๐บ๐ธ
TPI-Abuse
2026-09-10 01:05:52
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 35.221.108.219 (219.108.221.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.221.108.219 (219.108.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 21:05:44.425839 2026] [security2:error] [pid 2401158:tid 2401158] [client 35.221.108.219:11282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.181"] [uri "/static../.env"] [unique_id "aqICaPjsVzDwkG7zi9KIFwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Bouncer
2026-09-10 00:28:39
(1 month ago)
(mod_security) mod_security (id:930110) triggered by 35.221.108.219 (JP/Japan/219.108.221.35.bc.goog ...
show more
(mod_security) mod_security (id:930110) triggered by 35.221.108.219 (JP/Japan/219.108.221.35.bc.googleusercontent.com): 5 in the last 60 secs
show less
Brute-Force
๐ซ๐ท
GabrielJST
2026-09-09 21:37:20
(1 month ago)
*Port Scan* detected from 35.221.108.219 (JP/Japan/219.108.221.35.bc.googleusercontent.com).
Port Scan
๐ณ๐ฑ
Savvii
2026-09-09 20:00:12
(1 month ago)
20 attempts against mh-misbehave-ban on ec102933
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-09-09 16:39:01
(1 month ago)
209 requests with url.path *.aws/*
168 requests with url.path */@fs/*
141 requests with url.path ...
show more
209 requests with url.path *.aws/*
168 requests with url.path */@fs/*
141 requests with url.path *credentials.json
show less
Brute-Force
Bad Web Bot
๐ซ๐ท
david.houstin
2026-09-09 14:48:47
(1 month ago)
35.221.108.219 - - [09/Sep/2026:16:48:21 +0200] "GET /media../.env HTTP/1.1" 404 4501 "http://54.37. ...
show more
35.221.108.219 - - [09/Sep/2026:16:48:21 +0200] "GET /media../.env HTTP/1.1" 404 4501 "http://54.37.157.50:80/media../.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 19090 -
35.221.108.219 - - [09/Sep/2026:16:48:27 +0200] "GET /actuator/env HTTP/1.1" 404 36400 "http://54.37.157.50:80/actuator/env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 63370 -
35.221.108.219 - - [09/Sep/2026:16:48:37 +0200] "GET /server/.env HTTP/1.1" 404 5931 "http://54.37.157.50:80/server/.env" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)" 22404 -
35.221.108.219 - - [09/Sep/2026:16:48:37 +0200] "GET /config/.env HTTP/1.1" 404 5931 "http://54.37.157.50:80/config/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +https
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
NXTwoThou
2026-09-09 11:29:12
(1 month ago)
174.78
Web App Attack
๐ณ๐ฟ
Antinson
2026-09-09 03:32:30
(1 month ago)
Scraping with a high error ratio and request rate
Bad Web Bot
Anonymous
2026-09-09 03:00:07
(1 month ago)
| Common web attack.
Web App Attack
Hacking
SQL Injection
๐บ๐ธ
nasset
2026-09-09 02:29:08
(1 month ago)
35.221.108.219 - - [08/Sep/2026:19:29:02 -0700] "GET /.git/HEAD HTTP/1.1" 403 584 "-" "Mozilla/5.0 A ...
show more
35.221.108.219 - - [08/Sep/2026:19:29:02 -0700] "GET /.git/HEAD HTTP/1.1" 403 584 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.221.108.219 - - [08/Sep/2026:19:29:02 -0700] "GET /actuator/env HTTP/1.1" 403 584 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot"
35.221.108.219 - - [08/Sep/2026:19:29:08 -0700] "GET /.env.save HTTP/1.1" 403 1096 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.3133.196 Safari/537.36 Edg/114.0.3133.196; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot"
35.221.108.219 - - [08/Sep/2026:19:29:08 -0700] "GET /.docker.env HTTP/1.1" 403 1096 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.221.108.219 - - [08/Sep/2026:19:29:08 -0700] "GET /.env.aws HTTP/1.1" 403 1096 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWe
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-09 01:51:34
(1 month ago)
denied traffic to a honeypot network. destination port 80.
Port Scan
Hacking