๐ซ๐ท
arsonist
2026-09-10 08:56:39
(48 minutes ago)
[fail2ban]
2026-09-10T08:56:38.256541+00:00 arson caddy[1890453]: {"level":"info","ts":1789030598.25 ...
show more
[fail2ban]
2026-09-10T08:56:38.256541+00:00 arson caddy[1890453]: {"level":"info","ts":1789030598.2565024,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"104.23.166.65","remote_port":"10628","client_ip":"104.23.166.65","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.env","headers":{"Accept":["*/*"],"Cf-Connecting-Ip":["45.148.10.140"],"Cf-Ray":["a38d38770e804b63-AMS"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Forwarded-Proto":["https"],"X-Forwarded-For":["45.148.10.140"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, br"],"Cf-Ipcountry":["NL"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"ayuworks.xyz","ech":false}},"bytes_read":0,"user_id":"","duration":0.00012226,"
...
show less
Bad Web Bot
๐ง๐ฌ
Stoyko Stoykov
2026-09-09 05:09:37
(1 day ago)
104.23.166.65 - - [09/Sep/2026:08:09:36 +0300] "GET /.git/config HTTP/2.0" 404 176 "-" "Mozilla/5.0 ...
show more
104.23.166.65 - - [09/Sep/2026:08:09:36 +0300] "GET /.git/config HTTP/2.0" 404 176 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-09-06 15:24:09
(3 days ago)
104.23.166.65 - - [06/Sep/2026:18:24:09 +0300] "GET /.env HTTP/2.0" 404 176 "-" "Mozilla/5.0 (Window ...
show more
104.23.166.65 - - [06/Sep/2026:18:24:09 +0300] "GET /.env HTTP/2.0" 404 176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-09-04 06:03:16
(6 days ago)
104.23.166.65 - - [04/Sep/2026:09:03:16 +0300] "POST /wp/wp-json/batch/v1 HTTP/2.0" 404 114 "https:/ ...
show more
104.23.166.65 - - [04/Sep/2026:09:03:16 +0300] "POST /wp/wp-json/batch/v1 HTTP/2.0" 404 114 "https://mail.it-systems.org/wp/wp-admin/" "WordPress/6.4.3"
...
show less
Hacking
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-08-27 20:37:23
(1 week ago)
104.23.166.65 - - [27/Aug/2026:23:37:21 +0300] "GET /@fs/root/.aws/credentials?raw?? HTTP/2.0" 404 1 ...
show more
104.23.166.65 - - [27/Aug/2026:23:37:21 +0300] "GET /@fs/root/.aws/credentials?raw?? HTTP/2.0" 404 114 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com)"
...
show less
Hacking
Web App Attack
๐ซ๐ท
arsonist
2026-08-23 14:59:47
(2 weeks ago)
This IP accessed the path /.env, which is banned. Powered by ListenCaddy
Bad Web Bot
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-08-23 12:59:47
(2 weeks ago)
104.23.166.65 - - [23/Aug/2026:15:59:46 +0300] "GET /.git/config HTTP/2.0" 404 114 "-" "Mozilla/5.0 ...
show more
104.23.166.65 - - [23/Aug/2026:15:59:46 +0300] "GET /.git/config HTTP/2.0" 404 114 "-" "Mozilla/5.0 (compatible; GitFinder/1.0)"
...
show less
Hacking
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-08-22 11:51:16
(2 weeks ago)
104.23.166.65 - - [22/Aug/2026:14:51:16 +0300] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gra ...
show more
104.23.166.65 - - [22/Aug/2026:14:51:16 +0300] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/2.0" 404 114 "http://mail.it-systems.org/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings" "Mozilla/5.0 (compatible; SecurityResearch/1.0; )"
...
show less
Hacking
Web App Attack
๐บ๐ธ
craudiovizai
2026-08-22 06:30:11
(2 weeks ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. ...
show more
Automated honeypot detection. honeypot against a Next.js application. Paths: /wp-admin/install.php. Blocked at the edge.
show less
Web App Attack
Bad Web Bot
๐ท๐บ
DZBOT
2026-08-10 05:41:07
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-08-04 21:37:26
(1 month ago)
104.23.166.65 - - [05/Aug/2026:00:37:26 +0300] "GET /admin/.env HTTP/1.1" 301 162 "-" "Opera/9.27 (W ...
show more
104.23.166.65 - - [05/Aug/2026:00:37:26 +0300] "GET /admin/.env HTTP/1.1" 301 162 "-" "Opera/9.27 (Windows NT 5.1; U; ja)"
...
show less
Hacking
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-08-01 08:04:09
(1 month ago)
104.23.166.65 - - [01/Aug/2026:11:04:09 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/2.0" 404 ...
show more
104.23.166.65 - - [01/Aug/2026:11:04:09 +0300] "GET //web/wp-includes/wlwmanifest.xml HTTP/2.0" 404 176 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
Hacking
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-07-30 00:58:27
(1 month ago)
104.23.166.65 - - [30/Jul/2026:03:58:27 +0300] "GET /.env.production HTTP/2.0" 404 114 "-" "Go-http- ...
show more
104.23.166.65 - - [30/Jul/2026:03:58:27 +0300] "GET /.env.production HTTP/2.0" 404 114 "-" "Go-http-client/1.1"
...
show less
Hacking
Web App Attack
Anonymous
2026-07-07 00:43:22
(2 months ago)
104.23.166.65 - - [07/Jul/2026:02:42:38 +0200] "GET /%2flinusadmin-phpinfo%2ephp HTTP/1.1" 404 124 " ...
show more
104.23.166.65 - - [07/Jul/2026:02:42:38 +0200] "GET /%2flinusadmin-phpinfo%2ephp HTTP/1.1" 404 124 "-" "Mozilla/5.0 (compatible; pathscan/1.0)"
104.23.166.65 - - [07/Jul/2026:02:42:42 +0200] "GET /%2flogs%2f HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; pathscan/1.0)"
104.23.166.65 - - [07/Jul/2026:02:42:52 +0200] "GET /%2fmain%2ephp HTTP/1.1" 404 124 "-" "Mozilla/5.0 (compatible; pathscan/1.0)"
104.23.166.65 - - [07/Jul/2026:02:43:06 +0200] "GET /%2fnew%2ephp HTTP/1.1" 404 124 "-" "Mozilla/5.0 (compatible; pathscan/1.0)"
104.23.166.65 - - [07/Jul/2026:02:43:11 +0200] "GET /%2focp%2ephp HTTP/1.1" 404 124 "-" "Mozilla/5.0 (compatible; pathscan/1.0)"
104.23.166.65 - - [07/Jul/2026:02:43:11 +0200] "GET /%2fo%2ephp HTTP/1.1" 404 124 "-" "Mozilla/5.0 (compatible; pathscan/1.0)"
104.23.166.65 - - [07/Jul/2026:02:43:12 +0200] "GET /%2fof%2ephp HTTP/1.1" 404 124 "-" "Mozilla/5.0 (compatible; pathscan/1.0)"
104.23.166.65 - - [07/Jul/2026:02:43:13 +0200] "GET /%2fold_phpinfo%2ephp HTTP/1.1" 40
...
show less
Bad Web Bot
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-07-06 15:18:38
(2 months ago)
104.23.166.65 - - [06/Jul/2026:18:18:37 +0300] "GET /admin/.git/config HTTP/1.1" 301 162 "-" "Mozill ...
show more
104.23.166.65 - - [06/Jul/2026:18:18:37 +0300] "GET /admin/.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack