Anonymous
2026-11-02 13:57:17
UTC ·
(1 week ago)
35.234.104.109 - - [02/Nov/2026:14:57:16 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.234.104.109 - - [02/Nov/2026:14:57:16 +0100] "GET /settings%2F.env ...
show more
35.234.104.109 - - [02/Nov/2026:14:57:16 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.234.104.109 - - [02/Nov/2026:14:57:16 +0100] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.234.104.109 - - [02/Nov/2026:14:57:16 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.234.104.109 - - [02/Nov/2026:14:57:16 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.234.104.109 - - [02/Nov/2026:14:57:16 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://o
...
show less
Brute-Force
SSH
🇩🇪
AetherFox
2026-11-02 13:42:34
UTC ·
(1 week ago)
AetherFox VoidGuard detected: [Mon Nov 02 14:42:33.638862 2026] [authz_core:error] [pid 46256:tid 46300] [client 35.234.104.109:39518] AH01630: client denied by server configuration: proxy:https://136.243.123.86/robots.txt
[Mon Nov 02 14:42:33.638957 ...
show more
AetherFox VoidGuard detected: [Mon Nov 02 14:42:33.638862 2026] [authz_core:error] [pid 46256:tid 46300] [client 35.234.104.109:39518] AH01630: client denied by server configuration: proxy:https://136.243.123.86/robots.txt
[Mon Nov 02 14:42:33.638957 2026] [authz_core:error] [pid 46256:tid 46300] [client 35.234.104.109:39518] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Mon Nov 02 14:42:33.694301 2026] [authz_core:error] [pid 46256:tid 46303] [client 35.234.104.109:39518] AH01630: client denied by server configuration: proxy:https://136.243.123.86/sitemap.xml
[Mon Nov 02 14:42:33.694430 2026] [authz_core:error] [pid 46256:tid 46303] [client 35.234.104.109:39518] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Mon Nov 02 14:42:33.743000 2026] [authz_core:error] [pid 46256:tid 46286] [client 35.234.104.109:39518] AH01630: client denied by server configuration: proxy:https://136.243.123.86/sitemap_index.xml
...
show less
Bad Web Bot
Web App Attack
🇪🇨
CYBER-SECURITY-MM
2026-11-02 13:15:02
UTC ·
(1 week ago)
Detected and banned by CrowdSec. Scenario: crowdsecurity/http-path-traversal-probing. HTTP 400. Path: /appearance/../../proc/self/environ. Evidence: 1 matching alerts.
Web App Attack
Anonymous
2026-11-02 13:06:41
UTC ·
(1 week ago)
35.234.104.109 - - [02/Nov/2026:14:06:40 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.234.104.109 - - [02/Nov ...
show more
35.234.104.109 - - [02/Nov/2026:14:06:40 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.234.104.109 - - [02/Nov/2026:14:06:40 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.234.104.109 - - [02/Nov/2026:14:06:40 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.234.104.109 - - [02/Nov/2026:14:06:40 +0100] "GET /appearance/../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.234.104.109 - - [02/Nov/2026:14:06:40 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Hun
...
show less
Brute-Force
SSH
Anonymous
2026-11-02 12:22:51
UTC ·
(1 week ago)
35.234.104.109 - - [02/Nov/2026:13:22:49 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.234.104.109 - - [02/Nov/2026:13: ...
show more
35.234.104.109 - - [02/Nov/2026:13:22:49 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.234.104.109 - - [02/Nov/2026:13:22:49 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.234.104.109 - - [02/Nov/2026:13:22:49 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.234.104.109 - - [02/Nov/2026:13:22:49 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.234.104.109 - - [02/Nov/2026:13:22:49 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Brute-Force
SSH
🇳🇱
Savvii
2026-11-02 12:08:16
UTC ·
(1 week ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-02 11:48:05
UTC ·
(1 week ago)
35.234.104.109 - - [02/Nov/2026:12:48:04 +0100] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.234.104.109 - - [02/Nov/2026:12:48:04 +0100] "GET /api%2F.env HTTP/2.0" 404 265 ...
show more
35.234.104.109 - - [02/Nov/2026:12:48:04 +0100] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.234.104.109 - - [02/Nov/2026:12:48:04 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.234.104.109 - - [02/Nov/2026:12:48:04 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.234.104.109 - - [02/Nov/2026:12:48:04 +0100] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.234.104.109 - - [02/Nov/2026:12:48:04 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
...
show less
Brute-Force
SSH
Anonymous
2026-11-02 11:45:33
UTC ·
(1 week ago)
WordPress attack/probe (auto-banned by site firewall): path traversal (../). Requests (UTC): 2026-11-02 11:45:33Z /sitemap.xml [301]; 2026-11-02 11:45:35Z /sitemap_index.xml [200]; 2026-11-02 11:45:36Z /post-sitemap.xml [200]; 2026-11-02 11:45:38Z /p ...
show more
WordPress attack/probe (auto-banned by site firewall): path traversal (../). Requests (UTC): 2026-11-02 11:45:33Z /sitemap.xml [301]; 2026-11-02 11:45:35Z /sitemap_index.xml [200]; 2026-11-02 11:45:36Z /post-sitemap.xml [200]; 2026-11-02 11:45:38Z /page-sitemap.xml [200]; 2026-11-02 11:45:40Z /product-sitemap.xml [200]; 2026-11-02 11:45:41Z /category-sitemap.xml [200]; 2026-11-02 11:45:42Z /post_tag-sitemap.xml [200]; 2026-11-02 11:45:43Z /product_brand-sitemap.xml [200]
show less
Hacking
Web App Attack
Anonymous
2026-11-02 11:20:09
UTC ·
(1 week ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇯🇵
syakesaba
2026-11-02 11:10:08
UTC ·
(1 week ago)
❌️ This host failed 5 times connecting my WEB server. My contact: https://www.syakesaba.com/
Brute-Force
Web App Attack
🇫🇮
stinpriza
2026-11-02 11:08:06
UTC ·
(1 week ago)
Web App Attack
Web App Attack
Anonymous
2026-11-02 11:00:29
UTC ·
(1 week ago)
35.234.104.109 - - [02/Nov/2026:12:00:28 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.234.104.109 - - [02/Nov/2026:12:00:28 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-Ex ...
show more
35.234.104.109 - - [02/Nov/2026:12:00:28 +0100] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.234.104.109 - - [02/Nov/2026:12:00:28 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.234.104.109 - - [02/Nov/2026:12:00:28 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.234.104.109 - - [02/Nov/2026:12:00:28 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.234.104.109 - - [02/Nov/2026:12:00:28 +0100] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/craw
...
show less
Brute-Force
SSH
🇩🇪
arnisolutions
2026-11-02 09:49:40
UTC ·
(1 week ago)
Mass vulnerability scanning (LFI / path traversal probes with query parameters such as lokasie=/proc/...) against a production server. Observed on 1 day(s) between 2026-11-02 and 2026-11-02 (UTC). Additional activity: badscanner. Sample request: GET ...
show more
Mass vulnerability scanning (LFI / path traversal probes with query parameters such as lokasie=/proc/...) against a production server. Observed on 1 day(s) between 2026-11-02 and 2026-11-02 (UTC). Additional activity: badscanner. Sample request: GET /.next/routes-manifest.json HTTP/2.0
show less
Web App Attack
Hacking
🇩🇪
FD-IX
2026-11-02 09:47:12
UTC ·
(1 week ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
Anonymous
2026-11-02 09:45:39
UTC ·
(1 week ago)
35.234.104.109 - - [02/Nov/2026:10:45:38 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
35.234.104.109 - - [02/Nov/2026:10:45:38 +0100] "GET /i ...
show more
35.234.104.109 - - [02/Nov/2026:10:45:38 +0100] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
35.234.104.109 - - [02/Nov/2026:10:45:38 +0100] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.234.104.109 - - [02/Nov/2026:10:45:38 +0100] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.234.104.109 - - [02/Nov/2026:10:45:38 +0100] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.234.104.109 - - [02/Nov/2026:10:45:38 +0100] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +c
...
show less
Brute-Force
SSH