🇭🇰
103.243.25.44
16 Oct 2026
2026-10-16T06:41:01.755720+02:00 server1 sshd-session[4180873]: User root from 103.243.25.44 not all ...
show more
2026-10-16T06:41:01.755720+02:00 server1 sshd-session[4180873]: User root from 103.243.25.44 not allowed because not listed in AllowUsers
2026-10-16T06:41:02.678584+02:00 server1 sshd-session[4180878]: User root from 103.243.25.44 not allowed because not listed in AllowUsers
2026-10-16T06:41:03.562338+02:00 server1 sshd-session[4180880]: User root from 103.243.25.44 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
🇸🇬
34.143.254.176
16 Oct 2026
34.143.254.176 - - [16/Oct/2026:03:11:32 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ ...
show more
34.143.254.176 - - [16/Oct/2026:03:11:32 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.143.254.176 - - [16/Oct/2026:03:11:32 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇺🇸
136.70.113.92
15 Oct 2026
136.70.113.92 - - [15/Oct/2026:15:57:14 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ H ...
show more
136.70.113.92 - - [15/Oct/2026:15:57:14 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
136.70.113.92 - - [15/Oct/2026:15:57:14 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇸🇬
35.240.199.59
15 Oct 2026
35.240.199.59 - - [15/Oct/2026:15:02:39 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 ...
show more
35.240.199.59 - - [15/Oct/2026:15:02:39 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
35.240.199.59 - - [15/Oct/2026:15:02:39 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇸🇬
34.143.254.176
15 Oct 2026
34.143.254.176 - - [15/Oct/2026:14:53:19 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ ...
show more
34.143.254.176 - - [15/Oct/2026:14:53:19 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.143.254.176 - - [15/Oct/2026:14:53:19 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇺🇸
136.70.113.92
15 Oct 2026
136.70.113.92 - - [15/Oct/2026:11:00:59 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ H ...
show more
136.70.113.92 - - [15/Oct/2026:11:00:59 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
136.70.113.92 - - [15/Oct/2026:11:00:59 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
136.70.113.92 - - [15/Oct/2026:11:00:59 +0200] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇸🇬
35.240.199.59
15 Oct 2026
35.240.199.59 - - [15/Oct/2026:11:00:34 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 ...
show more
35.240.199.59 - - [15/Oct/2026:11:00:34 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
35.240.199.59 - - [15/Oct/2026:11:00:34 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
35.240.199.59 - - [15/Oct/2026:11:00:34 +0200] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇸🇬
34.143.254.176
15 Oct 2026
34.143.254.176 - - [15/Oct/2026:10:46:54 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e% ...
show more
34.143.254.176 - - [15/Oct/2026:10:46:54 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 150 "-" "-"
34.143.254.176 - - [15/Oct/2026:10:46:54 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-"
34.143.254.176 - - [15/Oct/2026:10:46:54 +0200] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇳🇱
194.26.192.239
15 Oct 2026
194.26.192.239 - - [15/Oct/2026:07:06:04 +0200] "GET /images/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 ...
show more
194.26.192.239 - - [15/Oct/2026:07:06:04 +0200] "GET /images/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 150 "-" "-"
194.26.192.239 - - [15/Oct/2026:07:06:04 +0200] "GET /assets/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 150 "-" "-"
194.26.192.239 - - [15/Oct/2026:07:06:04 +0200] "GET /public/..%2f..%2f..%2f..%2f.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇧🇪
34.79.64.130
15 Oct 2026
34.79.64.130 - - [15/Oct/2026:06:46:53 +0200] "OPTIONS / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compati ...
show more
34.79.64.130 - - [15/Oct/2026:06:46:53 +0200] "OPTIONS / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible)"
34.79.64.130 - - [15/Oct/2026:06:46:53 +0200] "LWNO / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible)"
34.79.64.130 - - [15/Oct/2026:06:46:54 +0200] "OPTIONS / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible)"
...
show less
Brute-Force
Web App Attack
🇺🇸
34.75.35.173
14 Oct 2026
34.75.35.173 - - [14/Oct/2026:18:44:21 +0200] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.75.35.173 ...
