๐ซ๐ฎ
botwork.se
2026-09-20 14:19:59
(1 hour ago)
{"level":"info","ts":"2026-09-20T14:19:50Z","logger":"http.log.access.log0","msg":"handled request", ...
show more
{"level":"info","ts":"2026-09-20T14:19:50Z","logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.84.173.26","remote_port":"57288","client_ip":"34.84.173.26","proto":"HTTP/1.1","method":"GET","host":"tesla.mknutas.se","uri":"/.git/config","headers":{"Accept":["*/*"],"Connection":["keep-alive"],"Next-Action":["x"],"X-Nextjs-Request-Id":["3c1b6a44"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"tesla.mknutas.se","ech":false}},"bytes_read":0,"user_id":"","duration":0.000155735,"size":0,"status":404,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":"2026-09-20T14:19:50Z","logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.84.173.26","remote_port":"57288","client_ip":"34.84.173.2
...
show less
Web App Attack
๐บ๐ธ
Rayulcifer
2026-09-20 13:47:39
(2 hours ago)
34.84.173.26 - - [20/Sep/2026:08:47:38 -0500] "GET /.env HTTP/1.1" 403 720 "-" "Mozilla/5.0 (Macinto ...
show more
34.84.173.26 - - [20/Sep/2026:08:47:38 -0500] "GET /.env HTTP/1.1" 403 720 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Open Proxy
Port Scan
Hacking
Web App Attack
SSH
๐ณ๐ฑ
debestelapp
2026-09-20 07:55:11
(8 hours ago)
Web App Attack
๐ฌ๐ง
consul.to
2026-09-20 07:52:45
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฒ๐พ
Rizzy
2026-09-20 07:44:41
(8 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฒ๐พ
Rizzy
2026-09-19 01:47:06
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-18 22:42:18
(1 day ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.84.173.26 - - [19/Sep/2026:00:42:09 +0200] "GET /.git/config HTTP/1.1" 403 245 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
cybertailor
2026-09-18 22:35:42
(1 day ago)
34.84.173.26 - - [19/Sep/2026:02:24:56 +0500] "GET /wp-admin/phpinfo.php HTTP/1.1" 404 178 "-" "Mozi ...
show more
34.84.173.26 - - [19/Sep/2026:02:24:56 +0500] "GET /wp-admin/phpinfo.php HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [19/Sep/2026:03:35:38 +0500] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [19/Sep/2026:03:35:38 +0500] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [19/Sep/2026:03:35:39 +0500] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฆ๐น
cybertailor
2026-09-18 21:23:30
(1 day ago)
34.84.173.26 - - [19/Sep/2026:02:23:25 +0500] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 ( ...
show more
34.84.173.26 - - [19/Sep/2026:02:23:25 +0500] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [19/Sep/2026:02:23:26 +0500] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [19/Sep/2026:02:23:26 +0500] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [19/Sep/2026:02:23:26 +0500] "GET /.env.production HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [19/Sep/2026:02:23:27 +0500] "GET /.env.staging HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฆ๐บ
Bay13
2026-09-18 19:51:04
(1 day ago)
CrowdSec:custom/modsecurity
Web App Attack
๐ซ๐ท
masterguru
2026-09-18 19:34:43
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ฌ๐ง
consul.to
2026-09-18 17:11:19
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
snhosting
2026-09-18 16:38:31
(1 day ago)
34.84.173.26 - - [18/Sep/2026:18:38:19 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 ...
show more
34.84.173.26 - - [18/Sep/2026:18:38:19 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [18/Sep/2026:18:38:20 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [18/Sep/2026:18:38:21 +0200] "GET /.env.local HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [18/Sep/2026:18:38:21 +0200] "GET /.env.production HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.173.26 - - [18/Sep/2026:18:38:22 +0200] "GET /.env.staging HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
marten_o
2026-09-18 14:10:22
(2 days ago)
34.84.173.26 - - [18/Sep/2026:16:10:22 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 573 "-" "Mozilla/5 ...
show more
34.84.173.26 - - [18/Sep/2026:16:10:22 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 573 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 413 771
...
show less
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-18 08:25:02
(2 days ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack