Anonymous
2026-11-08 21:29:15
UTC ·
(4 hours ago)
35.203.92.186 - - [08/Nov/2026:22:29:14 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.203.92.186 - - [08/No ...
show more
35.203.92.186 - - [08/Nov/2026:22:29:14 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.203.92.186 - - [08/Nov/2026:22:29:14 +0100] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.203.92.186 - - [08/Nov/2026:22:29:14 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.203.92.186 - - [08/Nov/2026:22:29:14 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.203.92.186 - - [08/Nov/2026:22:29:14 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Brute-Force
SSH
🇧🇪
cmbplf
2026-11-08 20:41:44
UTC ·
(5 hours ago)
164 requests with url.path */proc/*
Brute-Force
Bad Web Bot
Anonymous
2026-11-08 20:38:25
UTC ·
(5 hours ago)
35.203.92.186 - - [08/Nov/2026:21:38:24 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.203.92.186 - - [08/Nov/2026:21:38:24 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2 ...
show more
35.203.92.186 - - [08/Nov/2026:21:38:24 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.203.92.186 - - [08/Nov/2026:21:38:24 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.203.92.186 - - [08/Nov/2026:21:38:24 +0100] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
35.203.92.186 - - [08/Nov/2026:21:38:24 +0100] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.203.92.186 - - [08/Nov/2026:21:38:24 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
...
show less
Brute-Force
SSH
🇩🇪
maxpower
2026-11-08 20:18:39
UTC ·
(6 hours ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 35.203.92.186 (CA/Canada/186.92.203.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.203.92.186 - - [08/Nov/2026:21:18:35 +0100] "GET /sitemap ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 35.203.92.186 (CA/Canada/186.92.203.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.203.92.186 - - [08/Nov/2026:21:18:35 +0100] "GET /sitemap.xml HTTP/2.0" 200 1608 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" "100.114.162.253,35.203.92.186" host=www.villapardi.it
show less
Port Scan
Anonymous
2026-11-08 19:55:55
UTC ·
(6 hours ago)
35.203.92.186 - - [08/Nov/2026:20:55:54 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.203.92.186 - - [08/Nov/2026:20:55:54 +0100] "GET /%2e%2e/.env HTTP ...
show more
35.203.92.186 - - [08/Nov/2026:20:55:54 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.203.92.186 - - [08/Nov/2026:20:55:54 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.203.92.186 - - [08/Nov/2026:20:55:54 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
35.203.92.186 - - [08/Nov/2026:20:55:54 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.203.92.186 - - [08/Nov/2026:20:55:54 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0
...
show less
Brute-Force
SSH
🇮🇹
zenmorro
2026-11-08 19:52:46
UTC ·
(6 hours ago)
Honeypot hit (n8n:5678) — scanner-path: /console. Automated report from honeypot infrastructure
Port Scan
Web App Attack
🇩🇪
paissangroup
2026-11-08 19:13:11
UTC ·
(7 hours ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-11-08 18:27:48
UTC ·
(8 hours ago)
35.203.92.186 - - [08/Nov/2026:19:27:47 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.c ...
show more
35.203.92.186 - - [08/Nov/2026:19:27:47 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.203.92.186 - - [08/Nov/2026:19:27:47 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.203.92.186 - - [08/Nov/2026:19:27:47 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.203.92.186 - - [08/Nov/2026:19:27:47 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.203.92.186 - - [08/Nov/2026:19:27:47 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Brute-Force
SSH
🇮🇹
Inartis
2026-11-08 18:13:23
UTC ·
(8 hours ago)
35.203.92.186 - - [08/Nov/2026:19:13:21 +0100] "GET /admin HTTP/1.1" 200 56545 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.203.92.186 - - [08/Nov/2026:19:13:21 ...
