|
πΊπΈ
54.244.150.238
|
|
54.244.150.238 - - [13/Aug/2026:08:30:58 +0000] "GET /administrator/manifests/files/joomla.xml HTTP/ ...
show more
54.244.150.238 - - [13/Aug/2026:08:30:58 +0000] "GET /administrator/manifests/files/joomla.xml HTTP/1.1" 404 179 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)" 789 0.015 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.016 404 b6b55ad05839915a2417c7f0de7dbc11
54.244.150.238 - - [13/Aug/2026:08:30:58 +0000] "GET /config.toml HTTP/1.1" 404 179 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)" 760 0.009 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.009 404 596cafbed7128d63417a8da5708e02ff
54.244.150.238 - - [13/Aug/2026:08:30:58 +0000] "GET /config.yaml HTTP/1.1" 404 179 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)" 760 0.010 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.010 404 d2447c3602715537986349682895c7e9
54.244.150.238 - - [13/Aug/2026:08:30:58 +0000] "GET /config.yml HTTP/1.1" 404 179 "-" "MerchantSecurityScanner/1.0 (+https://stri.
...
show less
|
Web App Attack
|
|
π±πΊ
64.89.161.85
|
|
64.89.161.85 - - [13/Aug/2026:05:57:58 +0000] "GET /config.js HTTP/1.1" 404 12182 "-" "Mozilla/5.0 ( ...
show more
64.89.161.85 - - [13/Aug/2026:05:57:58 +0000] "GET /config.js HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" 657 0.001 [default-cv-service-80] [] 10.244.27.146:3000 12182 0.002 404 0d639cfb4dec81b7506c0bbf9ae767e2
64.89.161.85 - - [13/Aug/2026:05:57:58 +0000] "GET /.env HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" 652 0.001 [default-cv-service-80] [] 10.244.27.146:3000 12182 0.001 404 46dc06f87c6cb480466745950da39ac8
64.89.161.85 - - [13/Aug/2026:05:57:58 +0000] "GET /.env HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" 652 0.001 [default-cv-service-80] [] 10.244.27.146:3000 12182 0.001 404 46dc06f87c6cb480466745950da39ac8
...
show less
|
Web App Attack
|
|
π§πͺ
34.156.13.220
|
|
34.156.13.220 - - [13/Aug/2026:04:32:45 +0000] "GET /.env.development HTTP/1.1" 404 179 "-" "Mozilla ...
show more
34.156.13.220 - - [13/Aug/2026:04:32:45 +0000] "GET /.env.development HTTP/1.1" 404 179 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 563 0.013 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.013 404 8b3e8f4bd6f2693af3c1e93f2812216a
34.156.13.220 - - [13/Aug/2026:04:32:47 +0000] "GET /.git/HEAD HTTP/1.1" 404 179 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 571 0.010 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.009 404 037507ba5a32812918b97a1374938ddc
34.156.13.220 - - [13/Aug/2026:04:32:48 +0000] "GET /config.php.bak HTTP/1.1" 404 179 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 576 0.006 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.006 404 c71bae81363a5919d2b2b7cd55a49ca2
34.156.13.220 - - [13/Aug/2026:04:32:48 +0000] "GET /actuator/configprops HTTP/1.1" 404 179 "-" "Mozilla/5.0 (compatib
...
show less
|
Web App Attack
|
|
π³π±
34.158.108.59
|
|
34.158.108.59 - - [13/Aug/2026:01:10:53 +0000] "GET /.env.local HTTP/1.1" 403 0 "-" "Mozilla/5.0 (co ...
