🇺🇸
136.66.114.0
1 hour ago
136.66.114.0 - - [09/Sep/2026:13:19:48 +0000] "" 400 0 "-" "-"
136.66.114.0 - - [09/Sep/2026:13:19:4 ...
show more
136.66.114.0 - - [09/Sep/2026:13:19:48 +0000] "" 400 0 "-" "-"
136.66.114.0 - - [09/Sep/2026:13:19:49 +0000] "" 400 0 "-" "-"
136.66.114.0 - - [09/Sep/2026:13:19:52 +0000] "" 400 0 "-" "-"
136.66.114.0 - - [09/Sep/2026:13:19:59 +0000] "" 400 0 "-" "-"
136.66.114.0 - - [09/Sep/2026:13:20:00 +0000] "" 400 0 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇯🇵
35.189.154.58
2 hours ago
35.189.154.58 - - [09/Sep/2026:12:28:31 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" ...
show more
35.189.154.58 - - [09/Sep/2026:12:28:31 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-"
35.189.154.58 - - [09/Sep/2026:12:28:35 +0000] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-"
35.189.154.58 - - [09/Sep/2026:12:28:45 +0000] "GET /%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
35.189.154.58 - - [09/Sep/2026:12:28:45 +0000] "GET ////../.env HTTP/1.1" 400 150 "-" "-"
35.189.154.58 - - [09/Sep/2026:12:29:03 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇺🇸
34.16.250.67
6 hours ago
34.16.250.67 - - [09/Sep/2026:08:29:28 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
3 ...
show more
34.16.250.67 - - [09/Sep/2026:08:29:28 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
34.16.250.67 - - [09/Sep/2026:08:29:39 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-"
34.16.250.67 - - [09/Sep/2026:08:29:39 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? HTTP/1.1" 400 150 "-" "-"
34.16.250.67 - - [09/Sep/2026:08:29:39 +0000] "GET /@fs/../../../../../root/.env?raw?? HTTP/1.1" 400 150 "-" "-"
34.16.250.67 - - [09/Sep/2026:08:29:39 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇨🇦
139.177.194.8
14 hours ago
139.177.194.8 - - [09/Sep/2026:00:21:56 +0000] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|20 ...
show more
139.177.194.8 - - [09/Sep/2026:00:21:56 +0000] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|2013-11-22|'|'||'|'|Win XP|'|'|No|'|'|0.6.4|'|'|..|'|'||'|'|[endof]" 400 150 "-" "-"
139.177.194.8 - - [09/Sep/2026:00:21:56 +0000] "Gh0st\xAD\x00\x00\x00\xE0\x00\x00\x00x\x9CKS``\x98\xC3\xC0\xC0\xC0\x06\xC4\x8C@\xBCQ\x96\x81\x81\x09H\x07\xA7\x16\x95e&\xA7*\x04$&g+\x182\x94\xF6\xB000\xAC\xA8rc\x00\x01\x11\xA0\x82\x1F\x5C`&\x83\xC7K7\x86\x19\xE5n\x0C9\x95n\x0C;\x84\x0F3\xAC\xE8sch\xA8^\xCF4'J\x97\xA9\x82\xE30\xC3\x91h]&\x90\xF8\xCE\x97S\xCBA4L?2=\xE1\xC4\x92\x86\x0B@\xF5`\x0CT\x1F\xAE\xAF]" 400 150 "-" "-"
139.177.194.8 - - [09/Sep/2026:00:21:56 +0000] "145.ll|'|'|SGFjS2VkX0Q0OTkwNjI3|'|'|WIN-JNAPIER0859|'|'|JNapier|'|'|19-02-01|'|'||'|'|Win 7 Professional SP1 x64|'|'|No|'|'|0.7d|'|'|..|'|'|AA==|'|'|112.inf|'|'|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUyDQpEZXNrdG9wDQpjbGllbnRhLmV4ZQ0KRmFsc2UNCkZhbHNlDQpUcnVlDQpGYWxzZQ==12.act|'|'|AA==" 400 150 "-" "-"
139.177.194.8 - - [09/Sep/2026:00:21:56 +0000
... [host=LAN***]
show less
Web App Attack
🇳🇱
35.204.59.124
19 hours ago
35.204.59.124 - - [08/Sep/2026:19:51:08 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
...
