🇳🇱
Site.eu
2026-11-06 20:10:50
UTC ·
(6 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 19:48:23
UTC ·
(6 hours ago)
34.159.77.167 - - [06/Nov/2026:20:48:22 +0100] "GET /static/../../../a/../../../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.159.77.167 - - [ ...
show more
34.159.77.167 - - [06/Nov/2026:20:48:22 +0100] "GET /static/../../../a/../../../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.159.77.167 - - [06/Nov/2026:20:48:22 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.159.77.167 - - [06/Nov/2026:20:48:22 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.159.77.167 - - [06/Nov/2026:20:48:22 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.159.77.167 - - [06/Nov/2026:20:48:22 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295
...
show less
Brute-Force
SSH
Anonymous
2026-11-06 18:37:43
UTC ·
(7 hours ago)
34.159.77.167 - - [06/Nov/2026:19:37:42 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.159.77.167 - - [06/Nov/2 ...
show more
34.159.77.167 - - [06/Nov/2026:19:37:42 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.159.77.167 - - [06/Nov/2026:19:37:42 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.159.77.167 - - [06/Nov/2026:19:37:42 +0100] "GET /static/../../../a/../../../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.159.77.167 - - [06/Nov/2026:19:37:42 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.159.77.167 - - [06/Nov/2026:19:37:42 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0
...
show less
Brute-Force
SSH
🇵🇱
strefapi_com
2026-11-06 18:32:22
UTC ·
(7 hours ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-06 18:09:07
UTC ·
(8 hours ago)
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.159.77.167 - - \[06/Nov/2026:19:08:48 +0100\] "GET /static../.env HTTP/1.1" 307 318 "-" "Mozilla/5.0 \(compatible\; Amazonbot/0.1\; +https://develope ...
show more
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.159.77.167 - - \[06/Nov/2026:19:08:48 +0100\] "GET /static../.env HTTP/1.1" 307 318 "-" "Mozilla/5.0 \(compatible\; Amazonbot/0.1\; +https://developer.amazon.com/support/amazonbot\)"
...
show less
Bad Web Bot
Web App Attack
🇧🇬
HighWay
2026-11-06 17:59:01
UTC ·
(8 hours ago)
34.159.77.167 - - [06/Nov/2026:17:58:50 +0000] "GET /api%2F.env HTTP/1.1" 403 461 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.159.77.167 - - [06/Nov/2026:17:58:50 +0000] "GE ...
show more
34.159.77.167 - - [06/Nov/2026:17:58:50 +0000] "GET /api%2F.env HTTP/1.1" 403 461 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.159.77.167 - - [06/Nov/2026:17:58:50 +0000] "GET /dashboard%2F.env HTTP/1.1" 403 461 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.159.77.167 - - [06/Nov/2026:17:58:50 +0000] "GET /admin%2F.env HTTP/1.1" 403 461 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-11-06 17:50:25
UTC ·
(8 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2026-11-06 17:43:51
UTC ·
(8 hours ago)
34.159.77.167 - - [06/Nov/2026:18:43:51 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.159.77.167 - - [06/Nov/2026:18:43:51 +0100] "GET /static/.. ...
show more
34.159.77.167 - - [06/Nov/2026:18:43:51 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.159.77.167 - - [06/Nov/2026:18:43:51 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.159.77.167 - - [06/Nov/2026:18:43:51 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.159.77.167 - - [06/Nov/2026:18:43:51 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.159.77.167 - - [06/Nov/2026:18:43:51 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Brute-Force
SSH
🇩🇪
yitzhaq
2026-11-06 17:42:25
UTC ·
(8 hours ago)
34.159.77.167 - - [06/Nov/2026:18:42:18 +0100] "GET /wp-config.php.bak HTTP/2.0" 404 303 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.159.77.167 - - [06/Nov/2026:18:42:1 ...
show more
34.159.77.167 - - [06/Nov/2026:18:42:18 +0100] "GET /wp-config.php.bak HTTP/2.0" 404 303 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.159.77.167 - - [06/Nov/2026:18:42:18 +0100] "GET /wp-config.php.old HTTP/2.0" 404 303 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.159.77.167 - - [06/Nov/2026:18:42:18 +0100] "GET /wp-config.php~ HTTP/2.0" 404 303 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.159.77.167 - - [06/Nov/2026:18:42:20 +0100] "GET /proc/self/cmdline HTTP/2.0" 404 303 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.159.77.167 - - [06/Nov/2026:18:42:20 +0100] "GET /.env.example HTTP/2.0" 403 306 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.159.77.167 - - [06/Nov/2026:18:42:20 +0100] "GET /config/firebase-admin.json HTTP/2.0" 403 306 "-" "Mozilla/5.0 (com
show less
Web App Attack
Brute-Force
🇦🇺
AWW-Admin
2026-11-06 17:05:05
UTC ·
(9 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.159.77.167 (DE/Germany/167.77.159.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
arnisolutions
2026-11-06 16:13:47
UTC ·
(10 hours ago)
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-11-06 and 2026-11-06 (UTC). Additional activity: 410flood. Sample request: GET /.env.swp HTTP/2.0
Web App Attack
Hacking
🇮🇹
VHosting
2026-11-06 16:10:06
UTC ·
(10 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
ams_sec_user
2026-11-06 16:05:24
UTC ·
(10 hours ago)
Automated requests against a hosted website: 350 requests between 15:00 and 15:59 UTC; 167 probes for exposed secrets/config files (/userfiles, /userfiles/x, /apps/docs/.env). Reported automatically.
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 15:47:00
UTC ·
(10 hours ago)
34.159.77.167 - - [06/Nov/2026:16:46:59 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.159.77.167 - - [06/Nov/2026:16:46:59 +0100] " ...
show more
34.159.77.167 - - [06/Nov/2026:16:46:59 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.159.77.167 - - [06/Nov/2026:16:46:59 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.159.77.167 - - [06/Nov/2026:16:46:59 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.159.77.167 - - [06/Nov/2026:16:46:59 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.159.77.167 - - [06/Nov/2026:16:46:59 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Brute-Force
SSH
🇧🇾
lns.bz
2026-11-06 15:30:15
UTC ·
(10 hours ago)
.env scanning [BY]
Web App Attack