๐บ๐ธ
JonathanYoung2161
2026-10-27 05:12:28
(12 hours ago)
brightideasdesign.store 34.95.36.13 - - [27/Oct/2026:00:12:26 -0500] "GET /files../.env HTTP/2.0" 40 ...
show more
brightideasdesign.store 34.95.36.13 - - [27/Oct/2026:00:12:26 -0500] "GET /files../.env HTTP/2.0" 403 3363 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
brightideasdesign.store 34.95.36.13 - - [27/Oct/2026:00:12:26 -0500] "GET /store/uploads/products/thumbs/.env HTTP/2.0" 403 3363 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
brightideasdesign.store 34.95.36.13 - - [27/Oct/2026:00:12:26 -0500] "GET /credentials.json HTTP/2.0" 403 3363 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
Nodez3r0
2026-10-27 03:49:37
(14 hours ago)
CrowdSec ban: crowdsecurity/http-admin-interface-probing (e.g. /public/admin.json); first seen 2026- ...
show more
CrowdSec ban: crowdsecurity/http-admin-interface-probing (e.g. /public/admin.json); first seen 2026-10-27T03:49:37Z, last seen 2026-10-27T03:49:37Z; reported by WOPR honeypot nedry.wopr.systems
show less
Web App Attack
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-27 00:07:07
(17 hours ago)
[ti-02ov] Web exploit scanning: 13 suspicious requests detected by fail2ban jail apache-scanner. Exa ...
show more
[ti-02ov] Web exploit scanning: 13 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.95.36.13 - - [27/Oct/2026:01:06:57 +0100] "GET /media../.env HTTP/2.0" 301 494 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.95.36.13 - - [27/Oct/2026:01:06:57 +0100] "GET /static../.env HTTP/2.0" 301 496 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.95.36.13 - - [27/Oct/2026:01:06:57 +0100] "GET /images../.env HTTP/2.0" 301 496 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.95.36.13 - - [27/Oct/2026:01:06:57 +0100] "GET /dist../.env HTTP/2.0" 301 492 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-26 20:50:03
(21 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-26 15:20:07
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ช๐จ
CYBER-SECURITY-MM
2026-10-26 15:00:18
(1 day ago)
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-path-traversal-probing. HTTP 403. Path ...
show more
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-path-traversal-probing. HTTP 403. Path: /@fs/../.env?raw??. Evidence: 3 matching alerts.
show less
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-26 14:58:58
(1 day ago)
34.95.36.13 - - [26/Oct/2026:15:58:56 +0100] "GET /.env.development?raw HTTP/2.0" 404 288 "-" "Mozil ...
show more
34.95.36.13 - - [26/Oct/2026:15:58:56 +0100] "GET /.env.development?raw HTTP/2.0" 404 288 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.95.36.13 - - [26/Oct/2026:15:58:56 +0100] "GET /.env.production?raw HTTP/2.0" 404 288 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.95.36.13 - - [26/Oct/2026:15:58:56 +0100] "GET /.env::$DATA?raw HTTP/2.0" 403 292 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.95.36.13 - - [26/Oct/2026:15:58:56 +0100] "GET /@fs/.env?raw?? HTTP/2.0" 403 292 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.95.36.13 - - [26/Oct/2026:15:58:56 +0100] "GET /@fs/proc/self/environ?import&raw?? HTTP/2.0" 404 288 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.95.36.13 - - [26/Oct/2026:15:58:56 +0100] "GET /@fs/roo
show less
Bad Web Bot
๐ฆ๐บ
FireGuard Server
2026-10-26 12:30:14
(1 day ago)
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=80,8080,8443
Port Scan
Hacking
๐ณ๐ฑ
GabrielJST
2026-10-26 10:35:04
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.95.36.13 (CA/Canada/13.36.95.34.bc.g ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.95.36.13 (CA/Canada/13.36.95.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐จ๐ญ
backslash
2026-10-26 10:24:01
(1 day ago)
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-26 08:55:01
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
Anonymous
2026-10-26 06:31:35
(1 day ago)
Web application attack detected.
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-26 04:37:28
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-10-26 03:35:05
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-10-26 02:58:12
(1 day ago)
Multiple WAF Violations
Web App Attack