show more
34.75.35.173 - - [14/Oct/2026:18:44:21 +0200] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.75.35.173 - - [14/Oct/2026:18:44:21 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇹🇼
34.81.178.159
14 Oct 2026
34.81.178.159 - - [14/Oct/2026:11:39:30 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/e ...
show more
34.81.178.159 - - [14/Oct/2026:11:39:30 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.81.178.159 - - [14/Oct/2026:11:39:30 +0200] "GET /..%2f..%2f.env HTTP/1.1" 400 150 "-" "-"
34.81.178.159 - - [14/Oct/2026:11:39:30 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇺🇸
34.75.35.173
14 Oct 2026
34.75.35.173 - - [14/Oct/2026:11:16:45 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP ...
show more
34.75.35.173 - - [14/Oct/2026:11:16:45 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-"
34.75.35.173 - - [14/Oct/2026:11:16:45 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 150 "-" "-"
34.75.35.173 - - [14/Oct/2026:11:16:45 +0200] "GET /appearance/../../.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇸🇬
34.177.100.68
13 Oct 2026
34.177.100.68 - - [13/Oct/2026:20:02:57 +0200] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.177.100. ...
show more
34.177.100.68 - - [13/Oct/2026:20:02:57 +0200] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.177.100.68 - - [13/Oct/2026:20:02:58 +0200] "GET /..%2f..%2f.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇹🇼
35.194.199.0
13 Oct 2026
35.194.199.0 - - [13/Oct/2026:19:10:34 +0200] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
35.194.199 ...
show more
35.194.199.0 - - [13/Oct/2026:19:10:34 +0200] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
35.194.199.0 - - [13/Oct/2026:19:10:34 +0200] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
35.194.199.0 - - [13/Oct/2026:19:10:34 +0200] "GET /..%2f..%2f.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇸🇬
34.177.100.68
13 Oct 2026
34.177.100.68 - - [13/Oct/2026:15:02:00 +0200] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.177.100. ...
show more
34.177.100.68 - - [13/Oct/2026:15:02:00 +0200] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.177.100.68 - - [13/Oct/2026:15:02:00 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.177.100.68 - - [13/Oct/2026:15:02:00 +0200] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇭🇺
80.98.155.96
13 Oct 2026
2026-10-13T14:28:40.269601+02:00 server1 sshd-session[1925998]: User root from 80.98.155.96 not allo ...
show more
2026-10-13T14:28:40.269601+02:00 server1 sshd-session[1925998]: User root from 80.98.155.96 not allowed because not listed in AllowUsers
2026-10-13T14:34:43.802853+02:00 server1 sshd-session[1929571]: Invalid user admin from 80.98.155.96 port 50748
2026-10-13T14:36:08.524996+02:00 server1 sshd-session[1930501]: User root from 80.98.155.96 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
🇻🇳
160.30.136.87
13 Oct 2026
2026-10-13T04:54:34.130649+02:00 server1 sshd-session[1591819]: User root from 160.30.136.87 not all ...
show more
2026-10-13T04:54:34.130649+02:00 server1 sshd-session[1591819]: User root from 160.30.136.87 not allowed because not listed in AllowUsers
2026-10-13T04:54:41.501083+02:00 server1 sshd-session[1591847]: User root from 160.30.136.87 not allowed because not listed in AllowUsers
2026-10-13T04:54:47.037056+02:00 server1 sshd-session[1591893]: User root from 160.30.136.87 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
🇭🇰
152.32.216.14
13 Oct 2026
152.32.216.14 - - [13/Oct/2026:04:06:31 +0200] "GET / HTTP/1.1" 400 248 "-" "curl/7.29.0"
152.32.216 ...
