","request":{"remote_ip":"35.206.225.28","remote_port":"43948","client_ip":"35.206.225.28","proto":"HTTP/1.1","method":"GET","host":"code.botwork.se","uri":"/.git/config","headers":{"Connection":["keep-alive"],"Next-Action":["x"],"X-Nextjs-Request-Id":["997d14b2"],"Cookie":["REDACTED"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"code.botwork.se","ech":false}},"bytes_read":0,"user_id":"","duration":0.00312795,"size":11,"status":404,"resp_headers":{"X-Content-Type-Options":["nosniff","nosniff"],"Date":["Mon, 12 Oct 2026 22:05:39 GMT"],"Content-Length":["11"],"Cache-Control":["max-age=0, private, must-revalidate"],"X-Frame-Options":["SAMEORIGIN"],"Via":["1.1 Caddy"],
...
show less
