🇳🇱
Site.eu
2026-10-07 00:33:17
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TAY
2026-10-07 00:05:12
(2 days ago)
35.236.151.224 - - [07/Oct/2026:08:05:00 +0800] "GET /public/plugins/text/../../../../../../../../pr ...
show more
35.236.151.224 - - [07/Oct/2026:08:05:00 +0800] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
35.236.151.224 - - [07/Oct/2026:08:05:01 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 7888 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.236.151.224 - - [07/Oct/2026:08:05:03 +0800] "GET /@fs/../.env?import&raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.236.151.224 - - [07/Oct/2026:08:05:07 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.236.151.224 - - [07/Oct/2026:08:05:08 +0800] "GET
...
show less
Brute-Force
🇺🇸
TAY
2026-10-06 22:16:20
(2 days ago)
35.236.151.224 - - [07/Oct/2026:06:16:10 +0800] "GET /static/../../../a/../../../../.env HTTP/1.1" 4 ...
show more
35.236.151.224 - - [07/Oct/2026:06:16:10 +0800] "GET /static/../../../a/../../../../.env HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
35.236.151.224 - - [07/Oct/2026:06:16:11 +0800] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.236.151.224 - - [07/Oct/2026:06:16:15 +0800] "GET /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ HTTP/1.1" 404 42794 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
35.236.151.224 - - [07/Oct/2026:06:16:16 +0800] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.236.151.224 - - [07/Oct/2026:06:16:16 +0800] "GET /api/w/default/jobs_u/get_log_file/../../../../proc/self/environ
...
show less
Brute-Force
🇸🇬
simpeg-adm.bandung.go.id
2026-10-06 21:34:34
(2 days ago)
06/Oct/2026:21:34:33 +0000;35.236.151.224;"/dist/manifest.json"
06/Oct/2026:21:34:33 +0000;35.236.15 ...
show more
06/Oct/2026:21:34:33 +0000;35.236.151.224;"/dist/manifest.json"
06/Oct/2026:21:34:33 +0000;35.236.151.224;"/.vite/manifest.json"
06/Oct/2026:21:34:33 +0000;35.236.151.224;"/ms54cx9qg6bujzf9wuhx"
06/Oct/2026:21:34:33 +0000;35.236.151.224;"/z9x8c7v6b5-debug-trigger-vendors.patina.photo"
06/Oct/2026:21:34:33 +0000;35.236.151.224;"/dist/.vite/manifest.json"
06/Oct/2026:21:34:33 +0000;35.236.151.224;"/k38u8xcgm43rais963qk"
06/Oct/2026:21:34:33 +0000;35.236.151.224;"/lib/terminal-xhr.php"
...
show less
Web Spam
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-10-06 18:39:21
(2 days ago)
{"level":"info","ts":1791311957.979243,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1791311957.979243,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.236.151.224","remote_port":"46364","client_ip":"35.236.151.224","proto":"HTTP/2.0","method":"GET","host":"status.quadhelion.engineering","uri":"/z9x8c7v6b5-debug-trigger-status.quadhelion.engineering","headers":{"User-Agent":["Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"],"Accept":["*/*"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.quadhelion.engineering","ech":false}},"bytes_read":0,"user_id":"","duration":0.000194952,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":179131
...
show less
DDoS Attack
Web App Attack
🇩🇪
Hazzard
2026-10-06 13:09:09
(3 days ago)
(PERMBLOCK) 35.236.151.224 (TW/Taiwan/Taipei City/Taipei/224.151.236.35.bc.googleusercontent.com/[re ...
show more
(PERMBLOCK) 35.236.151.224 (TW/Taiwan/Taipei City/Taipei/224.151.236.35.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
🇺🇸
daveoctober
2026-10-06 09:16:56
(3 days ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-10-06 08:55:11
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-10-06 07:29:17
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.151.224 (224.151.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.151.224 (224.151.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 03:29:12.592759 2026] [security2:error] [pid 30728:tid 30847] [client 35.236.151.224:33666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "markhoran.pictures"] [uri "/static../.env"] [unique_id "asSjSOWKjUV5dfEL-GwtOwAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TAY
2026-10-06 07:20:21
(3 days ago)
35.236.151.224 - - [06/Oct/2026:15:20:19 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozi ...
show more
35.236.151.224 - - [06/Oct/2026:15:20:19 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.236.151.224 - - [06/Oct/2026:15:20:20 +0800] "GET /@fs/../.env?import&raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.236.151.224 - - [06/Oct/2026:15:20:20 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.236.151.224 - - [06/Oct/2026:15:20:21 +0800] "GET /_image?href=/../../../.env HTTP/1.1" 404 2050 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.236.151.224 - - [06/Oct/2026:15:20:21 +0800] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
35.236.151.224 - - [06/Oct/2026:15:20:21 +0800]
...
show less
Brute-Force
🇬🇧
consul.to
2026-10-06 06:35:18
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇲🇾
Rizzy
2026-10-06 06:18:02
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 06:15:25
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.236.151.224 (224.151.236.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.151.224 (224.151.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 02:15:21.401149 2026] [security2:error] [pid 21785:tid 21785] [client 35.236.151.224:47950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aiamur.photo"] [uri "/.htpasswd"] [unique_id "asSR-c5_5JtjzCbVvtdu3AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TAY
2026-10-06 06:01:58
(3 days ago)
35.236.151.224 - - [06/Oct/2026:14:01:56 +0800] "GET /public/plugins/text/../../../../../../../../pr ...
show more
35.236.151.224 - - [06/Oct/2026:14:01:56 +0800] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
35.236.151.224 - - [06/Oct/2026:14:01:56 +0800] "GET /static../.env HTTP/1.1" 404 42661 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
35.236.151.224 - - [06/Oct/2026:14:01:56 +0800] "GET /build../.env HTTP/1.1" 404 42661 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
35.236.151.224 - - [06/Oct/2026:14:01:57 +0800] "GET /dist../.env HTTP/1.1" 404 42661 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.236.151.224 - - [06/Oct/2026:14:01:57 +0800] "GET /media../.env HTTP/1.1" 404 42661 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
35.236.151.224 - - [06/Oct/2026:14:01:57 +0800] "GET /js.
...
show less
Brute-Force
