2026-09-26 21:18:57
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
arsonist
2026-09-23 08:37:37
(1 week ago)
[fail2ban]
2026-09-23T08:37:36.236828+00:00 arson caddy[1890453]: {"level":"info","ts":1790152656.23 ...
show more
[fail2ban]
2026-09-23T08:37:36.236828+00:00 arson caddy[1890453]: {"level":"info","ts":1790152656.2367985,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.31.57","remote_port":"10687","client_ip":"172.71.31.57","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/var/www/.git/config","headers":{"User-Agent":["crusader-worker/1.0"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Connecting-Ip":["34.74.140.48"],"X-Forwarded-Proto":["https"],"Accept-Encoding":["gzip, br"],"X-Forwarded-For":["34.74.140.48"],"Cf-Ray":["a3f83a735f30c36e-ATL"],"Cf-Ipcountry":["US"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"ayuworks.xyz","ech":false}},"bytes_read":0,"user_id":"","duration":0.000119725,"size":7,"status":418,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\";
...
show less
Bad Web Bot
2026-09-19 09:10:04
(1 week ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇫🇷
arsonist
2026-09-13 09:48:40
(2 weeks ago)
[fail2ban]
2026-09-13T09:48:40.295277+00:00 arson caddy[1890453]: {"level":"info","ts":1789292920.29 ...
show more
[fail2ban]
2026-09-13T09:48:40.295277+00:00 arson caddy[1890453]: {"level":"info","ts":1789292920.2952461,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.31.57","remote_port":"9486","client_ip":"172.71.31.57","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.git/config","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept":["*/*"],"X-Nextjs-Data":["1"],"Cf-Ipcountry":["US"],"X-Forwarded-For":["34.24.54.157"],"Accept-Encoding":["gzip, br"],"Cf-Connecting-Ip":["34.24.54.157"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Forwarded-Proto":["https"],"Cdn-Loop":["cloudflare; loops=1"],"User-Agent":["Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"],"Cf-Ray":["a3a63ccf8bfc813a-ATL"]},"tls"
...
show less
Bad Web Bot
🇧🇪
madeit
2026-09-12 21:15:42
(2 weeks ago)
Web App Attack
🇫🇷
arsonist
2026-09-07 04:48:44
(3 weeks ago)
[fail2ban]
2026-09-07T04:48:44.126126+00:00 arson caddy[1890453]: {"level":"info","ts":1788756524.12 ...
show more
[fail2ban]
2026-09-07T04:48:44.126126+00:00 arson caddy[1890453]: {"level":"info","ts":1788756524.126102,"logger":"http.log.access.default","msg":"handled request","request":{"remote_ip":"172.71.31.57","remote_port":"14093","client_ip":"172.71.31.57","proto":"HTTP/2.0","method":"GET","host":"ayuworks.xyz","uri":"/.git/config","headers":{"X-Forwarded-Proto":["https"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"],"Cf-Connecting-Ip":["34.73.255.80"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"Cdn-Loop":["cloudflare; loops=1"],"Cf-Ipcountry":["US"],"X-Forwarded-For":["34.73.255.80"],"Accept-Encoding":["gzip, br"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"],"Cf-Ray":["a3731530e8c87b92-ATL"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"ayuworks.xyz","ec
...
show less
Bad Web Bot
🇧🇪
madeit
2026-08-20 21:08:59
(1 month ago)
Web App Attack
🇧🇪
madeit
2026-08-08 08:51:30
(1 month ago)
Web App Attack
2026-07-25 08:49:58
(2 months ago)
172.71.31.57 - - [25/Jul/2026:10:49:57 +0200] "GET /. HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Macintosh; ...
show more
172.71.31.57 - - [25/Jul/2026:10:49:57 +0200] "GET /. HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
show less
Web App Attack
🇩🇪
tikket
2026-07-24 01:48:26
(2 months ago)
Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on ...
show more
Automated honeypot report: fail2ban 'caddy-honeypot' ban. Source probed honeypot/recon endpoints on void.xn--q9jyb4c.
show less
Bad Web Bot
Web App Attack
2026-07-23 07:49:45
(2 months ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-04 21:59:39
(2 months ago)
Auto-ban: >3000 req/min op 2026-07-04
Web App Attack
SSH
Hacking
🇺🇸
mawan
2026-04-25 02:09:46
(5 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
🇺🇸
myagent.site
2026-04-01 04:54:43
(6 months ago)
Blocking for trying to access an exploit file: /.env.docker
Hacking
🇺🇸
myagent.site
2026-03-31 19:02:31
(6 months ago)
Blocking for trying to access an exploit file: /site/.env
Hacking
