🇨🇦
eGuest
2026-09-12 09:11:08
(4 days ago)
35.231.214.44 - - [12/Sep/2026:03:11:07 -0600] "GET /__aws_leak_probe_7af4d818__ HTTP/1.1" 404 844 " ...
show more
35.231.214.44 - - [12/Sep/2026:03:11:07 -0600] "GET /__aws_leak_probe_7af4d818__ HTTP/1.1" 404 844 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; [email protected] )"
35.231.214.44 - - [12/Sep/2026:03:11:08 -0600] "GET /@fs/proc/self/environ HTTP/1.1" 404 844 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; LinkedInBot/1.0; +http://www.linkedin.com"
...
show less
Hacking
Web App Attack
🇳🇿
Antinson
2026-09-12 05:36:16
(5 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇪🇸
masterguru
2026-09-12 02:10:22
(5 days ago)
Inbound Anomaly Score Exceeded (Total Score: 8). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 8). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
🇺🇸
drewf.ink
2026-09-12 01:29:58
(5 days ago)
[01:29] Sent a Path Traversal / LFI payload to the web honeypot (GET /static../.env) - matched: '../ ...
show more
[01:29] Sent a Path Traversal / LFI payload to the web honeypot (GET /static../.env) - matched: '../'
show less
Web App Attack
2026-09-11 21:55:08
(5 days ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 17:25:23
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.231.214.44 (44.214.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.214.44 (44.214.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 13:25:16.697206 2026] [security2:error] [pid 29142:tid 29142] [client 35.231.214.44:48216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.251"] [uri "/static../.env"] [unique_id "aqQ5fMuhjMyx5OMmqY5s1AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 12:59:53
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 35.231.214.44 (44.214.231.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.231.214.44 (44.214.231.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 08:59:47.023333 2026] [security2:error] [pid 14254:tid 14254] [client 35.231.214.44:15426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.151"] [uri "/static../.env"] [unique_id "aqP7Q4JIz8-qgtXoS73rTAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-11 11:50:24
(5 days ago)
35.231.214.44 - - [11/Sep/2026:06:50:22 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 ( ...
show more
35.231.214.44 - - [11/Sep/2026:06:50:22 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:150.14) Gecko/20100101 Firefox/150.14; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" 35.231.214.44
35.231.214.44 - - [11/Sep/2026:06:50:22 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.4404.38 Safari/537.36 Edg/136.0.4404.38; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user" 35.231.214.44
35.231.214.44 - - [11/Sep/2026:06:50:23 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.3491.181 Mobile Safari/537.36; compatible; Discordbot/2.0; +https://discordapp.com" 35.231.214.44
35.231.214.44 - - [11/Sep/2026:06:50:23 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
tsZero
2026-09-11 11:36:30
(5 days ago)
Scan example: path=/static../.env status=503
Hacking
2026-09-11 09:54:31
(5 days ago)
Web Servers Malicious URL Directory Traversal.
Web App Attack
🇳🇱
Savvii
2026-09-11 07:33:13
(6 days ago)
20 attempts against mh_ha-misbehave-ban on ceres
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-09-11 01:26:15
(6 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇦🇷
gaston875
2026-09-11 01:01:12
(6 days ago)
35.231.214.44 - - [10/Sep/2026:22:01:10 -0300] "GET /.github/workflows/docker.yml HTTP/1.1" 403 276 ...
show more
35.231.214.44 - - [10/Sep/2026:22:01:10 -0300] "GET /.github/workflows/docker.yml HTTP/1.1" 403 276 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.6329.219 Mobile Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot"
...
show less
Web App Attack
Hacking
🇳🇱
Savvii
2026-09-11 00:39:09
(6 days ago)
20 attempts against mh_ha-misbehave-ban on soil
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
nfsec.pl
2026-09-10 22:36:50
(6 days ago)
Detected: TCP scan on port: 8080 with flags: SYN
Port Scan