show more
34.158.108.59 - - [13/Aug/2026:01:10:53 +0000] "GET /.env.local HTTP/1.1" 403 0 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 578 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.001 403 5b8b046c388b3bb5524ec32e43012960
34.158.108.59 - - [13/Aug/2026:01:10:53 +0000] "GET /.env.development HTTP/1.1" 403 0 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 579 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.000 403 454b57e3d1dc8c275948544f4cc3c680
34.158.108.59 - - [13/Aug/2026:01:10:53 +0000] "GET /.env.production HTTP/1.1" 403 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 595 0.001 [default-cv-service-80] [] 10.244.27.146:3000 0 0.001 403 43422e3d806f2c80c72909cb50961c3d
34.158.108.59 - - [13/Aug/2026:01:10:53 +0000] "GET /.env HTTP/1.1" 403 0 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.a
...
show less
|
Web App Attack
|
|
π³π±
34.158.108.59
|
|
34.158.108.59 - - [13/Aug/2026:01:10:37 +0000] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env ...
show more
34.158.108.59 - - [13/Aug/2026:01:10:37 +0000] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1" 403 0 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 606 0.008 [default-cv-service-80] [] 10.244.27.146:3000 0 0.008 403 255fbb96ddf5d497638795dbb4970a95
34.158.108.59 - - [13/Aug/2026:01:10:37 +0000] "GET /@fs/root/.env?raw?? HTTP/1.1" 403 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 599 0.000 [default-cv-service-80] [] 10.244.27.161:3000 0 0.001 403 604f7f03d3d9bb91336cdf8a8d825321
34.158.108.59 - - [13/Aug/2026:01:10:37 +0000] "GET /@fs/.env.development?raw?? HTTP/1.1" 403 0 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 594 0.001 [default-cv-service-80] [] 10.244.27.146:3000 0 0.000 403 69e7d019f0e46c6194ac61b273e7c0ed
34.158.108.59 - - [13/Aug/2026:01:10:37 +0000] "GET /@fs/var/www/.aws/credentials?raw?? HTTP
...
show less
|
Web App Attack
|
|
πΊπΈ
35.185.12.84
|
|
2026-08-12 14:11:11,984 fail2ban.actions [964]: NOTICE [k8s-nginx-403] Ban 35.185.12.84
2026 ...
show more
2026-08-12 14:11:11,984 fail2ban.actions [964]: NOTICE [k8s-nginx-403] Ban 35.185.12.84
2026-08-12 14:11:12,087 fail2ban.actions [964]: NOTICE [k8s-nginx-404] Ban 35.185.12.84
2026-08-12 14:11:15,199 fail2ban.actions [964]: NOTICE [k8s-nginx-bruteforce] Ban 35.185.12.84
...
show less
|
Exploited Host
|
|
πΊπΈ
143.244.168.161
|
|
143.244.168.161 - - [13/Aug/2026:00:46:29 +0000] "GET /console/ HTTP/1.1" 404 12182 "-" "Mozilla/5.0 ...
show more
143.244.168.161 - - [13/Aug/2026:00:46:29 +0000] "GET /console/ HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 452 0.002 [default-cv-service-80] [] 10.244.27.161:3000 12182 0.002 404 9a5c050b4eec41b2e37119e0020e56b9
143.244.168.161 - - [13/Aug/2026:00:46:32 +0000] "GET /server-status HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 457 0.001 [default-cv-service-80] [] 10.244.27.161:3000 12182 0.001 404 ecc21585d3bf97c9d8249b97de8f7573
143.244.168.161 - - [13/Aug/2026:00:46:39 +0000] "GET /.env HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 448 0.001 [default-cv-service-80] [] 10.244.27.161:3000 12182 0.001 404 10e271b0f98d53c7fabcb58cb6a058f2
143.244.168.161 - - [13/Aug/2026:00:46:43 +0000] "GET /.git/config HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 455 0.001 [default-cv-service-80] []
...
show less
|
Web App Attack
|
|
π¨π¦
165.22.235.3
|
|
165.22.235.3 - - [13/Aug/2026:00:46:29 +0000] "GET /console/ HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (l ...
