๐บ๐ธ
TAY
2026-10-12 16:17:48
(13 minutes ago)
35.247.129.72 - - [13/Oct/2026:00:17:46 +0800] "GET /img../.env HTTP/1.1" 200 6858 "-" "Mozilla/5.0 ...
show more
35.247.129.72 - - [13/Oct/2026:00:17:46 +0800] "GET /img../.env HTTP/1.1" 200 6858 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.247.129.72 - - [13/Oct/2026:00:17:46 +0800] "GET /js../.env HTTP/1.1" 200 1113 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.247.129.72 - - [13/Oct/2026:00:17:46 +0800] "GET /css../.env HTTP/1.1" 200 1113 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.247.129.72 - - [13/Oct/2026:00:17:46 +0800] "GET /media../.env HTTP/1.1" 200 6858 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.247.129.72 - - [13/Oct/2026:00:17:46 +0800] "GET /uploads../.env HTTP/1.1" 200 6858 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.247.129.72 - - [13/Oct/2026:00:17:47 +0800] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "
...
show less
Brute-Force
๐บ๐ธ
daveoctober
2026-10-12 12:52:53
(3 hours ago)
October Sentinel: honeypot triggered
Bad Web Bot
Web App Attack
๐บ๐ธ
snappic
2026-10-12 12:25:58
(4 hours ago)
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (c ...
show more
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TAY
2026-10-12 11:08:05
(5 hours ago)
35.247.129.72 - - [12/Oct/2026:19:08:03 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozil ...
show more
35.247.129.72 - - [12/Oct/2026:19:08:03 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.247.129.72 - - [12/Oct/2026:19:08:03 +0800] "GET /@fs/../.env?import&raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.247.129.72 - - [12/Oct/2026:19:08:04 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.247.129.72 - - [12/Oct/2026:19:08:04 +0800] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.247.129.72 - - [12/Oct/2026:19:08:04 +0800] "GET /_image?href=/../../../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplex
...
show less
Brute-Force
๐ณ๐ฑ
Site.eu
2026-10-12 10:55:42
(5 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฌ๐ง
consul.to
2026-10-12 10:33:18
(5 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-12 10:27:32
(6 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-11 19:52:53
(20 hours ago)
IVski WAF | Suspicious activity detected - generic bot or scanner pattern
Hacking
Brute-Force
Web App Attack
๐ซ๐ท
geot
2026-10-10 20:59:09
(1 day ago)
GET /.env.production?raw HTTP/1.1
GET /.env.local?.svg?.wasm?init HTTP/1.1
GET /proc/self/cgroup HTT ...
show more
GET /.env.production?raw HTTP/1.1
GET /.env.local?.svg?.wasm?init HTTP/1.1
GET /proc/self/cgroup HTTP/1.1
GET /.well-known/jwks.json HTTP/1.1
GET /api/v1/config/ HTTP/1.1
show less
Hacking
Web App Attack
๐ช๐ธ
robotstxt
2026-10-10 15:42:13
(2 days ago)
35.247.129.72 - - [10/Oct/2026:15:42:11 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2 ...
show more
35.247.129.72 - - [10/Oct/2026:15:42:11 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.247.129.72"
35.247.129.72 - - [10/Oct/2026:15:42:11 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.247.129.72"
35.247.129.72 - - [10/Oct/2026:15:42:11 +0000] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/1.1" 400 193 "-" "-" "-" edge="35.247.129.72"
35.247.129.72 - - [10/Oct/2026:15:42:11 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.247.129.72"
35.247.129.72 - - [10/Oct/2026:15:42:11 +0000] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/1.1" 400 193 "-" "-" "-" edge="35.247.129.72"
...
show less
Web Spam
Web App Attack
๐ซ๐ท
Entalpi.net
2026-10-10 15:29:23
(2 days ago)
Repeated requests against sensitive web endpoints
Web App Attack
๐บ๐ธ
WellSpring
2026-10-10 15:22:19
(2 days ago)
env leak on 817.today/@fs/app/.env โ WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
Anonymous
2026-10-10 09:01:42
(2 days ago)
Web App Attack
Anonymous
2026-10-10 05:37:36
(2 days ago)
malicious scanning tool activity
Web App Attack
๐ฉ๐ช
paissangroup
2026-10-10 04:55:34
(2 days ago)
Multiple WAF Violations
Web App Attack