This IP address has been reported a total of
20
times from
15 distinct
sources.
35.194.132.250 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-15.
show less
Web App Attack
SSH
Hacking
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
(mod_security) mod_security (id:210492) triggered by 35.194.132.250 (250.132.194.35.bc.googleusercon ...
show more(mod_security) mod_security (id:210492) triggered by 35.194.132.250 (250.132.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:03:50.136211 2026] [security2:error] [pid 28075:tid 28075] [client 35.194.132.250:36708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pappakotis.net"] [uri "/app/.env"] [unique_id "ai-j1jWGJ8nFen2eUfpdegAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bot / scanning and/or hacking attempts: GET /backend/api/.env HTTP/1.1, GET /server/.env HTTP/1.1, G ...
show moreBot / scanning and/or hacking attempts: GET /backend/api/.env HTTP/1.1, GET /server/.env HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.docker HTTP/1.1, GET /html/.env HTTP/1.1, GET /config/.env.local HTTP/1.1, GET /apps/backend/.env HTTP/1.1, GET /.env.staging HTTP/1.1, GET /backend/sendgrid.env HTTP/1.1, GET /www/.env HTTP/1.1, GET /src/sendgrid.env HTTP/1.1, GET /mail/sendgrid.env HTTP/1.1, GET /mailer/sendgrid.env HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /apps/frontend/.env HTTP/1.1, GET /app/sendgrid.env HTTP/1.1, GET /config/sendgrid.env HTTP/1.1, GET /app/.env.staging HTTP/1.1, GET /email/sendgrid.env HTTP/1.1, GET /packages/api/.env HTTP/1.1, GET /services/auth/.env HTTP/1.1, GET /api/backend/.env HTTP/1.1, GET /api/.env.dev HTTP/1.1, GET /sendgrid/.env HTTP/1.1, GET /.env.local.bak HTTP/1.1, GET /.env.copy HTTP/1.1, GET /data/.env HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.test HTTP/1.1
show less
{"level":"info","ts":1781489818.0604794,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1781489818.0604794,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.194.132.250","remote_port":"51596","client_ip":"35.194.132.250","proto":"HTTP/1.1","method":"GET","host":"status.mggroupservice.com","uri":"/src/.env.local","headers":{"User-Agent":["Opera/9.80 (X11; Linux i686) Presto/2.12.388 Version/12.16"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.mggroupservice.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000088719,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1781489818.0629947,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.194.132.250","remote_port":"51548","client_ip":"35.194.132.250","proto":"HTTP/1.1","method":"GET","host":"status.mggroupservice.com","uri":"
...
show less