Anonymous
2026-11-05 12:29:36
UTC ·
(1 week ago)
35.232.137.49 - - [05/Nov/2026:13:29:35 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.232.137.49 - - [05/Nov/2026:13:29:35 +0100] "GET /static/../../../a/../../../. ...
show more
35.232.137.49 - - [05/Nov/2026:13:29:35 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.232.137.49 - - [05/Nov/2026:13:29:35 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.232.137.49 - - [05/Nov/2026:13:29:35 +0100] "GET /static/../../../a/../../../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.232.137.49 - - [05/Nov/2026:13:29:35 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.232.137.49 - - [05/Nov/2026:13:29:35 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/
...
show less
Brute-Force
SSH
🇺🇸
dtorrer
2026-11-05 12:14:28
UTC ·
(1 week ago)
General vulnerability scan.
Port Scan
Anonymous
2026-11-05 11:59:16
UTC ·
(1 week ago)
35.232.137.49 - - [05/Nov/2026:12:59:15 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.232.137.49 - - [05/Nov/2026: ...
show more
35.232.137.49 - - [05/Nov/2026:12:59:15 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.232.137.49 - - [05/Nov/2026:12:59:16 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.232.137.49 - - [05/Nov/2026:12:59:16 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.232.137.49 - - [05/Nov/2026:12:59:16 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.232.137.49 - - [05/Nov/2026:12:59:16 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 40
...
show less
Brute-Force
SSH
🇬🇧
NotCool
2026-11-05 11:12:13
UTC ·
(1 week ago)
[7200] (CRAWLDELAY,DOTENVPROBE) Login failure/trigger from 35.232.137.49 (US/United States/49.137.232.35.bc.googleusercontent.com): 50 in the last 3600 secs
Brute-Force
Anonymous
2026-11-05 10:32:50
UTC ·
(1 week ago)
35.232.137.49 - - [05/Nov/2026:11:32:48 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.232.137.49 - - [05/Nov/2026:11:32:48 +0100] "GET /appearanc ...
show more
35.232.137.49 - - [05/Nov/2026:11:32:48 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.232.137.49 - - [05/Nov/2026:11:32:48 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
35.232.137.49 - - [05/Nov/2026:11:32:48 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.232.137.49 - - [05/Nov/2026:11:32:48 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.232.137.49 - - [05/Nov/2026:11:32:48 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 29
...
show less
Brute-Force
SSH
🇩🇪
AetherFox
2026-11-05 09:39:51
UTC ·
(1 week ago)
AetherFox VoidGuard detected: [Thu Nov 05 09:39:50.103544 2026] [authz_core:error] [pid 2112420:tid 2112439] [client 35.232.137.49:44116] AH01630: client denied by server configuration: proxy:https://[MASKED]/robots.txt
[Thu Nov 05 09:39:50.385346 20 ...
show more
AetherFox VoidGuard detected: [Thu Nov 05 09:39:50.103544 2026] [authz_core:error] [pid 2112420:tid 2112439] [client 35.232.137.49:44116] AH01630: client denied by server configuration: proxy:https://[MASKED]/robots.txt
[Thu Nov 05 09:39:50.385346 2026] [authz_core:error] [pid 2112420:tid 2112440] [client 35.232.137.49:44116] AH01630: client denied by server configuration: proxy:https://[MASKED]/sitemap.xml
[Thu Nov 05 09:39:50.522368 2026] [authz_core:error] [pid 2112420:tid 2112444] [client 35.232.137.49:44116] AH01630: client denied by server configuration: proxy:https://[MASKED]/sitemap_index.xml
[Thu Nov 05 09:39:50.687990 2026] [authz_core:error] [pid 2112420:tid 2112425] [client 35.232.137.49:44116] AH01630: client denied by server configuration: proxy:https://[MASKED]/z9x8c7v6b5-debug-trigger-draconigen.net
[Thu Nov 05 09:39:51.028807 2026] [authz_core:error] [pid 2112421:tid 2112472] [client 35.232.137.49:44142] AH01630: client denied by server
...
show less
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-11-05 08:57:02
UTC ·
(1 week ago)
Bad behaviour
Web Spam
🇫🇷
regishoussin
2026-11-05 08:24:44
UTC ·
(1 week ago)
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-11-05 08:24 UTC.
Bad Web Bot
Web App Attack
Anonymous
2026-11-05 08:19:11
UTC ·
(1 week ago)
35.232.137.49 - - [05/Nov/2026:09:19:09 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile ...
show more
35.232.137.49 - - [05/Nov/2026:09:19:09 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.232.137.49 - - [05/Nov/2026:09:19:10 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.232.137.49 - - [05/Nov/2026:09:19:10 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.232.137.49 - - [05/Nov/2026:09:19:10 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.232.137.49 - - [05/Nov/2026:09:19:10 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "CCBot/2.0 (https://commoncra
...
show less
Brute-Force
SSH
🇨🇦
Mediashaker
2026-11-05 06:54:21
UTC ·
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.232.137.49 (US/United States/49.137.232.35.bc.googleusercontent.com)
Bad Web Bot
Anonymous
2026-11-05 06:40:39
UTC ·
(1 week ago)
35.232.137.49 - - [05/Nov/2026:07:40:38 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.232.137.49 - - [0 ...
show more
35.232.137.49 - - [05/Nov/2026:07:40:38 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.232.137.49 - - [05/Nov/2026:07:40:38 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.232.137.49 - - [05/Nov/2026:07:40:38 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.232.137.49 - - [05/Nov/2026:07:40:38 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.232.137.49 - - [05/Nov/2026:07:40:38 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.c
...
show less
Brute-Force
SSH
🇬🇧
NotCool
2026-11-05 06:03:51
UTC ·
(1 week ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 35.232.137.49 (US/United States/49.137.232.35.bc.googleusercontent.com): 50 in the last 3600 secs
Bad Web Bot
Anonymous
2026-11-05 05:54:44
UTC ·
(1 week ago)
35.232.137.49 - - [05/Nov/2026:06:54:43 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.232.137.49 - - [05/Nov/2026:0 ...
show more
35.232.137.49 - - [05/Nov/2026:06:54:43 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.232.137.49 - - [05/Nov/2026:06:54:43 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.232.137.49 - - [05/Nov/2026:06:54:43 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.232.137.49 - - [05/Nov/2026:06:54:43 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.23
...
show less
Brute-Force
SSH
🇫🇷
masterguru
2026-11-05 05:05:24
UTC ·
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
Anonymous
2026-11-05 04:32:28
UTC ·
(1 week ago)
35.232.137.49 - - [05/Nov/2026:05:32:28 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.232.137.49 - - [05/Nov/2026:05: ...
show more
35.232.137.49 - - [05/Nov/2026:05:32:28 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.232.137.49 - - [05/Nov/2026:05:32:28 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.232.137.49 - - [05/Nov/2026:05:32:28 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.232.137.49 - - [05/Nov/2026:05:32:28 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
35.232.137.49 - - [05/Nov/2026:05:32:28 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 400
...
show less
Brute-Force
SSH