show more
152.32.216.14 - - [13/Oct/2026:04:06:31 +0200] "GET / HTTP/1.1" 400 248 "-" "curl/7.29.0"
152.32.216.14 - - [13/Oct/2026:04:06:32 +0200] "\x16\x03\x01\x01\x09\x01\x00\x01\x05\x03\x0396\x04\xCE\xAD\x92\xD0\x01Z\x01?I\xBAWq\x1B+b\x0B\x86-\xFA\xBF\x8C\xA2\xF2}\xD1\xAE\x02\xCD\xBE \x8E\xB1\x95x\xBD}30r\xCF\x1F\xAET>\xC7\xB5\x01\xFF\x15A\xFB=a}\xC4\xC4)\x98[:q4\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
152.32.216.14 - - [13/Oct/2026:04:06:33 +0200] "\x16\x03\x01\x00\xF2\x01\x00\x00\xEE\x03\x03\x02`\xDC\xE6\xA4/\xEB\xD8/\xA4R\xE4\xF2\xDF\xB7\xFD\xED\xC8\xC8\xD0C\x1D\x16Be(\xB5\x1C\xA0Qf\xEE \x1C1\x03=DZ\xDA\xD7\xB4i\xABW+\x97\x09n~\x06i\x1B\x06\x85\x9A\x0C\x1B\xC3\xE5,tEX\x8B\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇨🇦
34.95.7.246
13 Oct 2026
34.95.7.246 - - [13/Oct/2026:03:06:57 +0200] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.en ...
show more
34.95.7.246 - - [13/Oct/2026:03:06:57 +0200] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-"
34.95.7.246 - - [13/Oct/2026:03:06:57 +0200] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇵🇦
179.43.153.10
12 Oct 2026
2026-10-13T01:48:04.355162+02:00 server1 sshd-session[1482170]: Invalid user ubuntu from 179.43.153. ...
show more
2026-10-13T01:48:04.355162+02:00 server1 sshd-session[1482170]: Invalid user ubuntu from 179.43.153.10 port 44022
2026-10-13T01:49:32.256556+02:00 server1 sshd-session[1482964]: Invalid user ubuntu from 179.43.153.10 port 37432
2026-10-13T01:50:58.659428+02:00 server1 sshd-session[1483703]: User root from 179.43.153.10 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
🇨🇦
34.95.7.246
12 Oct 2026
34.95.7.246 - - [12/Oct/2026:22:06:08 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f% ...
show more
34.95.7.246 - - [12/Oct/2026:22:06:08 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 150 "-" "-"
34.95.7.246 - - [12/Oct/2026:22:06:08 +0200] "GET /static/../../../a/../../../../.env HTTP/1.1" 400 150 "-" "-"
34.95.7.246 - - [12/Oct/2026:22:06:08 +0200] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇹🇼
34.80.113.41
12 Oct 2026
34.80.113.41 - - [12/Oct/2026:11:31:18 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP ...
show more
34.80.113.41 - - [12/Oct/2026:11:31:18 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-"
34.80.113.41 - - [12/Oct/2026:11:31:19 +0200] "GET /static/../../../a/../../../../.env HTTP/1.1" 400 150 "-" "-"
34.80.113.41 - - [12/Oct/2026:11:31:19 +0200] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇧🇷
34.95.246.208
12 Oct 2026
34.95.246.208 - - [12/Oct/2026:10:38:09 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2 ...
show more
34.95.246.208 - - [12/Oct/2026:10:38:09 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-"
34.95.246.208 - - [12/Oct/2026:10:38:10 +0200] "GET /static/../../../a/../../../../.env HTTP/1.1" 400 150 "-" "-"
34.95.246.208 - - [12/Oct/2026:10:38:10 +0200] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
...
show less
Brute-Force
Web App Attack
🇧🇪
35.187.93.104
12 Oct 2026
2026-10-12T05:35:57.640034+02:00 server1 sshd-session[776852]: Invalid user admin from 35.187.93.104 ...
show more
2026-10-12T05:35:57.640034+02:00 server1 sshd-session[776852]: Invalid user admin from 35.187.93.104 port 29720
2026-10-12T05:36:00.447372+02:00 server1 sshd-session[776852]: error: PAM: Authentication failure for illegal user admin from 35.187.93.104
2026-10-12T05:36:00.448322+02:00 server1 sshd-session[776852]: Failed keyboard-interactive/pam for invalid user admin from 35.187.93.104 port 29720 ssh2
...
show less
Brute-Force
SSH