Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Honeypot capture. RCE/web-shell attempts: 39 (fake-shell endpoint). Geo/ISP: FI/Google LLC. Last see ...
show moreHoneypot capture. RCE/web-shell attempts: 39 (fake-shell endpoint). Geo/ISP: FI/Google LLC. Last seen: 2026-06-14T13:21:45Z.
show less
http-probing - IP: 34.88.234.208 - time="2026-06-15T05:03:49+02:00" level=info msg="(555f66b4f6a745 ...
show morehttp-probing - IP: 34.88.234.208 - time="2026-06-15T05:03:49+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.88.234.208 (FI/396982) : 4h ban on Ip 34.88.234.208" module=db
show less
{"level":"info","ts":1781486983.8615444,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1781486983.8615444,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.88.234.208","remote_port":"39604","client_ip":"34.88.234.208","proto":"HTTP/1.1","method":"GET","host":"status.gestionale.bussiarredamenti.it","uri":"/api/heapdump","headers":{"User-Agent":["Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 Safari/605.1.15 Version/12.2.1.0.4"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.gestionale.bussiarredamenti.it","ech":false}},"bytes_read":0,"user_id":"","duration":0.000241591,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1781486983.8874815,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.88.234.208","remote_port":"39634",
...
show less
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 34.88.234.208 (FI/Finlan ...
show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 34.88.234.208 (FI/Finland/208.234.88.34.bc.googleusercontent.com)
show less
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 34.88.234.208 (FI/Finlan ...
show more(apache-scanners) Failed apache-scanners trigger with match [redacted] from 34.88.234.208 (FI/Finland/208.234.88.34.bc.googleusercontent.com)
show less
*Port Scan* detected from 34.88.234.208 (FI/Finland/South Karelia Region/Lappeenranta/208.234.88.34. ...
show more*Port Scan* detected from 34.88.234.208 (FI/Finland/South Karelia Region/Lappeenranta/208.234.88.34.bc.googleusercontent.com).
show less