This IP address has been reported a total of
76
times from
53 distinct
sources.
35.203.80.219 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-10.
show less
Honeypot caught: //.env via db.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compa ...
show moreHoneypot caught: //.env via db.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected]).
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
Honeypot caught: /.env via dashboard.saec.me. UA: Mozilla/5.0 (compatible; Bravebot/1.0; +https://br ...
show moreHoneypot caught: /.env via dashboard.saec.me. UA: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/).
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
Honeypot caught: /.env.local via config.saec.me. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ...
show moreHoneypot caught: /.env.local via config.saec.me. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot).
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show moreProbed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-10-11T09:38:43Z sensor=fail2ban role=web-canary
src=35.203.80.219
show less
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show moreAutomated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 3. First blocked: 2026-10-11.
show less
Honeypot caught: //.env via br.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compa ...
show moreHoneypot caught: //.env via br.saec.me. UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot).
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
Honeypot caught: //.env via backend.saec.me. UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.c ...
show moreHoneypot caught: //.env via backend.saec.me. UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot).
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
Honeypot caught: /.env via app.saec.me. UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.d ...
show moreHoneypot caught: /.env via app.saec.me. UA: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/).
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted