Anonymous
2026-10-24 13:52:45
(1 day ago)
fail2ban jail apache-scanner: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /rclone.conf HTTP/1. ...
show more
fail2ban jail apache-scanner: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /rclone.conf HTTP/1.1" 404 69450 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.80.246.9 - - [27/Sep/2026:18:34:37 -0700] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 69451 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.80.246.9 - - [27/Sep/2026:18:34:38 -0700] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" 34.80.246.9 - - [2
show less
Web App Attack
Port Scan
Anonymous
2026-10-21 13:24:58
(4 days ago)
fail2ban jail apache-scanner: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /rclone.conf HTTP/1. ...
show more
fail2ban jail apache-scanner: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /rclone.conf HTTP/1.1" 404 69450 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.80.246.9 - - [27/Sep/2026:18:34:37 -0700] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 69451 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.80.246.9 - - [27/Sep/2026:18:34:38 -0700] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" 34.80.246.9 - - [2
show less
Web App Attack
Port Scan
Anonymous
2026-10-10 02:58:04
(2 weeks ago)
fail2ban jail apache-scanner: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /rclone.conf HTTP/1. ...
show more
fail2ban jail apache-scanner: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /rclone.conf HTTP/1.1" 404 69450 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.80.246.9 - - [27/Sep/2026:18:34:37 -0700] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 69451 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.80.246.9 - - [27/Sep/2026:18:34:38 -0700] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" 34.80.246.9 - - [2
show less
Web App Attack
Port Scan
Anonymous
2026-10-01 13:16:12
(3 weeks ago)
fail2ban jail apache-scanner: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /rclone.conf HTTP/1. ...
show more
fail2ban jail apache-scanner: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /rclone.conf HTTP/1.1" 404 69450 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.80.246.9 - - [27/Sep/2026:18:34:37 -0700] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 69451 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.80.246.9 - - [27/Sep/2026:18:34:38 -0700] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 65489 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" 34.80.246.9 - - [2
show less
Web App Attack
Port Scan
๐บ๐ธ
[email protected]
2026-09-29 23:28:35
(3 weeks ago)
CrowdSec ban: crowdsecurity/unifi-flood-detection (duration: 38h22m7s)
Port Scan
๐บ๐ธ
[email protected]
2026-09-29 21:18:28
(3 weeks ago)
CrowdSec ban: crowdsecurity/unifi-flood-detection (duration: 40h32m16s)
Port Scan
Anonymous
2026-09-29 05:34:39
(3 weeks ago)
Aggressive web scan
Web App Attack
๐ฌ๐ง
relianoid.com
2026-09-29 05:25:00
(3 weeks ago)
404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web App Attack
Anonymous
2026-09-29 02:07:20
(3 weeks ago)
34.80.246.9 - - [29/Sep/2026:02:07:20 +0000] "GET /.env.production?raw HTTP/2.0" 499 0 "-" "Mozilla/ ...
show more
34.80.246.9 - - [29/Sep/2026:02:07:20 +0000] "GET /.env.production?raw HTTP/2.0" 499 0 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "-"
34.80.246.9 - - [29/Sep/2026:02:07:20 +0000] "GET /.env.production?import&raw HTTP/2.0" 499 0 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "-"
34.80.246.9 - - [29/Sep/2026:02:07:20 +0000] "GET /.env.local?raw HTTP/2.0" 499 0 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" "-"
34.80.246.9 - - [29/Sep/2026:02:07:20 +0000] "GET /.env?import&raw HTTP/2.0" 499 0 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "-"
34.80.246.9 - - [29/Sep/2026:02:07:20 +0000] "GET /.env?import&url&inline HTTP/2.0" 499 0 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" "-"
...
show less
Port Scan
Brute-Force
๐ฌ๐ง
thetomtaylor.co.uk
2026-09-29 02:07:01
(3 weeks ago)
Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [wa01,wa02]
Hacking
SQL Injection
Web App Attack
๐ธ๐ฌ
simpeg-adm.bandung.go.id
2026-09-29 00:49:16
(3 weeks ago)
29/Sep/2026:00:49:15 +0000;34.80.246.9;"/l5novxq0qmtq2do7z59k"
29/Sep/2026:00:49:15 +0000;34.80.246. ...
show more
29/Sep/2026:00:49:15 +0000;34.80.246.9;"/l5novxq0qmtq2do7z59k"
29/Sep/2026:00:49:15 +0000;34.80.246.9;"/lib/terminal-xhr.php"
29/Sep/2026:00:49:15 +0000;34.80.246.9;"/hmzexz8u83buvsokn565"
29/Sep/2026:00:49:15 +0000;34.80.246.9;"/.vite/manifest.json"
29/Sep/2026:00:49:15 +0000;34.80.246.9;"/z9x8c7v6b5-debug-trigger-huwelijksleveranciers.exosstudio.com"
29/Sep/2026:00:49:15 +0000;34.80.246.9;"/dist/manifest.json"
29/Sep/2026:00:49:15 +0000;34.80.246.9;"/dist/.vite/manifest.json"
...
show less
Web Spam
Brute-Force
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-09-28 22:25:03
(3 weeks ago)
Brute-Force
Web App Attack
๐บ๐ธ
[email protected]
2026-09-28 13:50:38
(3 weeks ago)
CrowdSec ban: crowdsecurity/unifi-flood-detection (duration: 71h59m58s)
Port Scan
๐ฎ๐ฉ
David Koswari
2026-09-28 05:44:00
(3 weeks ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
Anonymous
2026-09-28 01:34:37
(3 weeks ago)
fail2ban jail apache-secrets-probe: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/../.env?r ...
show more
fail2ban jail apache-secrets-probe: 34.80.246.9 - - [27/Sep/2026:18:34:35 -0700] "GET /@fs/../.env?raw?? HTTP/1.1" 403 2742 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
show less
Web App Attack