show more
165.22.235.3 - - [13/Aug/2026:00:46:29 +0000] "GET /console/ HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 441 0.001 [default-cv-service-80] [] 10.244.27.146:3000 12182 0.001 404 d6c4067cacb4fb77a4f4338b577ea419
165.22.235.3 - - [13/Aug/2026:00:46:31 +0000] "GET /server-status HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 446 0.001 [default-cv-service-80] [] 10.244.27.146:3000 12182 0.001 404 08501d379d14a7fd8280d010307225ab
165.22.235.3 - - [13/Aug/2026:00:46:37 +0000] "GET /.env HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 437 0.001 [default-cv-service-80] [] 10.244.27.161:3000 12182 0.001 404 0e2b5efabd587d3ca2aa18da2c7764f6
165.22.235.3 - - [13/Aug/2026:00:46:41 +0000] "GET /.git/config HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 444 0.001 [default-cv-service-80] [] 10.244.27.16
...
show less
|
Web App Attack
|
|
πΊπΈ
35.185.12.84
|
|
35.185.12.84 - - [13/Aug/2026:00:11:13 +0000] "GET /.bash_profile HTTP/1.1" 403 0 "-" "anthropic-ai" ...
show more
35.185.12.84 - - [13/Aug/2026:00:11:13 +0000] "GET /.bash_profile HTTP/1.1" 403 0 "-" "anthropic-ai" 401 0.000 [default-cv-service-80] [] 10.244.27.161:3000 0 0.001 403 d6d9281ef10499a636f55f7989cd12ff
35.185.12.84 - - [13/Aug/2026:00:11:14 +0000] "GET /.ssh/id_ecdsa HTTP/1.1" 403 0 "-" "anthropic-ai" 401 0.000 [default-cv-service-80] [] 10.244.27.161:3000 0 0.001 403 c55ae9f8a794070b40335e0de75efbbb
35.185.12.84 - - [13/Aug/2026:00:11:14 +0000] "GET /frontend/.env HTTP/1.1" 403 0 "-" "anthropic-ai" 401 0.000 [default-cv-service-80] [] 10.244.27.146:3000 0 0.001 403 07155a8222369115bf7e1d4995a20124
...
show less
|
Brute-Force
|
|
πΊπΈ
35.185.12.84
|
|
35.185.12.84 - - [13/Aug/2026:00:11:11 +0000] "GET /.git/config HTTP/1.1" 403 0 "-" "anthropic-ai" 3 ...
show more
35.185.12.84 - - [13/Aug/2026:00:11:11 +0000] "GET /.git/config HTTP/1.1" 403 0 "-" "anthropic-ai" 399 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.001 403 87316c2bd22d9183df7bfe909946e6c0
35.185.12.84 - - [13/Aug/2026:00:11:11 +0000] "GET /.git/HEAD HTTP/1.1" 403 0 "-" "anthropic-ai" 397 0.001 [default-cv-service-80] [] 10.244.27.146:3000 0 0.001 403 70af493d29fc5b8eac8ce5c63315dfc5
35.185.12.84 - - [13/Aug/2026:00:11:11 +0000] "GET /.aws/credentials HTTP/1.1" 403 0 "-" "anthropic-ai" 404 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.000 403 c4bb045fc75c9ad18ca30f153df3d33f
35.185.12.84 - - [13/Aug/2026:00:11:11 +0000] "GET /.aws/config HTTP/1.1" 403 0 "-" "anthropic-ai" 399 0.001 [default-cv-service-80] [] 10.244.27.146:3000 0 0.001 403 5e224f04c815d415ca035a46442a194b
35.185.12.84 - - [13/Aug/2026:00:11:11 +0000] "GET /z9x8c7v6b5-debug-trigger-gregorymariani.com HTTP/1.1" 403 0 "-" "anthropic-ai" 431 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.000 40
...
show less
|
Web App Attack
|
|
π―π΅
20.78.146.33
|
|
20.78.146.33 - - [12/Aug/2026:21:58:52 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
20.78.146.33 - - [12/Aug/2026:21:58:52 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4036 "-" "-" 397 0.003 [default-techdata-service-80] [] 10.244.27.142:3000 4036 0.003 404 d69804b0ad78c554cb0b73f4392107e5
20.78.146.33 - - [12/Aug/2026:21:58:54 +0000] "GET /wp-admin/css HTTP/1.1" 404 4036 "-" "-" 361 0.003 [default-techdata-service-80] [] 10.244.27.142:3000 4036 0.003 404 1820cdcae9cc0061c8b627735bc9812e
20.78.146.33 - - [12/Aug/2026:21:59:08 +0000] "GET /alfa123.php HTTP/1.1" 404 4038 "-" "-" 360 0.002 [default-techdata-service-80] [] 10.244.27.142:3000 4036 0.003 404 5e9a9dce99dac6a2ee8b5200884c3d94
20.78.146.33 - - [12/Aug/2026:21:59:29 +0000] "GET /wp-content/xyn.php HTTP/1.1" 404 4036 "-" "-" 367 0.003 [default-techdata-service-80] [] 10.244.27.142:3000 4036 0.003 404 a0ba684aead61106d8120c0420edf6d4
20.78.146.33 - - [12/Aug/2026:21:59:30 +0000] "GET /wp-content/min.php HTTP/1.1" 404 4036 "-" "-" 367 0.002 [default-techdata-service-80] [] 10.244.27.
...
show less
|
Web App Attack
|
|
π¬π§
64.227.32.66
|
|
64.227.32.66 - - [12/Aug/2026:18:35:35 +0000] "GET /console/ HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9s ...
show more
64.227.32.66 - - [12/Aug/2026:18:35:35 +0000] "GET /console/ HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 435 0.006 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.005 404 f0a55e3ba445d31003bfb34880f89a92
64.227.32.66 - - [12/Aug/2026:18:35:37 +0000] "GET /server-status HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 440 0.018 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.018 404 bedfec67d1ff307588d6b90176422acd
64.227.32.66 - - [12/Aug/2026:18:35:44 +0000] "GET /.env HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 431 0.009 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.009 404 efefd37a5800b47652f78b77f37a6c65
64.227.32.66 - - [12/Aug/2026:18:35:48 +0000] "GET /.git/config HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 438 0.007 [default-shop-oscar-
...
show less
|
Web App Attack
|
|
πΊπΈ
165.22.34.189
|
|
165.22.34.189 - - [12/Aug/2026:18:35:35 +0000] "GET /console/ HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9 ...
show more
165.22.34.189 - - [12/Aug/2026:18:35:35 +0000] "GET /console/ HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 442 0.006 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.005 404 30f9c639f3ca72966f7d147893084e11
165.22.34.189 - - [12/Aug/2026:18:35:37 +0000] "GET /server-status HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 447 0.009 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.009 404 96a61597fa32c1fcad87d06630002db8
165.22.34.189 - - [12/Aug/2026:18:35:44 +0000] "GET /.env HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 438 0.012 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.011 404 4b5b2f21693acd423352fd515e0360ed
165.22.34.189 - - [12/Aug/2026:18:35:48 +0000] "GET /.git/config HTTP/1.1" 404 179 "-" "Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net)" 445 0.006 [default-shop-os
...
show less
|
Web App Attack
|
|
π³π±
109.205.214.114
|
|
109.205.214.114 - - [12/Aug/2026:17:55:06 +0000] "GET /.git/HEAD HTTP/1.1" 404 22 "-" "Mozilla/5.0 ( ...
