Anonymous
2026-11-06 20:13:04
UTC ·
(10 hours ago)
35.199.105.179 - - [06/Nov/2026:21:13:03 +0100] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
35.199.105.179 - - [06/Nov/2026:21:13:03 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mo ...
show more
35.199.105.179 - - [06/Nov/2026:21:13:03 +0100] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
35.199.105.179 - - [06/Nov/2026:21:13:03 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.199.105.179 - - [06/Nov/2026:21:13:03 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.199.105.179 - - [06/Nov/2026:21:13:03 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.199.105.179 - - [06/Nov/2026:21:13:03 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +ht
...
show less
Brute-Force
SSH
🇨🇭
zynex
2026-11-06 19:57:02
UTC ·
(11 hours ago)
URL Probing: /static/app/.env
Web App Attack
🇦🇹
nomzamo
2026-11-06 19:44:37
UTC ·
(11 hours ago)
Fail2Ban reported: nginx-badbots
Brute-Force
Anonymous
2026-11-06 19:35:39
UTC ·
(11 hours ago)
35.199.105.179 - - [06/Nov/2026:20:35:36 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.199.105.179 - - [06/Nov/2026:20:35:38 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 " ...
show more
35.199.105.179 - - [06/Nov/2026:20:35:36 +0100] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.199.105.179 - - [06/Nov/2026:20:35:38 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.199.105.179 - - [06/Nov/2026:20:35:38 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.199.105.179 - - [06/Nov/2026:20:35:38 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.199.105.179 - - [06/Nov/2026:20:35:38 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com
...
show less
Brute-Force
SSH
🇩🇪
updown.io
2026-11-06 19:09:46
UTC ·
(11 hours ago)
{"level":"info","ts":1793992185.86155,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.199.105.179","remote_port":"39532","client_ip":"35.199.105.179","proto":"HTTP/2.0","method":"GET","host":"status.tradinglite.com" ...
show more
{"level":"info","ts":1793992185.86155,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.199.105.179","remote_port":"39532","client_ip":"35.199.105.179","proto":"HTTP/2.0","method":"GET","host":"status.tradinglite.com","uri":"/server/.env","headers":{"X-Remote-Ip":["10.112.120.68"],"X-Custom-Ip-Authorization":["10.112.120.68"],"X-Forwarded-For":["10.112.120.68"],"X-Originating-Ip":["10.112.120.68"],"X-Remote-Addr":["10.112.120.68"],"Forwarded":["for=10.112.120.68"],"Accept-Encoding":["gzip"],"Accept":["*/*"],"X-Real-Ip":["10.112.120.68"],"Cluster-Client-Ip":["10.112.120.68"],"X-Nextjs-Data":["1"],"True-Client-Ip":["10.112.120.68"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Proxyuser-Ip":[
...
show less
DDoS Attack
Web App Attack
🇩🇪
sternwart
2026-11-06 18:57:31
UTC ·
(12 hours ago)
Automatisch erkannt: Zugriff auf /web/.env (my-coach.ch)
Web App Attack
Bad Web Bot
Anonymous
2026-11-06 18:51:28
UTC ·
(12 hours ago)
Unauthorized SSH login attempts
Brute-Force
SSH
Anonymous
2026-11-06 18:46:15
UTC ·
(12 hours ago)
35.199.105.179 - - [06/Nov/2026:19:46:15 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.199.105.179 - - [06/Nov/2026:19:46:15 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E ...
show more
35.199.105.179 - - [06/Nov/2026:19:46:15 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.199.105.179 - - [06/Nov/2026:19:46:15 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.199.105.179 - - [06/Nov/2026:19:46:15 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.199.105.179 - - [06/Nov/2026:19:46:15 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.199.105.179 - - [06/Nov/2026:19:46:15 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://ope
...
show less
Brute-Force
SSH
Anonymous
2026-11-06 18:01:47
UTC ·
(13 hours ago)
35.199.105.179 - - [06/Nov/2026:19:01:43 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show more
35.199.105.179 - - [06/Nov/2026:19:01:43 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.199.105.179 - - [06/Nov/2026:19:01:43 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.199.105.179 - - [06/Nov/2026:19:01:43 +0100] "GET /static/../../../a/../../../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.199.105.179 - - [06/Nov/2026:19:01:43 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.199.105.179 - - [06/Nov/2026:19:01:46 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
show less
Brute-Force
SSH
🇺🇸
entangled_mongoose
2026-11-06 17:59:08
UTC ·
(13 hours ago)
Probed /wp-config.php~.
Web App Attack
🇳🇱
tr1n
2026-11-06 17:48:09
UTC ·
(13 hours ago)
Triggered Cloudflare WAF (firewallCustom) from BR.
Action: BLOCK | ASN: 396982 (Google LLC) | Protocol: HTTP/2 (GET) | Endpoint: /nuxt.config.ts | Timestamp: 2026-11-06T17:48:09Z | UA: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers ...
show more
Triggered Cloudflare WAF (firewallCustom) from BR.
Action: BLOCK | ASN: 396982 (Google LLC) | Protocol: HTTP/2 (GET) | Endpoint: /nuxt.config.ts | Timestamp: 2026-11-06T17:48:09Z | UA: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
show less
Bad Web Bot
🇬🇧
NotCool
2026-11-06 17:22:19
UTC ·
(13 hours ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 35.199.105.179 (BR/Brazil/179.105.199.35.bc.googleusercontent.com): 50 in the last 3600 secs
Bad Web Bot
🇳🇴
jad-abuse
2026-11-06 17:03:08
UTC ·
(14 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, path_traversal, git_exposure, aws_creds. Observed by 1 sensor(s); 93 hits.
Web App Attack
🇪🇸
bohl-aiG5aef
2026-11-06 16:58:12
UTC ·
(14 hours ago)
Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound
Hacking
🇧🇷
radardatelecom
2026-11-06 16:54:03
UTC ·
(14 hours ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack