Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-02.
Web App Attack
SSH
Hacking
Anonymous
Bot / scanning and/or hacking attempts: GET /web/.env HTTP/2.0, GET /supabase/config.toml HTTP/2.0, GET /.zshrc HTTP/2.0, GET /fly.toml HTTP/2.0, GET /.env.staging HTTP/2.0, GET /.bashrc HTTP/2.0, GET /railway.json HTTP/2.0, GET /.amplifyrc HTTP/2.0, ...
show moreBot / scanning and/or hacking attempts: GET /web/.env HTTP/2.0, GET /supabase/config.toml HTTP/2.0, GET /.zshrc HTTP/2.0, GET /fly.toml HTTP/2.0, GET /.env.staging HTTP/2.0, GET /.bashrc HTTP/2.0, GET /railway.json HTTP/2.0, GET /.amplifyrc HTTP/2.0, GET /.turbo/config.json HTTP/2.0, GET /.env.development HTTP/2.0, GET /sendgrid.env HTTP/2.0, GET /admin/.env HTTP/2.0, GET /pnpm-workspace.yaml HTTP/2.0, GET /.env.test HTTP/2.0, GET /.firebaserc HTTP/2.0, GET /railway.toml HTTP/2.0
show less
{"level":"info","ts":1793627238.7381938,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.236.171.118","remote_port":"48198","client_ip":"35.236.171.118","proto":"HTTP/2.0","method":"GET","host":"status.threadedmfg.co ...
show more{"level":"info","ts":1793627238.7381938,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.236.171.118","remote_port":"48198","client_ip":"35.236.171.118","proto":"HTTP/2.0","method":"GET","host":"status.threadedmfg.com","uri":"/manifest.json","headers":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Fetch-Mode":["navigate"],"Priority":["u=0, i"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"macOS\""],"X-Nextjs-Data":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Google Chrome\";v=\"152\""],"Sec-Fetch-Site":["none"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate,
...
show less
Automated requests against a hosted website: 354 requests between 11:00 and 11:59 UTC; 168 probes for exposed secrets/config files (/userfiles, /userfiles/x, /cache/original/%2e%2e/.env). Reported automatically.