show more
109.205.214.114 - - [12/Aug/2026:17:55:06 +0000] "GET /.git/HEAD HTTP/1.1" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 476 0.001 [messenger-bridge-service-80] [] 10.244.27.141:8000 22 0.001 404 aa8b1dc4d21033fb032f387c528ffa6f
109.205.214.114 - - [12/Aug/2026:17:55:07 +0000] "GET /.env HTTP/1.1" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" 471 0.001 [messenger-bridge-service-80] [] 10.244.27.141:8000 22 0.000 404 759e1b12c0d5862dfce205fa2ad6a5ba
109.205.214.114 - - [12/Aug/2026:17:55:08 +0000] "GET /.env.production HTTP/1.1" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109" 532 0.001 [messenger-bridge-service-80] [] 10.244.27.141:8000 22 0.001 404 002d66f14c4cf17c1d539c95de8c18b7
109.205.214.114 - - [12/Aug/2026:17:55:08 +0000] "GET /.env.local HTTP/1.1" 404 22 "-" "Mozilla/5.0 (Macintosh; Intel
...
show less
|
Web App Attack
|
|
π¨π
51.103.131.31
|
|
51.103.131.31 - - [12/Aug/2026:16:22:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
51.103.131.31 - - [12/Aug/2026:16:22:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 179 "-" "-" 397 0.007 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.007 404 8280833de97ffaae5889419101de30a2
51.103.131.31 - - [12/Aug/2026:16:22:22 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 404 179 "-" "-" 375 0.007 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.007 404 b307e22f31f6b4267006005c6723f8f5
51.103.131.31 - - [12/Aug/2026:16:22:23 +0000] "GET /wp-includes/Text/ HTTP/1.1" 404 179 "-" "-" 366 0.005 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.005 404 557989729469118ca6a929b96ac4fede
51.103.131.31 - - [12/Aug/2026:16:22:23 +0000] "GET /wp-content/uploads/ HTTP/1.1" 404 179 "-" "-" 368 0.005 [default-shop-oscar-amartyne-8080] [] 10.244.27.151:8080 179 0.005 404 07b42b8975e8400a237736195393a67e
51.103.131.31 - - [12/Aug/2026:16:22:23 +0000] "GET /wp-content/index.php HTTP/1.1" 404 179 "-" "-" 369 0.006 [def
...
show less
|
Web App Attack
|
|
πΊπΈ
34.73.129.180
|
|
2026-08-12 03:17:46,769 fail2ban.actions [964]: NOTICE [k8s-nginx-404] Ban 34.73.129.180
202 ...
show more
2026-08-12 03:17:46,769 fail2ban.actions [964]: NOTICE [k8s-nginx-404] Ban 34.73.129.180
2026-08-12 03:17:46,797 fail2ban.actions [964]: NOTICE [k8s-nginx-bruteforce] Ban 34.73.129.180
2026-08-12 03:17:47,089 fail2ban.actions [964]: NOTICE [k8s-nginx-403] Ban 34.73.129.180
...
show less
|
Exploited Host
|
|
πΊπΈ
34.73.129.180
|
|
34.73.129.180 - - [12/Aug/2026:13:17:46 +0000] "GET /.aws/credentials HTTP/1.1" 403 0 "-" "anthropic ...
show more
34.73.129.180 - - [12/Aug/2026:13:17:46 +0000] "GET /.aws/credentials HTTP/1.1" 403 0 "-" "anthropic-ai" 406 0.002 [default-cv-service-80] [] 10.244.27.146:3000 0 0.002 403 bbd3e371d07ddf54b8ea6399aa51a74d
34.73.129.180 - - [12/Aug/2026:13:17:46 +0000] "GET /.git/HEAD HTTP/1.1" 403 0 "-" "anthropic-ai" 399 0.016 [default-cv-service-80] [] 10.244.27.161:3000 0 0.017 403 ac04c3f27960f330ad3fa6a06bdf7e54
34.73.129.180 - - [12/Aug/2026:13:17:46 +0000] "GET /.aws/config HTTP/1.1" 403 0 "-" "anthropic-ai" 401 0.030 [default-cv-service-80] [] 10.244.27.146:3000 0 0.029 403 8dacb4ac26e1efa6f553cdee785f9bd5
34.73.129.180 - - [12/Aug/2026:13:17:46 +0000] "GET /.git/config HTTP/1.1" 403 0 "-" "anthropic-ai" 401 0.002 [default-cv-service-80] [] 10.244.27.161:3000 0 0.003 403 1f2a4880d3a65bc569f2263480b34e4c
34.73.129.180 - - [12/Aug/2026:13:17:46 +0000] "GET /.git-credentials HTTP/1.1" 403 0 "-" "anthropic-ai" 406 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.000 403 9621ec7afece2ec8724d
...
