This IP address has been reported a total of
13
times from
10 distinct
sources.
8.228.4.152 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(mod_security) mod_security (id:210492) triggered by 8.228.4.152 (152.4.228.8.bc.googleusercontent.c ...
show more(mod_security) mod_security (id:210492) triggered by 8.228.4.152 (152.4.228.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:02:26.710181 2026] [security2:error] [pid 10110:tid 10112] [client 8.228.4.152:49356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ahrgroup.com"] [uri "/.env.preprod"] [unique_id "aieeYs_2er8dn1M5CppKkAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /env.bak HTTP/1.1, GET /.env.template HTTP/1.1, GET /api ...
show moreBot / scanning and/or hacking attempts: GET /env.bak HTTP/1.1, GET /.env.template HTTP/1.1, GET /api/.env.prod HTTP/1.1, GET /app/.env.local HTTP/1.1, GET /backend/.env HTTP/1.1, GET /.env.staging HTTP/1.1, GET /packages/api/.env HTTP/1.1, GET /.env.txt HTTP/1.1, GET /api/.env.old HTTP/1.1, GET /.env.local HTTP/1.1, GET /admin/api/.env HTTP/1.1, GET /app/.env HTTP/1.1, GET /.env.old HTTP/1.1, GET /app/.env.old HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.dev HTTP/1.1, GET /backend/.env.prod HTTP/1.1, GET /app/.env.backup HTTP/1.1, GET /src/.env.backup HTTP/1.1, GET /.env.sample HTTP/1.1, GET /env.txt HTTP/1.1
show less
[Mon Jun 08 15:38:55.353256 2026] [authz_core:error] [pid 1407402:tid 1407431] [client 8.228.4.152:5 ...
show more[Mon Jun 08 15:38:55.353256 2026] [authz_core:error] [pid 1407402:tid 1407431] [client 8.228.4.152:54922] AH01630: client denied by server configuration: /var/www/html/MyWeb/Intoino/.env.local
show less
{"level":"info","ts":1780915649.5987425,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1780915649.5987425,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"8.228.4.152","remote_port":"35632","client_ip":"8.228.4.152","proto":"HTTP/1.1","method":"GET","host":"mlkjiwww.dcbaupdate.yxwzutsrqponmlbnnkwkyxzxwww8bab2a5f-df77-4330-8c52-284b6b1ab1f1.random.159.89.98.98.nip.io","uri":"/.env.test","headers":{"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["W3C_Validator/1.654"]}},"bytes_read":0,"user_id":"","duration":0.000086918,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://mlkjiwww.dcbaupdate.yxwzutsrqponmlbnnkwkyxzxwww8bab2a5f-df77-4330-8c52-284b6b1ab1f1.random.159.89.98.98.nip.io/.env.test"],"Content-Type":[],"Server":["Caddy"]}}
{"level":"info","ts":1780915649.647132,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"8.228.4.152","remote_port":"35672","client_ip":"8.228.4.152","proto":"HTTP/1.1","method":"GET","host":"ml
...
show less