๐ซ๐ท
arsonist
2026-10-11 14:00:17
(2 days ago)
[fail2ban]
2026-10-11T14:00:16.863282+00:00 arson caddy[1697]: {"level":"info","ts":1791727216.86323 ...
show more
[fail2ban]
2026-10-11T14:00:16.863282+00:00 arson caddy[1697]: {"level":"info","ts":1791727216.8632371,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.24.32","remote_port":"9830","client_ip":"172.71.24.32","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.env?.svg?.wasm?init","headers":{"X-Forwarded-Proto":["https"],"X-Forwarded-For":["34.146.62.167"],"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Cf-Ipcountry":["JP"],"Accept-Encoding":["gzip, br"],"Accept":["*/*"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Cf-Ray":["a48e63dc2fb8f669-NRT"],"Cf-Connecting-Ip":["34.146.62.167"],"User-Agent":["Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/shari
...
show less
Bad Web Bot
๐ฏ๐ต
weils.net
2026-10-11 12:36:13
(2 days ago)
2026-10-11 20:36:12(GMT+8) - /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared
Bad Web Bot
๐ซ๐ท
arsonist
2026-10-11 05:20:55
(2 days ago)
[fail2ban]
2026-10-11T05:20:54.369703+00:00 arson caddy[1712]: {"level":"info","ts":1791696054.36966 ...
show more
[fail2ban]
2026-10-11T05:20:54.369703+00:00 arson caddy[1712]: {"level":"info","ts":1791696054.369666,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.24.32","remote_port":"10098","client_ip":"172.71.24.32","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.env?.svg?.wasm?init","headers":{"X-Forwarded-For":["34.146.62.167"],"User-Agent":["Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"],"Accept":["*/*"],"Cf-Connecting-Ip":["34.146.62.167"],"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Forwarded-Proto":["https"],"Accept-Encoding":["gzip, br"],"Cf-Ray":["a48b6b0e8f35ae34-NRT"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Ipcountry":[
...
show less
Bad Web Bot
๐ซ๐ท
arsonist
2026-10-11 00:40:43
(2 days ago)
[fail2ban]
2026-10-11T00:40:42.673737+00:00 arson caddy[1712]: {"level":"info","ts":1791679242.67371 ...
show more
[fail2ban]
2026-10-11T00:40:42.673737+00:00 arson caddy[1712]: {"level":"info","ts":1791679242.6737108,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.24.32","remote_port":"11829","client_ip":"172.71.24.32","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.env?.svg?.wasm?init","headers":{"X-Forwarded-Proto":["https"],"Accept":["*/*"],"Cf-Connecting-Ip":["34.146.62.167"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Accept-Encoding":["gzip, br"],"X-Nextjs-Data":["1"],"Cf-Ray":["a489d09d884ee37e-NRT"],"X-Forwarded-For":["34.146.62.167"],"User-Agent":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Cdn-Loop":["cloudflare; loops=1"],"Cf
...
show less
Bad Web Bot
๐ซ๐ท
arsonist
2026-10-10 22:13:10
(3 days ago)
[fail2ban]
2026-10-10T22:13:09.658691+00:00 arson caddy[1712]: {"level":"info","ts":1791670389.65853 ...
show more
[fail2ban]
2026-10-10T22:13:09.658691+00:00 arson caddy[1712]: {"level":"info","ts":1791670389.6585388,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.24.32","remote_port":"10648","client_ip":"172.71.24.32","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.env?.svg?.wasm?init","headers":{"X-Forwarded-Proto":["https"],"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Ipcountry":["JP"],"X-Forwarded-For":["34.146.62.167"],"Cf-Ray":["a488f87a1dee262a-NRT"],"Accept-Encoding":["gzip, br"],"Accept":["*/*"],"User-Agent":["Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"],"Cf-Connecting-Ip":["34.
...
show less
Bad Web Bot
๐ซ๐ท
arsonist
2026-10-10 20:50:37
(3 days ago)
[fail2ban]
2026-10-10T20:50:36.549899+00:00 arson caddy[1712]: {"level":"info","ts":1791665436.54987 ...
show more
[fail2ban]
2026-10-10T20:50:36.549899+00:00 arson caddy[1712]: {"level":"info","ts":1791665436.5498707,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.24.32","remote_port":"10682","client_ip":"172.71.24.32","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.env?.svg?.wasm?init","headers":{"Accept-Encoding":["gzip, br"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"],"Cf-Connecting-Ip":["34.146.62.167"],"Cf-Ipcountry":["JP"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Nextjs-Data":["1"],"Accept":["*/*"],"Cf-Ray":["a4887f8d3c36b9cc-NRT"],"X-Forward
...
show less
Bad Web Bot
๐ซ๐ท
arsonist
2026-10-10 18:23:24
(3 days ago)
[fail2ban]
2026-10-10T18:23:23.481284+00:00 arson caddy[1712]: {"level":"info","ts":1791656603.48124 ...
show more
[fail2ban]
2026-10-10T18:23:23.481284+00:00 arson caddy[1712]: {"level":"info","ts":1791656603.4812438,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.24.32","remote_port":"11624","client_ip":"172.71.24.32","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.env?.svg?.wasm?init","headers":{"Cdn-Loop":["cloudflare; loops=1"],"Cf-Connecting-Ip":["34.146.62.167"],"Cf-Ipcountry":["JP"],"Cf-Ray":["a487a7e69ffee07e-NRT"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Forwarded-Proto":["https"],"X-Forwarded-For":["34.146.62.167"],"Accept-Encoding":["gzip, br"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"],"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:mid
...
show less
Bad Web Bot
๐ซ๐ท
arsonist
2026-10-09 18:45:13
(4 days ago)
[fail2ban]
2026-10-09T18:45:12.627344+00:00 arson caddy[1712]: {"level":"info","ts":1791571512.62730 ...
show more
[fail2ban]
2026-10-09T18:45:12.627344+00:00 arson caddy[1712]: {"level":"info","ts":1791571512.6273098,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.24.32","remote_port":"9926","client_ip":"172.71.24.32","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.env?.svg?.wasm?init","headers":{"Cdn-Loop":["cloudflare; loops=1"],"Cf-Connecting-Ip":["34.87.110.86"],"Cf-Ipcountry":["SG"],"X-Forwarded-For":["34.87.110.86"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Accept":["*/*"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"],"X-Nextjs-Data":["1"],"X-Forwarded-Proto":["https"],"Accept-Enc
...
show less
Bad Web Bot
๐ฉ๐ช
reznekcs
2026-10-01 05:02:37
(1 week ago)
Blocked by UFW firewall
Brute-Force
๐ง๐ช
madeit
2026-09-30 16:55:09
(1 week ago)
Web App Attack
๐ง๐ช
madeit
2026-09-23 14:26:28
(2 weeks ago)
Web App Attack
๐บ๐ธ
MPL
2026-09-23 01:17:41
(2 weeks ago)
tcp/443 (5 or more attempts)
Port Scan
๐บ๐ธ
JCB
2026-09-11 19:46:00
(1 month ago)
172.71.24.32 - - [11/Sep/2026:18:38:53 +0300] "GET /@fs/home/ubuntu/.azure/accessTokens.json?raw?? H ...
show more
172.71.24.32 - - [11/Sep/2026:18:38:53 +0300] "GET /@fs/home/ubuntu/.azure/accessTokens.json?raw?? HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/120.0.7768.131 Safari/537.36"
....
show less
Web App Attack
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-09-10 22:00:53
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-09.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-09-09 22:01:37
(1 month ago)
Auto-ban: >3000 req/min op 2026-09-09
Web App Attack
SSH
Hacking