show more
35.204.59.124 - - [08/Sep/2026:19:51:08 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
35.204.59.124 - - [08/Sep/2026:19:51:19 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? HTTP/1.1" 400 150 "-" "-"
35.204.59.124 - - [08/Sep/2026:19:51:19 +0000] "GET /@fs/../../../../../app/.env?raw?? HTTP/1.1" 400 150 "-" "-"
35.204.59.124 - - [08/Sep/2026:19:51:19 +0000] "GET /@fs/../../../../../proc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-"
35.204.59.124 - - [08/Sep/2026:19:51:19 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇬🇧
213.168.248.72
20 hours ago
213.168.248.72 - - [08/Sep/2026:18:40:31 +0000] "GET /rest/applinks/1.0/manifest HTTP/1.1" 400 248 " ...
show more
213.168.248.72 - - [08/Sep/2026:18:40:31 +0000] "GET /rest/applinks/1.0/manifest HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_4) AppleWebKit/537.36 (KHTML"
213.168.248.72 - - [08/Sep/2026:18:40:31 +0000] "GET /nmaplowercheck1788892828 HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_4) AppleWebKit/537.36 (KHTML"
213.168.248.72 - - [08/Sep/2026:18:40:31 +0000] "GET /base.php HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_4) AppleWebKit/537.36 (KHTML"
213.168.248.72 - - [08/Sep/2026:18:40:31 +0000] "GET /cgi-mod/header_logo.cgi?size=big HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_4) AppleWebKit/537.36 (KHTML"
213.168.248.72 - - [08/Sep/2026:18:40:31 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_4) AppleWebKit/537.36 (KHTML"
... [host=LAN***]
show less
Web App Attack
🇳🇱
34.32.178.38
20 hours ago
34.32.178.38 - - [08/Sep/2026:18:21:26 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
3 ...
show more
34.32.178.38 - - [08/Sep/2026:18:21:26 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
34.32.178.38 - - [08/Sep/2026:18:21:38 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 400 150 "-" "-"
34.32.178.38 - - [08/Sep/2026:18:21:38 +0000] "GET /@fs/../../../../../app/.env?raw?? HTTP/1.1" 400 150 "-" "-"
34.32.178.38 - - [08/Sep/2026:18:21:38 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-"
34.32.178.38 - - [08/Sep/2026:18:21:38 +0000] "GET /@fs/../../../../../root/.env?raw?? HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇹🇼
35.201.226.157
08 Sep 2026
35.201.226.157 - - [08/Sep/2026:05:47:03 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-" ...
show more
35.201.226.157 - - [08/Sep/2026:05:47:03 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
35.201.226.157 - - [08/Sep/2026:05:47:03 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env HTTP/1.1" 400 150 "-" "-"
35.201.226.157 - - [08/Sep/2026:05:47:03 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env HTTP/1.1" 400 150 "-" "-"
35.201.226.157 - - [08/Sep/2026:05:47:03 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ HTTP/1.1" 400 150 "-" "-"
35.201.226.157 - - [08/Sep/2026:05:47:17 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇺🇸
104.196.45.75
07 Sep 2026
104.196.45.75 - - [07/Sep/2026:22:51:23 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
...
show more
104.196.45.75 - - [07/Sep/2026:22:51:23 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
104.196.45.75 - - [07/Sep/2026:22:51:23 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env HTTP/1.1" 400 150 "-" "-"
104.196.45.75 - - [07/Sep/2026:22:51:23 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ HTTP/1.1" 400 150 "-" "-"
104.196.45.75 - - [07/Sep/2026:22:51:23 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env HTTP/1.1" 400 150 "-" "-"
104.196.45.75 - - [07/Sep/2026:22:51:32 +0000] "GET /@fs/../../../../../proc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇹🇼
34.81.155.144
07 Sep 2026
34.81.155.144 - - [07/Sep/2026:22:40:12 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" ...
show more
34.81.155.144 - - [07/Sep/2026:22:40:12 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-"
34.81.155.144 - - [07/Sep/2026:22:40:16 +0000] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-"
34.81.155.144 - - [07/Sep/2026:22:40:27 +0000] "GET /%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
34.81.155.144 - - [07/Sep/2026:22:40:28 +0000] "GET ////../.env HTTP/1.1" 400 150 "-" "-"
34.81.155.144 - - [07/Sep/2026:22:40:52 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇺🇸
35.255.218.13
07 Sep 2026
35.255.218.13 - - [07/Sep/2026:15:42:47 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
...
show more
35.255.218.13 - - [07/Sep/2026:15:42:47 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
35.255.218.13 - - [07/Sep/2026:15:43:00 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 400 150 "-" "-"
35.255.218.13 - - [07/Sep/2026:15:43:00 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? HTTP/1.1" 400 150 "-" "-"
35.255.218.13 - - [07/Sep/2026:15:43:00 +0000] "GET /@fs/../../../../../proc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-"
35.255.218.13 - - [07/Sep/2026:15:43:00 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇺🇸
136.67.61.48
07 Sep 2026
136.67.61.48 - - [07/Sep/2026:12:11:37 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
1 ...
show more
136.67.61.48 - - [07/Sep/2026:12:11:37 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
136.67.61.48 - - [07/Sep/2026:12:11:38 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env HTTP/1.1" 400 150 "-" "-"
136.67.61.48 - - [07/Sep/2026:12:11:38 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env HTTP/1.1" 400 150 "-" "-"
136.67.61.48 - - [07/Sep/2026:12:11:38 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ HTTP/1.1" 400 150 "-" "-"
136.67.61.48 - - [07/Sep/2026:12:11:55 +0000] "GET /@fs/../../../../../root/.env?raw?? HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇫🇷
104.28.243.186
07 Sep 2026
104.28.243.186 - - [07/Sep/2026:11:02:00 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 ...
show more
104.28.243.186 - - [07/Sep/2026:11:02:00 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 150 "-" "-"
104.28.243.186 - - [07/Sep/2026:11:02:02 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fvar/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 400 150 "-" "-"
104.28.243.186 - - [07/Sep/2026:11:02:03 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 150 "-" "-"
104.28.243.186 - - [07/Sep/2026:11:02:03 +0000] "GET /public/plugins/alertlist/../../../../../../../../var/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 400 150 "-" "-"
104.28.243.186 - - [07/Sep/2026:11:02:04 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/cmdline HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇺🇸
107.173.44.199
07 Sep 2026
107.173.44.199 - - [07/Sep/2026:06:37:15 +0000] "GET /.openclaw/openclaw.json HTTP/1.1" 400 248 "-" ...
show more
107.173.44.199 - - [07/Sep/2026:06:37:15 +0000] "GET /.openclaw/openclaw.json HTTP/1.1" 400 248 "-" "opendirme-credhunt/1.0"
107.173.44.199 - - [07/Sep/2026:06:37:15 +0000] "\x16\x03\x01\x05\xCC\x01\x00\x05\xC8\x03\x03\x81J\x16;\xDE\x1D\x0E\xB6\xD4\x18\xA5\xED\xA1W\xFE\xCD)\x99\xAF\xD9\x02D\xAD\xA9\x7F\x9CR\xDC\xD5\x14\x0B\xD6 %eF\xA4\xC1\xD2\xD9\x9FZ\xBA\xAFe\xC3\xD2BP\xD0\xE6s\xD4\xE4@|J&\xC3\x8F\xCB>P\xC8\xCB\x00 \xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x13\xC0\x14\x00\x9C\x00\x9D\x00/\x005\x00" 400 150 "-" "-"
107.173.44.199 - - [07/Sep/2026:06:37:15 +0000] "GET /.grok/auth.json HTTP/1.1" 400 248 "-" "opendirme-credhunt/1.0"
107.173.44.199 - - [07/Sep/2026:06:37:15 +0000] "GET /.credentials.json HTTP/1.1" 400 248 "-" "opendirme-credhunt/1.0"
107.173.44.199 - - [07/Sep/2026:06:37:15 +0000] "GET /auth.json HTTP/1.1" 400 248 "-" "opendirme-credhunt/1.0"
... [host=LAN***]
show less
Web App Attack
🇺🇸
34.63.131.94
07 Sep 2026
34.63.131.94 - - [07/Sep/2026:03:32:04 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
3 ...
