๐ณ๐ฑ
Savvii
2026-10-17 17:22:24
(1 hour ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
updown.io
2026-10-17 16:28:59
(2 hours ago)
{"level":"info","ts":1792254533.3264096,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1792254533.3264096,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.243.100.85","remote_port":"57110","client_ip":"35.243.100.85","proto":"HTTP/2.0","method":"POST","host":"status.lmdmax.com","uri":"/graphql","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Origin":["https://status.lmdmax.com"],"Content-Type":["application/json"],"Sec-Fetch-Dest":["empty"],"Sec-Fetch-Mode":["cors"],"Accept":["*/*"],"Sec-Ch-Ua":["\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\""],"Referer":["https://status.lmdmax.com"],"Accept-Language":["en-US,en;q=0.9"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Priority":["u=1, i"],"Sec-Fetch-Site":["same-origin"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Mobile":["?0"],"Content-Length":["86"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status
...
show less
DDoS Attack
Web App Attack
๐ต๐ฑ
gandaflux
2026-10-17 16:11:44
(2 hours ago)
35.243.100.85 [redacted-domain] - [17/Oct/2026:18:11:42 +0200] "GET /robots.txt HTTP/2.0" 404 1497 " ...
show more
35.243.100.85 [redacted-domain] - [17/Oct/2026:18:11:42 +0200] "GET /robots.txt HTTP/2.0" 404 1497 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +[redacted-url]/docs/sharing/webmasters/crawler)"
35.243.100.85 [redacted-domain] - [17/Oct/2026:18:11:42 +0200] "GET /users/login HTTP/2.0" 404 1497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.243.100.85 [redacted-domain] - [17/Oct/2026:18:11:42 +0200] "GET /admin/login HTTP/2.0" 404 1497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.243.100.85 [redacted-domain] - [17/Oct/2026:18:11:42 +0200] "GET /account/login HTTP/2.0" 404 1497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35
show less
Bad Web Bot
Web App Attack
๐ธ๐ฌ
Cloudkul Cloudkul
2026-10-17 15:48:47
(2 hours ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
๐ณ๐ฑ
melroy89
2026-10-17 15:41:55
(2 hours ago)
35.243.100.85 - - [17/Oct/2026:17:41:47 +0200] "GET /cfvytbyw28phohnwccqw HTTP/2.0" 403 93 "" "Mozil ...
show more
35.243.100.85 - - [17/Oct/2026:17:41:47 +0200] "GET /cfvytbyw28phohnwccqw HTTP/2.0" 403 93 "" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "gitlab.melroy.org" 0.000 gate=not_checked
35.243.100.85 - - [17/Oct/2026:17:41:47 +0200] "GET /t3ulich280djj7rmsb9s HTTP/2.0" 403 93 "" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" "gitlab.melroy.org" 0.001 gate=not_checked
35.243.100.85 - - [17/Oct/2026:17:41:47 +0200] "POST / HTTP/2.0" 403 93 "" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" "gitlab.melroy.org" 0.001 gate=not_checked
35.243.100.85 - - [17/Oct/2026:17:41:47 +0200] "GET /assets/manifest.json HTTP/2.0" 404 19 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "gitlab.melroy.org" 0.002 gate=not_checked
35.243.100.85 - - [17/Oct/2026:17:41:49 +0200] "GET /.env.credentials HTTP/2.0" 4
...
show less
Web App Attack
Anonymous
2026-10-17 15:32:24
(2 hours ago)
harvesting of secret and configuration files (.env, .git/config, .aws/credentials, SSH keys); e.g. / ...
show more
harvesting of secret and configuration files (.env, .git/config, .aws/credentials, SSH keys); e.g. /.env.supabase, /.env.credentials, /.env.production.local. Requests blocked by our WAF (automated report).
show less
Web App Attack
Hacking
๐ฉ๐ช
raph
2026-10-17 15:01:19
(3 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-17 14:52:25
(3 hours ago)
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.243.100.85 - - [17/Oct/2026:16:52:17 +0200] "GET /.git/config HTTP/2.0" 404 126486 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
debestelapp
2026-10-17 14:40:10
(3 hours ago)
Web App Attack
๐ซ๐ท
chrisj
2026-10-17 13:33:07
(4 hours ago)
2026-10-17T13:33:06.546403+00:00 www.diamondaviators.net throttler[772]: Throttle IP 35.243.100.85 w ...
show more
2026-10-17T13:33:06.546403+00:00 www.diamondaviators.net throttler[772]: Throttle IP 35.243.100.85 with 25 denials
...
show less
Bad Web Bot
Anonymous
2026-10-17 13:15:00
(5 hours ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Mendip_Defender
2026-10-17 13:08:11
(5 hours ago)
35.243.100.85 - - [17/Oct/2026:14:08:14 +0100] "GET /z9x8c7v6b5-debug-trigger-www.trailrides-wales.c ...
show more
35.243.100.85 - - [17/Oct/2026:14:08:14 +0100] "GET /z9x8c7v6b5-debug-trigger-www.trailrides-wales.com HTTP/1.1" 403 6434 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
...
show less
Bad Web Bot
๐บ๐ธ
mnsf
2026-10-17 13:05:22
(5 hours ago)
Too many Status 50X (119)
Scanning/Probing (80)
Request Overload (124)
Brute-Force
Web App Attack
Anonymous
2026-10-17 13:04:12
(5 hours ago)
Bot / seems abusive / Apache connections: 34
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
Anonymous
2026-10-17 12:52:42
(5 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.243.100.85 (JP/Japan/85.100.243.35.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.243.100.85 (JP/Japan/85.100.243.35.bc.googleusercontent.com)
show less
SQL Injection