🇺🇦
URAN Publishing Service
2026-10-21 09:42:31
(2 days ago)
[21/Oct/2026:12:42:30 +0300] -- 207.175.82.167 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[21/Oct/2026:12:42:30 +0300] -- 207.175.82.167 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /dist/manifest.json HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇧🇷
Sysadmin-CLC
2026-10-21 08:55:13
(3 days ago)
2026/10/21 08:55:12 [error] 478#478: *15473 limiting requests, excess: 40.280 by zone "general", cli ...
show more
2026/10/21 08:55:12 [error] 478#478: *15473 limiting requests, excess: 40.280 by zone "general", client: 207.175.82.167, server: git.literaturaclassica.com.br, request: "GET /model/.env HTTP/1.1", host: "git.literaturaclassica.com.br"
...
show less
Web App Attack
DDoS Attack
🇧🇷
Sysadmin-CLC
2026-10-21 08:10:55
(3 days ago)
Probing and trying to access sensitive files caught in f2b nginx-forbidden filter
Web App Attack
Port Scan
🇫🇷
mail.avx.gr
2026-10-21 08:07:15
(3 days ago)
(nginxENVSCAN) nginx environment-file scanner detected from 207.175.82.167 (BE/Belgium/Brussels Capi ...
show more
(nginxENVSCAN) nginx environment-file scanner detected from 207.175.82.167 (BE/Belgium/Brussels Capital/Brussels/167.82.175.207.bc.googleusercontent.com)
show less
Hacking
🇧🇷
Sysadmin-CLC
2026-10-21 06:53:35
(3 days ago)
Caught by f2b nginx-limit-req.
Web App Attack
DDoS Attack
2026-10-21 05:05:36
(3 days ago)
[Wed Oct 21 05:05:33.455492 2026] [authz_core:error] [pid 3963724:tid 3963724] [client 207.175.82.16 ...
show more
[Wed Oct 21 05:05:33.455492 2026] [authz_core:error] [pid 3963724:tid 3963724] [client 207.175.82.167:45422] AH01630: client denied by server configuration: /var/www/html/z9x8c7v6b5-debug-trigger-lithomessiniaki.gr
[Wed Oct 21 05:05:33.993209 2026] [authz_core:error] [pid 3963723:tid 3963723] [client 207.175.82.167:45484] AH01630: client denied by server configuration: /var/www/html/h4lp0g09xafy74s3hz81
[Wed Oct 21 05:05:35.277254 2026] [authz_core:error] [pid 3961351:tid 3961351] [client 207.175.82.167:53676] AH01630: client denied by server configuration: /var/www/html/.bashrc
[Wed Oct 21 05:05:35.408606 2026] [authz_core:error] [pid 3958809:tid 3958809] [client 207.175.82.167:53688] AH01630: client denied by server configuration: /var/www/html/.zshrc
[Wed Oct 21 05:05:36.439166 2026] [authz_core:error] [pid 3962498:tid 3962498] [client 207.175.82.167:53710] AH01630: client denied by server configuration: /var/www/html/key.pem
...
show less
Brute-Force
🇳🇱
ConsulHosting
2026-10-21 05:05:10
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇪🇸
barbarella
2026-10-21 01:29:41
(3 days ago)
Multiple (36) times attack on https port 443: illegal attempt to access nonexisting folder (GET /api ...
show more
Multiple (36) times attack on https port 443: illegal attempt to access nonexisting folder (GET /api/orders/..%2fadmin/config.json)
03:29:41 Apache HTTP Server Path Traversal & Remote Code Execution CVE-2021-41773 & CVE-2021-42013 (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2f.env)
03:29:41 Configuration snooping with .env file (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2fproc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/data/..%2f..%2f.env)
03:29:41 Configuration snooping (GET /%2Fapi/config)
03:29:41 unsolicited access to nonexisting pages (GET /%2Fadmin)
03:29:41 illegal attempt to access nonexisting folder (GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ)
show less
Hacking
Web App Attack
🇪🇸
barbarella
2026-10-21 01:29:41
(3 days ago)
Multiple (36) times attack on https port 443: Configuration snooping (GET /api/orders/..%2fadmin/co ...
show more
Multiple (36) times attack on https port 443: Configuration snooping (GET /api/orders/..%2fadmin/config.json)
03:29:41 Apache HTTP Server Path Traversal & Remote Code Execution CVE-2021-41773 & CVE-2021-42013 (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2f.env)
03:29:41 Apache HTTP Server Path Traversal & Remote Code Execution CVE-2021-41773 & CVE-2021-42013 (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2fproc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/data/..%2f..%2f.env)
03:29:41 Configuration snooping (GET /%2Fapi/config)
03:29:41 unsolicited access to nonexisting pages (GET /%2Fadmin)
03:29:41 illegal attempt to access nonexisting folder (GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ)
show less
Hacking
Web App Attack
🇪🇸
barbarella
2026-10-21 01:29:41
(3 days ago)
Multiple (36) times attack on https port 443: configuration snooping of .json files (GET /api/orders ...