show more
35.203.92.186 - - [08/Nov/2026:19:13:21 +0100] "GET /admin HTTP/1.1" 200 56545 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.203.92.186 - - [08/Nov/2026:19:13:21 +0100] "GET /admin/users HTTP/1.1" 200 51374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
35.203.92.186 - - [08/Nov/2026:19:13:22 +0100] "GET /admin/ HTTP/1.1" 200 56545 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-08 17:38:24
UTC ·
(8 hours ago)
35.203.92.186 - - [08/Nov/2026:18:38:23 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.203.92.186 - - [08/Nov/2026:18:38:23 +0100] "GET /..%2 ...
show more
35.203.92.186 - - [08/Nov/2026:18:38:23 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.203.92.186 - - [08/Nov/2026:18:38:23 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.203.92.186 - - [08/Nov/2026:18:38:23 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.203.92.186 - - [08/Nov/2026:18:38:23 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.203.92.186 - - [08/Nov/2026:18:38:23 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Brute-Force
SSH
🇬🇧
consul.to
2026-11-08 17:16:07
UTC ·
(9 hours ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-11-08 16:30:22
UTC ·
(9 hours ago)
35.203.92.186 - - [08/Nov/2026:17:30:21 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.203.92.186 - - [08/Nov/2026:17:30:21 +0100] "GET /api/uploads/%2e%2e%2f%2e%2 ...
show more
35.203.92.186 - - [08/Nov/2026:17:30:21 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.203.92.186 - - [08/Nov/2026:17:30:21 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.203.92.186 - - [08/Nov/2026:17:30:21 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.203.92.186 - - [08/Nov/2026:17:30:21 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.203.92.186 - - [08/Nov/2026:17:30:21 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Brute-Force
SSH
🇮🇹
CoreTech srl
2026-11-08 16:23:57
UTC ·
(10 hours ago)
cloudlinux2 fail2ban: 2026-11-08 17:19:56,811 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 45.177.144.252 - 2026-11-08 17:19:55cloudlinux2 fail2ban: 2026-11-08 17:20:15,327 fail2ban.filter [1672]: INFO [plesk-modsecurity ...
show more
cloudlinux2 fail2ban: 2026-11-08 17:19:56,811 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 45.177.144.252 - 2026-11-08 17:19:55cloudlinux2 fail2ban: 2026-11-08 17:20:15,327 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 35.253.216.217 - 2026-11-08 17:20:15cloudlinux2 fail2ban: 2026-11-08 17:20:17,242 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 185.212.236.73 - 2026-11-08 17:20:16cloudlinux2 fail2ban: 2026-11-08 17:20:43,705 fail2ban.filter [1672]: INFO [plesk-wordpress] Found 93.178.115.173 - 2026-11-08 17:20:42cloudlinux2 fail2ban: 2026-11-08 17:21:31,304 fail2ban.actions [1672]: NOTICE [plesk-modsecurity] Ban 35.240.227.61cloudlinux2 fail2ban: 2026-11-08 17:21:30,628 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 35.240.227.61 - 2026-11-08 17:21:30cloudlinux2 fail2ban: 2026-11-08 17:21:30,982 fail2ban.filter [1672]: INFO [plesk-modsecurity] Found 35.240.227.61 - 2026-11-08 17:21:30cloudlinux2 fail2ban:
show less
Web App Attack
Anonymous
2026-11-08 16:00:03
UTC ·
(10 hours ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
Anonymous
2026-11-08 15:57:57
UTC ·
(10 hours ago)
35.203.92.186 - - [08/Nov/2026:16:57:56 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.203.92.186 - - [08/Nov/2026:16:57:57 +0100] "GET /%2E% ...
show more
35.203.92.186 - - [08/Nov/2026:16:57:56 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.203.92.186 - - [08/Nov/2026:16:57:57 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.203.92.186 - - [08/Nov/2026:16:57:57 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.203.92.186 - - [08/Nov/2026:16:57:57 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.203.92.186 - - [08/Nov/2026:16:57:57 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
...
show less
Brute-Force
SSH