🇮🇩
Burayot
2026-09-15 21:49:11
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.227.35.222 (US/United States/222 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.227.35.222 (US/United States/222.35.227.35.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
🇵🇱
Budyn
2026-09-15 19:07:05
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.sweetpuddingtrap.online | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇨🇭
Ribeye375
2026-09-15 18:26:34
(3 days ago)
HIPS apache-modsecurity - Block tcp/http,https
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-15 17:07:03
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇨🇭
backslash
2026-09-15 12:51:02
(3 days ago)
block ruleset likely probe for CVE-2025-55182 619E65C9C14E5E741C55CC8FD5E5630F031EBB6A
Web App Attack
2026-09-15 12:41:54
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 11:51:23
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.227.35.222 (222.35.227.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.227.35.222 (222.35.227.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:51:16.961616 2026] [security2:error] [pid 3860:tid 3860] [client 35.227.35.222:39740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wichita-massacre.com"] [uri "/.git/config"] [unique_id "aqkxNJCbXmqd7n2HPkZpSwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 10:50:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.227.35.222 (222.35.227.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.227.35.222 (222.35.227.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:50:14.476074 2026] [security2:error] [pid 28077:tid 28098] [client 35.227.35.222:48806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wicca-love-spells.com"] [uri "/.git/config"] [unique_id "aqki5miFmzbApp6dymKqVAAAAVM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
hostopya.com
2026-09-15 09:30:42
(3 days ago)
[plesk-apache] 6 failed attempt(s). Log: [Tue Sep 15 12:30:40.710021 2026] [authz_core:error] [pid 4 ...
show more
[plesk-apache] 6 failed attempt(s). Log: [Tue Sep 15 12:30:40.710021 2026] [authz_core:error] [pid 479496] [client 35.227.35.222:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/public/.env|[Tue Sep 15 12:30:41.158224 2026] [authz_core:error] [pid 102074] [client 35.227.35.222:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/public/.env.local|[Tue Sep 15 12:30:41.559883 2026] [authz_core:error] [pid 479492] [client 35.227.35.222:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/public/.env.production|[Tue Sep 15 12:30:41.936044 2026] [authz_core:error] [pid 139798] [client 35.227.35.222:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/public/.env.staging|[Tue Sep 15 12:30:42.276902 2026] [authz_core:error] [pid 479494] [client 35.227.35.222:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/public/.env.development
show less
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-15 03:09:20
(3 days ago)
Excessive 404/403 errors
Brute-Force
2023-11-30 01:10:01
(2 years ago)
$f2bV_matches
Brute-Force
SSH
🇳🇱
ege8
2022-11-30 19:03:22
(3 years ago)
Brute-Force
SSH
🇳🇱
ege8
2022-11-09 20:22:45
(3 years ago)
Brute-Force
SSH
🇩🇪
TrainerGamer
2021-09-15 13:58:23
(5 years ago)
Invalid user info from 35.227.35.222 port 60798
Brute-Force
SSH
🇩🇪
pr0vieh
2021-09-15 13:50:32
(5 years ago)
Sep 15 19:36:59 Linux04 sshd[1731529]: Failed password for invalid user denis from 35.227.35.222 por ...
show more
Sep 15 19:36:59 Linux04 sshd[1731529]: Failed password for invalid user denis from 35.227.35.222 port 43954 ssh2
Sep 15 19:41:29 Linux04 sshd[1750942]: Invalid user nexus from 35.227.35.222 port 46274
Sep 15 19:41:29 Linux04 sshd[1750942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.227.35.222
Sep 15 19:41:32 Linux04 sshd[1750942]: Failed password for invalid user nexus from 35.227.35.222 port 46274 ssh2
Sep 15 19:46:06 Linux04 sshd[1770882]: Invalid user ubuntu from 35.227.35.222 port 48596
Sep 15 19:46:06 Linux04 sshd[1770882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.227.35.222
Sep 15 19:46:09 Linux04 sshd[1770882]: Failed password for invalid user ubuntu from 35.227.35.222 port 48596 ssh2
Sep 15 19:50:29 Linux04 sshd[1789490]: Invalid user supervisor from 35.227.35.222 port 50930
Sep 15 19:50:29 Linux04 sshd[1789490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0
...
show less
Brute-Force
SSH