show less
|
Web App Attack
|
|
πΊπΈ
34.26.196.83
|
|
2026-08-12 00:04:31,322 fail2ban.actions [964]: NOTICE [k8s-nginx-403] Ban 34.26.196.83
2026 ...
show more
2026-08-12 00:04:31,322 fail2ban.actions [964]: NOTICE [k8s-nginx-403] Ban 34.26.196.83
2026-08-12 00:04:31,651 fail2ban.actions [964]: NOTICE [k8s-nginx-404] Ban 34.26.196.83
2026-08-12 00:04:34,632 fail2ban.actions [964]: NOTICE [k8s-nginx-bruteforce] Ban 34.26.196.83
...
show less
|
Exploited Host
|
|
πΊπΈ
34.26.196.83
|
|
34.26.196.83 - - [12/Aug/2026:10:04:32 +0000] "GET /.ssh/id_ecdsa HTTP/1.1" 403 0 "-" "anthropic-ai" ...
show more
34.26.196.83 - - [12/Aug/2026:10:04:32 +0000] "GET /.ssh/id_ecdsa HTTP/1.1" 403 0 "-" "anthropic-ai" 401 0.000 [default-cv-service-80] [] 10.244.27.146:3000 0 0.000 403 dd9d92aa09b8ec3e8df23f9a26b1a553
34.26.196.83 - - [12/Aug/2026:10:04:33 +0000] "GET /localhost.key HTTP/1.1" 403 0 "-" "anthropic-ai" 401 0.003 [default-cv-service-80] [] 10.244.27.161:3000 0 0.002 403 93a3ce1c4f8b066fed091be7d7313fa3
...
show less
|
Brute-Force
|
|
πΊπΈ
34.26.196.83
|
|
34.26.196.83 - - [12/Aug/2026:10:04:30 +0000] "GET /.aws/credentials HTTP/1.1" 403 0 "-" "anthropic- ...
show more
34.26.196.83 - - [12/Aug/2026:10:04:30 +0000] "GET /.aws/credentials HTTP/1.1" 403 0 "-" "anthropic-ai" 404 0.000 [default-cv-service-80] [] 10.244.27.146:3000 0 0.001 403 68234b14edfa5d1611c3da5f1b8c796f
34.26.196.83 - - [12/Aug/2026:10:04:31 +0000] "GET /wp-json HTTP/1.1" 403 0 "-" "anthropic-ai" 395 0.001 [default-cv-service-80] [] 10.244.27.146:3000 0 0.000 403 6dc99fe47c2fabda6b19f0a9ef065021
34.26.196.83 - - [12/Aug/2026:10:04:31 +0000] "GET /.git/config HTTP/1.1" 403 0 "-" "anthropic-ai" 399 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.000 403 cadaeeecb901814e3076124f049b4a96
34.26.196.83 - - [12/Aug/2026:10:04:31 +0000] "GET /.git-credentials HTTP/1.1" 403 0 "-" "anthropic-ai" 404 0.001 [default-cv-service-80] [] 10.244.27.146:3000 0 0.000 403 8b61d1cf5a10b354c3f0b138ae8ce771
34.26.196.83 - - [12/Aug/2026:10:04:31 +0000] "GET /.aws/config HTTP/1.1" 403 0 "-" "anthropic-ai" 399 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.001 403 dd16e3f8424cfb56ecc53edffca
...
show less
|
Web App Attack
|
|
π³π±
195.178.110.31
|
|
195.178.110.31 - - [12/Aug/2026:10:17:12 +0000] "GET /.env HTTP/1.1" 404 22 "-" "Mozilla/5.0 (Macint ...
