This IP address has been reported a total of
36
times from
32 distinct
sources.
135.222.41.16 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Italy
with 6
reports;
Netherlands
with 6
reports;
France
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
24
times;
Bad Web Bot
11
times;
Hacking
8
times;
Brute-Force
7
times;
Port Scan
3
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: web application attack. 3 events observed. 2 distinct ports targeted. Reported a ...
show moreHoneypot detection: web application attack. 3 events observed. 2 distinct ports targeted. Reported automatically from a honeypot sensor.
show less
Automated scan for common CMS/admin/secrets-exposure paths (WordPress/Joomla/phpMyAdmin/.env/.git/cg ...
show moreAutomated scan for common CMS/admin/secrets-exposure paths (WordPress/Joomla/phpMyAdmin/.env/.git/cgi-bin and similar) that do not exist on this server - all requests 404'd, volume stayed below any automatic ban threshold.
show less
Blocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 12 attempts, Period: 2026-10-02T07:38 ...
show moreBlocked by https://aegis.hr — Web Scanner - (MITRE T1595.001), 12 attempts, Period: 2026-10-02T07:38:46 to 2026-10-02T07:38:46
show less
[2026-10-02 07:05:15] 135.222.41.16 triggered a honeypot. Requested on port 80. URI: /.env, UA: Mozi ...
show more[2026-10-02 07:05:15] 135.222.41.16 triggered a honeypot. Requested on port 80. URI: /.env, UA: Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30
...
show less
Bad Web Bot
Brute-Force
Web App Attack
Hacking
SQL Injection
Automated sensor: 5 HTTP, HTTPS connection/probe attempts over the last 24h (latest 2026-10-02T06:44 ...
show moreAutomated sensor: 5 HTTP, HTTPS connection/probe attempts over the last 24h (latest 2026-10-02T06:44Z).
show less
Automated report: Unauthorized vulnerability scanning detected on 2026-10-01. 2 requests from this I ...
show moreAutomated report: Unauthorized vulnerability scanning detected on 2026-10-01. 2 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, POST / HTTP/1.1
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 135.222.41.16 (US/United ...
show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 135.222.41.16 (US/United States/-)
show less