show more
34.63.131.94 - - [07/Sep/2026:03:32:04 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
34.63.131.94 - - [07/Sep/2026:03:32:23 +0000] "GET /@fs/../../../../../proc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-"
34.63.131.94 - - [07/Sep/2026:03:32:23 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ?raw?? HTTP/1.1" 400 150 "-" "-"
34.63.131.94 - - [07/Sep/2026:03:32:23 +0000] "GET /@fs/../../../../../app/.env?raw?? HTTP/1.1" 400 150 "-" "-"
34.63.131.94 - - [07/Sep/2026:03:32:23 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env?raw?? HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇹🇼
35.234.1.230
07 Sep 2026
35.234.1.230 - - [07/Sep/2026:00:52:12 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" ...
show more
35.234.1.230 - - [07/Sep/2026:00:52:12 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-"
35.234.1.230 - - [07/Sep/2026:00:52:12 +0000] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-"
35.234.1.230 - - [07/Sep/2026:00:52:14 +0000] "GET /%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
35.234.1.230 - - [07/Sep/2026:00:52:14 +0000] "GET ////../.env HTTP/1.1" 400 150 "-" "-"
35.234.1.230 - - [07/Sep/2026:00:52:18 +0000] "GET /assets../../../etc/passwd HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇺🇸
35.239.229.213
06 Sep 2026
35.239.229.213 - - [06/Sep/2026:18:57:46 +0000] "GET /public/plugins/text/../../../../../../../../pr ...
show more
35.239.229.213 - - [06/Sep/2026:18:57:46 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
35.239.229.213 - - [06/Sep/2026:18:57:46 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 150 "-" "-"
35.239.229.213 - - [06/Sep/2026:18:57:46 +0000] "GET /public/plugins/alertlist/../../../../../../../../var/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 400 150 "-" "-"
35.239.229.213 - - [06/Sep/2026:18:57:46 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 150 "-" "-"
35.239.229.213 - - [06/Sep/2026:18:57:46 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fvar/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇳🇱
94.154.46.247
06 Sep 2026
94.154.46.247 - - [06/Sep/2026:12:11:30 +0000] "GET /../../.env HTTP/1.1" 400 150 "-" "-"
94.154.46. ...
show more
94.154.46.247 - - [06/Sep/2026:12:11:30 +0000] "GET /../../.env HTTP/1.1" 400 150 "-" "-"
94.154.46.247 - - [06/Sep/2026:12:11:30 +0000] "GET /../../.env.local HTTP/1.1" 400 150 "-" "-"
94.154.46.247 - - [06/Sep/2026:12:11:30 +0000] "GET /../.env.local HTTP/1.1" 400 150 "-" "-"
94.154.46.247 - - [06/Sep/2026:12:11:30 +0000] "GET /../../../.env HTTP/1.1" 400 150 "-" "-"
94.154.46.247 - - [06/Sep/2026:12:11:30 +0000] "GET /../../../../.env HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇺🇸
136.64.93.255
06 Sep 2026
136.64.93.255 - - [06/Sep/2026:12:09:15 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 ...
show more
136.64.93.255 - - [06/Sep/2026:12:09:15 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 150 "-" "-"
136.64.93.255 - - [06/Sep/2026:12:09:15 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 150 "-" "-"
136.64.93.255 - - [06/Sep/2026:12:09:16 +0000] "GET /public/plugins/alertlist/../../../../../../../../var/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 400 150 "-" "-"
136.64.93.255 - - [06/Sep/2026:12:09:16 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fvar/run/secrets/kubernetes.io/serviceaccount/token HTTP/1.1" 400 150 "-" "-"
136.64.93.255 - - [06/Sep/2026:12:09:16 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/cmdline HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇺🇸
34.41.100.57
06 Sep 2026
34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /api/.git/config HTTP/1.1" 400 248 "-" "crusader- ...
