Skyrider
2025-06-15 06:35:41
(2 days ago)
35.222.191.121 - - [15/Jun/2025:08:35:40 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 1227 ... show more 35.222.191.121 - - [15/Jun/2025:08:35:40 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12272 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [15/Jun/2025:08:35:40 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12279 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [15/Jun/2025:08:35:41 +0200] "GET /faq/ HTTP/2.0" 403 12168 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [15/Jun/2025:08:35:41 +0200] "GET /help/cookies HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [15/Jun/2025:08:35:41 +0200] "GET /misc/location-info?location=Netherlands HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
Skyrider
2025-06-14 00:27:27
(3 days ago)
35.222.191.121 - - [14/Jun/2025:02:27:26 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0 ... show more 35.222.191.121 - - [14/Jun/2025:02:27:26 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12277 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [14/Jun/2025:02:27:26 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12269 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [14/Jun/2025:02:27:26 +0200] "GET /whats-new/posts/2283103/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [14/Jun/2025:02:27:26 +0200] "GET /steam/active-players/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [14/Jun/2025:02:27:26 +0200] "GET /steam/active-games/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
DrLex0
2025-06-13 22:58:14
(3 days ago)
Bad crawler Scrapy/2.11.2, not honoring robots.txt or meta directives
Bad Web Bot
Skyrider
2025-06-13 01:56:22
(4 days ago)
35.222.191.121 - - [13/Jun/2025:03:56:20 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0 ... show more 35.222.191.121 - - [13/Jun/2025:03:56:20 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12272 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [13/Jun/2025:03:56:20 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12273 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [13/Jun/2025:03:56:21 +0200] "GET /members/list/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [13/Jun/2025:03:56:21 +0200] "GET /members/jenn392.50588/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [13/Jun/2025:03:56:21 +0200] "GET /members/big-fan-of-drangonball.52142/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
Skyrider
2025-06-12 09:11:01
(4 days ago)
35.222.191.121 - - [12/Jun/2025:11:11:00 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0 ... show more 35.222.191.121 - - [12/Jun/2025:11:11:00 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12275 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [12/Jun/2025:11:11:00 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12272 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [12/Jun/2025:11:11:01 +0200] "GET /members/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [12/Jun/2025:11:11:01 +0200] "GET /register/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [12/Jun/2025:11:11:01 +0200] "GET /whats-new/profile-posts/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
Skyrider
2025-06-12 05:01:12
(5 days ago)
35.222.191.121 - - [12/Jun/2025:07:01:10 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 1226 ... show more 35.222.191.121 - - [12/Jun/2025:07:01:10 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12264 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [12/Jun/2025:07:01:10 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12267 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [12/Jun/2025:07:01:11 +0200] "GET /members/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [12/Jun/2025:07:01:11 +0200] "GET /members/list/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [12/Jun/2025:07:01:11 +0200] "GET /help/cookies HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
Skyrider
2025-06-11 16:11:22
(5 days ago)
35.222.191.121 - - [11/Jun/2025:18:11:21 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0 ... show more 35.222.191.121 - - [11/Jun/2025:18:11:21 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12275 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [11/Jun/2025:18:11:21 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12269 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [11/Jun/2025:18:11:21 +0200] "GET /steam/owned-games/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [11/Jun/2025:18:11:21 +0200] "GET /whats-new/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [11/Jun/2025:18:11:21 +0200] "GET /steam/played-games/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
Skyrider
2025-06-10 22:50:06
(6 days ago)
35.222.191.121 - - [11/Jun/2025:00:50:05 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 1226 ... show more 35.222.191.121 - - [11/Jun/2025:00:50:05 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12267 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [11/Jun/2025:00:50:05 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12275 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [11/Jun/2025:00:50:06 +0200] "GET /help/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [11/Jun/2025:00:50:06 +0200] "GET /members/mr-satan.49231/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [11/Jun/2025:00:50:06 +0200] "GET /account/dismiss-notice HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
Skyrider
2025-06-09 18:39:42
(1 week ago)
35.222.191.121 - - [09/Jun/2025:20:39:40 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 1226 ... show more 35.222.191.121 - - [09/Jun/2025:20:39:40 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12269 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [09/Jun/2025:20:39:40 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12275 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [09/Jun/2025:20:39:41 +0200] "GET /whats-new/posts/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [09/Jun/2025:20:39:41 +0200] "GET /search/?type=post HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [09/Jun/2025:20:39:41 +0200] "GET /steam/active-games/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
TPI-Abuse
2025-06-08 07:56:16
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 35.222.191.121 (121.191.222.35.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 35.222.191.121 (121.191.222.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 08 03:56:08.305990 2025] [security2:error] [pid 3223792:tid 3223792] [client 35.222.191.121:47750] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tribwatch.com|F|2"] [data ".free-coat- of-arms.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tribwatch.com"] [uri "/up/www.free-coat- of-arms.com"] [unique_id "aEVCGKwz1ztGiwuGrMQASgAAACY"], referer: https://tribwatch.com/up/updateIraq6Dec4.htm show less
Brute-Force
Bad Web Bot
Web App Attack
Skyrider
2025-06-08 00:50:01
(1 week ago)
35.222.191.121 - - [08/Jun/2025:02:50:00 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0 ... show more 35.222.191.121 - - [08/Jun/2025:02:50:00 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12280 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [08/Jun/2025:02:50:00 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12269 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [08/Jun/2025:02:50:01 +0200] "GET /steam/active-players/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [08/Jun/2025:02:50:01 +0200] "GET /steam/active-games/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [08/Jun/2025:02:50:01 +0200] "GET /steam/played-games/ HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
Skyrider
2025-06-07 03:42:26
(1 week ago)
35.222.191.121 - - [07/Jun/2025:05:42:25 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 1227 ... show more 35.222.191.121 - - [07/Jun/2025:05:42:25 +0200] "GET /account/connected-accounts/ HTTP/2.0" 403 12274 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [07/Jun/2025:05:42:25 +0200] "GET /form/beta-tester-application.2/select HTTP/2.0" 403 12278 "https://esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [07/Jun/2025:05:42:26 +0200] "GET /help/cookies HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [07/Jun/2025:05:42:26 +0200] "GET /threads/we-want-you-on-the-team.158937/post-1998163 HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)"
35.222.191.121 - - [07/Jun/2025:05:42:26 +0200] "GET /threads/join-the-esf-toriyama-tribute-tournament-2024.159102/post-1998458 HTTP/2.0" 403 5754 "https://forum.esforces.com/" "Scrapy/2.11.2 (+https://scrapy.org)" show less
Bad Web Bot
Web App Attack
whost
2025-06-06 22:00:00
(1 week ago)
brute force attack
Brute-Force
DrLex0
2025-06-04 06:56:05
(1 week ago)
Bad crawler not honoring robots.txt or meta directives
Bad Web Bot
TPI-Abuse
2025-06-03 20:47:41
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 35.222.191.121 (121.191.222.35.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 35.222.191.121 (121.191.222.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 03 16:47:34.248912 2025] [security2:error] [pid 754382:tid 754382] [client 35.222.191.121:41014] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.wadenelson.com|F|2"] [data ".fasturtle.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.wadenelson.com"] [uri "/www.fasturtle.com"] [unique_id "aD9fZoMJPm7_NuMA4dMf-gAAAAI"], referer: http://www.wadenelson.com/otherwades.html show less
Brute-Force
Bad Web Bot
Web App Attack