Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Exploit attempts with malicious payloads
Web vulnerability scanning (1,234 probes), looking for configuration and credential files, backup and database dump files, framework debug endpoints, exposed version control folders, path traversal, known vuln ...
show moreExploit attempts with malicious payloads
Web vulnerability scanning (1,234 probes), looking for configuration and credential files, backup and database dump files, framework debug endpoints, exposed version control folders, path traversal, known vulnerable URLs
HTTP flood: 117 requests in a short period
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36
2,532 HTTP requests between 2026-11-09 09:18 and 18:29 UTC
show less
{"level":"info","ts":1794223514.9006479,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.198.98.172","remote_port":"53432","client_ip":"35.198.98.172","proto":"HTTP/2.0","method":"GET","host":"status.trinitywindows.j ...
show more{"level":"info","ts":1794223514.9006479,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.198.98.172","remote_port":"53432","client_ip":"35.198.98.172","proto":"HTTP/2.0","method":"GET","host":"status.trinitywindows.je","uri":"/serverless.yml","headers":{"X-Proxyuser-Ip":["192.168.125.27"],"Accept":["*/*"],"X-Remote-Ip":["192.168.125.27"],"X-Remote-Addr":["192.168.125.27"],"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Custom-Ip-Authorization":["192.168.125.27"],"X-Forwarded-For":["192.168.125.27"],"Cluster-Client-Ip":["192.168.125.27"],"Forwarded":["for=192.168.125.27"],"X-Real-Ip":["192.168.125.27"],"X-Originating-Ip":["192.168.125.27"],"Accept-Encoding":["gzip"],"True-Client-Ip":["192.168.125.27"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1
...
show less
Exploit attempts with malicious payloads
Web vulnerability scanning (303 probes), looking for configuration and credential files, backup and database dump files, framework debug endpoints, exposed version control folders, path traversal, known vulner ...
show moreExploit attempts with malicious payloads
Web vulnerability scanning (303 probes), looking for configuration and credential files, backup and database dump files, framework debug endpoints, exposed version control folders, path traversal, known vulnerable URLs
HTTP flood: 117 requests in a short period
User-Agent: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
483 HTTP requests between 2026-11-09 09:18 and 11:07 UTC
show less