show more
195.178.110.31 - - [12/Aug/2026:10:17:12 +0000] "GET /.env HTTP/1.1" 404 22 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 493 0.000 [messenger-bridge-service-80] [] 10.244.27.141:8000 22 0.001 404 0f4f0ee8e2e021e3ed7922410269f768
...
show less
|
Web App Attack
|
|
πΊπΈ
34.26.196.83
|
|
34.26.196.83 - - [12/Aug/2026:10:04:30 +0000] "GET /.aws/credentials HTTP/1.1" 403 0 "-" "anthropic- ...
show more
34.26.196.83 - - [12/Aug/2026:10:04:30 +0000] "GET /.aws/credentials HTTP/1.1" 403 0 "-" "anthropic-ai" 404 0.000 [default-cv-service-80] [] 10.244.27.146:3000 0 0.001 403 68234b14edfa5d1611c3da5f1b8c796f
34.26.196.83 - - [12/Aug/2026:10:04:30 +0000] "GET /rclone.conf HTTP/1.1" 403 0 "-" "anthropic-ai" 399 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.000 403 668c28f5ced3eba230d287c0f44e6714
34.26.196.83 - - [12/Aug/2026:10:04:30 +0000] "GET /rclone.conf HTTP/1.1" 403 0 "-" "anthropic-ai" 399 0.001 [default-cv-service-80] [] 10.244.27.161:3000 0 0.000 403 668c28f5ced3eba230d287c0f44e6714
...
show less
|
Web App Attack
|
|
π³π±
93.123.109.152
|
|
93.123.109.152 - - [12/Aug/2026:09:49:19 +0000] "GET /wp-content/.git/config HTTP/1.1" 404 22 "-" "M ...
show more
93.123.109.152 - - [12/Aug/2026:09:49:19 +0000] "GET /wp-content/.git/config HTTP/1.1" 404 22 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 505 0.012 [messenger-bridge-service-80] [] 10.244.27.141:8000 22 0.012 404 71f3dc34acdfd5dd65c1dd76feb39000
...
show less
|
Web App Attack
|
|
π³π±
195.178.110.199
|
|
195.178.110.199 - - [12/Aug/2026:09:27:46 +0000] "GET /.boto HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Mac ...
show more
195.178.110.199 - - [12/Aug/2026:09:27:46 +0000] "GET /.boto HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 510 0.000 [default-comfy-mars-service-80] [] - - - - 387340b9ae3af609ef4978f64b9cc6b4
195.178.110.199 - - [12/Aug/2026:09:27:46 +0000] "GET /%2egit/%63onfig HTTP/1.1" 401 172 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 517 0.000 [default-comfy-mars-service-80] [] - - - - c175d52af28419bf89e6f595e061a59f
195.178.110.199 - - [12/Aug/2026:09:27:46 +0000] "GET /*/[slug] HTTP/1.1" 401 574 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 497 0.000 [default-comfy-mars-service-80] [] - - - - a1e2c8e16a246f3e2f77bcb6d254116b
...
show less
|
Brute-Force
|
|
πΊπΈ
2a06:98c0:3600::103
|
|
2a06:98c0:3600::103 - - [12/Aug/2026:08:40:29 +0000] "GET /.git/config HTTP/1.1" 404 12182 "-" "Mozi ...
show more
2a06:98c0:3600::103 - - [12/Aug/2026:08:40:29 +0000] "GET /.git/config HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 850 0.001 [default-cv-service-80] [] 10.244.27.146:3000 12182 0.001 404 7c949510cbba3f42df7d4d5770243fc6
2a06:98c0:3600::103 - - [12/Aug/2026:08:40:29 +0000] "GET /.git/HEAD HTTP/1.1" 404 12182 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 848 0.001 [default-cv-service-80] [] 10.244.27.161:3000 12182 0.001 404 df399ea5cce5b52c13501dc4853958a5
...
show less
|
Web App Attack
|