show more
Multiple (36) times attack on https port 443: configuration snooping of .json files (GET /api/orders/..%2fadmin/config.json)
03:29:41 Apache HTTP Server Path Traversal & Remote Code Execution CVE-2021-41773 & CVE-2021-42013 (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2f.env)
03:29:41 Configuration snooping with .env file (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2fproc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/data/..%2f..%2f.env)
03:29:41 Configuration snooping (GET /%2Fapi/config)
03:29:41 unsolicited access to nonexisting pages (GET /%2Fadmin)
03:29:41 illegal attempt to access nonexisting folder (GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ)
show less
Hacking
Web App Attack
🇪🇸
barbarella
2026-10-21 01:29:41
(3 days ago)
Multiple (36) times attack on https port 443: illegal attempt to access nonexisting folder (GET /api ...
show more
Multiple (36) times attack on https port 443: illegal attempt to access nonexisting folder (GET /api/orders/..%2fadmin/config.json)
03:29:41 Configuration snooping in .env file (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2f.env)
03:29:41 Configuration snooping with .env file (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2fproc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/data/..%2f..%2f.env)
03:29:41 Configuration snooping (GET /%2Fapi/config)
03:29:41 unsolicited access to nonexisting pages (GET /%2Fadmin)
03:29:41 illegal attempt to access nonexisting folder (GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ)
show less
Hacking
Web App Attack
🇪🇸
barbarella
2026-10-21 01:29:41
(3 days ago)
Multiple (36) times attack on https port 443: illegal attempt to access nonexisting folder (GET /api ...
show more
Multiple (36) times attack on https port 443: illegal attempt to access nonexisting folder (GET /api/orders/..%2fadmin/config.json)
03:29:41 Apache HTTP Server Path Traversal & Remote Code Execution CVE-2021-41773 & CVE-2021-42013 (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2f.env)
03:29:41 Apache HTTP Server Path Traversal & Remote Code Execution CVE-2021-41773 & CVE-2021-42013 (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2fproc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/data/..%2f..%2f.env)
03:29:41 Configuration snooping (GET /%2Fapi/config)
03:29:41 unsolicited access to nonexisting pages (GET /%2Fadmin)
03:29:41 illegal attempt to access nonexisting folder (GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ)
show less
Hacking
Web App Attack
🇪🇸
barbarella
2026-10-21 01:29:41
(3 days ago)
Multiple (36) times attack on https port 443: Configuration snooping (GET /api/orders/..%2fadmin/co ...
show more
Multiple (36) times attack on https port 443: Configuration snooping (GET /api/orders/..%2fadmin/config.json)
03:29:41 Apache HTTP Server Path Traversal & Remote Code Execution CVE-2021-41773 & CVE-2021-42013 (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/orders/..%2f..%2f.env)
03:29:41 Apache HTTP Server Path Traversal & Remote Code Execution CVE-2021-41773 & CVE-2021-42013 (GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env)
03:29:41 Configuration snooping in .env file (GET /api/orders/..%2f..%2fproc/self/environ)
03:29:41 illegal attempt to access nonexisting folder (GET /api/data/..%2f..%2f.env)
03:29:41 Configuration snooping (GET /%2Fapi/config)
03:29:41 unsolicited access to nonexisting pages (GET /%2Fadmin)
03:29:41 Configuration snooping in .env file (GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ)
show less
Hacking
Web App Attack
🇩🇪
updown.io
2026-10-21 00:51:16
(3 days ago)
{"level":"info","ts":1792543873.3770573,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1792543873.3770573,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"207.175.82.167","remote_port":"47900","client_ip":"207.175.82.167","proto":"HTTP/2.0","method":"GET","host":"status.flave.world","uri":"/ffbftxvspd1i8i0de2uc","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["CCBot/2.0 (https://commoncrawl.org/faq/)"],"Accept-Encoding":["gzip"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.flave.world","ech":false}},"bytes_read":0,"user_id":"","duration":0.000180754,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1792543873.5554864,"logger":"http.log.access.log1","msg":"handled request","request":{"
...
show less
DDoS Attack
Web App Attack
🇺🇸
jormaster3k
2026-10-20 21:09:51
(3 days ago)
Attack against Apache (too many 404s)
Web App Attack
