π¬π§
sc user
2026-10-13 21:37:43
(2 hours ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
π¬π§
openstrike.co.uk
2026-10-13 05:16:37
(18 hours ago)
226 attacks on config grabbing URLs (type 2), env grabbing URLs, directory traversals, password/key ...
show more
226 attacks on config grabbing URLs (type 2), env grabbing URLs, directory traversals, password/key grabbing URLs, shell probes, env grabbing URLs (type 2), PHP URLs, VC URLs:
GET /config/settings.local.yml HTTP/1.1
GET /tmp/.env HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /.ssh/id_dsa HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /.git/config HTTP/1.1
show less
Hacking
Web App Attack
π³π±
homeshowdomain.nl
2026-10-12 21:59:32
(1 day ago)
Auto-ban: >3000 req/min op 2026-10-12
Web App Attack
SSH
Hacking
π©πͺ
Hary74656
2026-10-12 20:45:16
(1 day ago)
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
/%2Fsettings HT ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
/%2Fsettings HTTP/2.0" 404 333 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
[client 35.247.153.115] [realclient 35.247.153.115] - - [12/Oct/2026:22:45:15 +0200] [vhost schani.hostmi.at] "GET /%2Fapi/config HTTP/2.0" 404 333 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
[client 35.247.153.115] [realclient 35.247.153.115] - - [12/Oct/2026:22:45:15 +0200] [vhost schani.hostmi.at] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 333 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
[client 35.247.153.115] [realclient 35.247.153.115] - - [12/Oct/2026:22:45:15 +0200] [vhost schani.hostmi.at] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 333 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
show less
Web App Attack
Anonymous
2026-10-12 20:02:04
(1 day ago)
Web App Attack
Anonymous
2026-10-12 18:48:45
(1 day ago)
35.247.153.115 - - [12/Oct/2026:20:48:44 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 ( ...
show more
35.247.153.115 - - [12/Oct/2026:20:48:44 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.247.153.115 - - [12/Oct/2026:20:48:45 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.247.153.115 - - [12/Oct/2026:20:48:45 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.247.153.115 - - [12/Oct/2026:20:48:45 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.247.153.115 - - [12/Oct/2026:20:48:45 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://w
...
show less
Brute-Force
SSH
π©πͺ
updown.io
2026-10-12 18:38:21
(1 day ago)
{"level":"info","ts":1791830300.1701663,"logger":"http.log.access.log0","msg":"handled request","req ...
show more
{"level":"info","ts":1791830300.1701663,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"35.247.153.115","remote_port":"57054","client_ip":"35.247.153.115","proto":"HTTP/2.0","method":"GET","host":"bqrk.status.updown.io","uri":"/assets../.env","headers":{"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"],"Accept":["*/*"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"bqrk.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000436773,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":
...
show less
DDoS Attack
Web App Attack
πΊπΈ
MakoWish
2026-10-12 18:34:58
(1 day ago)
Fuzzing for misconfigured web servers.
Hacking
Web App Attack
Anonymous
2026-10-12 17:45:24
(1 day ago)
35.247.153.115 - - [12/Oct/2026:19:45:23 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/ ...
show more
35.247.153.115 - - [12/Oct/2026:19:45:23 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.247.153.115 - - [12/Oct/2026:19:45:23 +0200] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.247.153.115 - - [12/Oct/2026:19:45:23 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.247.153.115 - - [12/Oct/2026:19:45:23 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.247.153.115 - - [12/Oct/2026:19:45:23 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-12 16:59:38
(1 day ago)
35.247.153.115 - - [12/Oct/2026:18:59:37 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 ...
show more
35.247.153.115 - - [12/Oct/2026:18:59:37 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.247.153.115 - - [12/Oct/2026:18:59:37 +0200] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.247.153.115 - - [12/Oct/2026:18:59:37 +0200] "GET /settings%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.247.153.115 - - [12/Oct/2026:18:59:37 +0200] "GET /static/../../../a/../../../../proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.247.153.115 - - [12/Oct/2026:18:59:37 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/cr
...
show less
Brute-Force
SSH
πΊπΈ
gamabe
2026-10-12 16:47:17
(1 day ago)
Detected crowdsecurity/http-path-traversal-probing attack pattern. Reported by CrowdSec IDS.
Port Scan
Anonymous
2026-10-12 16:28:34
(1 day ago)
35.247.153.115 - - [12/Oct/2026:18:28:33 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 ( ...
show more
35.247.153.115 - - [12/Oct/2026:18:28:33 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
35.247.153.115 - - [12/Oct/2026:18:28:34 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.247.153.115 - - [12/Oct/2026:18:28:34 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.247.153.115 - - [12/Oct/2026:18:28:34 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
35.247.153.115 - - [12/Oct/2026:18:28:34 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-12 15:31:55
(1 day ago)
35.247.153.115 - - [12/Oct/2026:17:31:54 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 ( ...
show more
35.247.153.115 - - [12/Oct/2026:17:31:54 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.247.153.115 - - [12/Oct/2026:17:31:55 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.247.153.115 - - [12/Oct/2026:17:31:55 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.247.153.115 - - [12/Oct/2026:17:31:55 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.247.153.115 - - [12/Oct/2026:17:31:55 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
...
show less
Brute-Force
SSH
Anonymous
2026-10-12 14:57:12
(1 day ago)
35.247.153.115 - - [12/Oct/2026:16:57:12 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e% ...
show more
35.247.153.115 - - [12/Oct/2026:16:57:12 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.247.153.115 - - [12/Oct/2026:16:57:12 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.247.153.115 - - [12/Oct/2026:16:57:12 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.247.153.115 - - [12/Oct/2026:16:57:12 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.
...
show less
Brute-Force
SSH
π¨π
zynex
2026-10-12 14:32:23
(1 day ago)
URL Probing: /settings/.env
Web App Attack