show more
34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /api/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /var/www/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /public/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
34.41.100.57 - - [06/Sep/2026:07:22:30 +0000] "GET /backend/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
... [host=LAN***]
show less
Web App Attack
🇬🇧
35.203.211.162
05 Sep 2026
35.203.211.162 - - [05/Sep/2026:17:45:14 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00 ...
show more
35.203.211.162 - - [05/Sep/2026:17:45:14 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xB5}\x00\x00\x01\x00\x00\x0E\x00\x02NT LM 0.12\x00\x02\x00" 400 150 "-" "-"
35.203.211.162 - - [05/Sep/2026:17:45:14 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x02\x02" 400 150 "-" "-"
35.203.211.162 - - [05/Sep/2026:17:45:14 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x10\x02" 400 150 "-" "-"
35.203.211.162 - - [0
... [host=LAN***]
show less
Web App Attack
🇬🇧
34.153.181.47
05 Sep 2026
34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /.git/config HTTP/1.1" 400 248 "-" "crusader-wor ...
show more
34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /src/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /backend/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /app/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
34.153.181.47 - - [05/Sep/2026:10:29:47 +0000] "GET /api/.git/config HTTP/1.1" 400 248 "-" "crusader-worker/1.0"
... [host=LAN***]
show less
Web App Attack
🇸🇬
34.158.50.64
04 Sep 2026
34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
3 ...
show more
34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 150 "-" "-"
34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fproc/self/environ HTTP/1.1" 400 150 "-" "-"
34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2froot/.env HTTP/1.1" 400 150 "-" "-"
34.158.50.64 - - [04/Sep/2026:13:50:43 +0000] "GET /@fs/..%2f..%2f..%2f..%2f..%2fapp/.env HTTP/1.1" 400 150 "-" "-"
34.158.50.64 - - [04/Sep/2026:13:50:56 +0000] "GET /@fs/../../../../../app/.env?raw?? HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇺🇸
136.70.68.217
02 Sep 2026
136.70.68.217 - - [02/Sep/2026:10:35:35 +0000] "" 400 0 "-" "-"
136.70.68.217 - - [02/Sep/2026:10:35 ...
show more
136.70.68.217 - - [02/Sep/2026:10:35:35 +0000] "" 400 0 "-" "-"
136.70.68.217 - - [02/Sep/2026:10:35:35 +0000] "" 400 0 "-" "-"
136.70.68.217 - - [02/Sep/2026:10:35:36 +0000] "" 400 0 "-" "-"
136.70.68.217 - - [02/Sep/2026:10:35:36 +0000] "" 400 0 "-" "-"
136.70.68.217 - - [02/Sep/2026:10:35:38 +0000] "" 400 0 "-" "-"
... [host=LAN***]
show less
Web App Attack
🇬🇧
167.172.52.88
01 Sep 2026
2026-09-01T15:05:35.095455+00:00 [TARGET-FQDN] sshd-session[108373]: Invalid user kalshi from 167.17 ...
show more
2026-09-01T15:05:35.095455+00:00 [TARGET-FQDN] sshd-session[108373]: Invalid user kalshi from 167.172.52.88 port 34958
2026-09-01T15:05:35.116452+00:00 [TARGET-FQDN] sshd-session[108373]: Connection closed by invalid user kalshi 167.172.52.88 port 34958 [preauth]
2026-09-01T15:07:49.943327+00:00 [TARGET-FQDN] sshd-session[108529]: Invalid user sol from 167.172.52.88 port 58178
2026-09-01T15:07:49.963419+00:00 [TARGET-FQDN] sshd-session[108529]: Connection closed by invalid user sol 167.172.52.88 port 58178 [preauth]
2026-09-01T15:10:05.513546+00:00 [TARGET-FQDN] sshd-session[108557]: Invalid user trader from 167.172.52.88 port 55828
... [host=MEI***]
show less
Brute-Force
SSH