|
🇺🇸
8.235.96.134
|
|
8.235.96.134 - - [25/Oct/2026:17:23:28 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 1 ...
show more
8.235.96.134 - - [25/Oct/2026:17:23:28 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
8.235.96.134 - - [25/Oct/2026:17:23:28 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
8.235.96.134 - - [25/Oct/2026:17:23:29 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
8.235.96.134 - - [25/Oct/2026:17:23:29 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
8.235.96.134 - - [25/Oct/2026:17:23:29 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇺🇸
35.237.115.57
|
|
35.237.115.57 - - [25/Oct/2026:16:54:03 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 ...
show more
35.237.115.57 - - [25/Oct/2026:16:54:03 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
35.237.115.57 - - [25/Oct/2026:16:54:03 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
35.237.115.57 - - [25/Oct/2026:16:54:03 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
35.237.115.57 - - [25/Oct/2026:16:54:03 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
35.237.115.57 - - [25/Oct/2026:16:54:03 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇺🇸
35.199.55.153
|
|
2026/10/25 12:00:13 [error] 1932668#1932668: *5501 open() "/var/www/parked/mailer/.env" failed (2: N ...
show more
2026/10/25 12:00:13 [error] 1932668#1932668: *5501 open() "/var/www/parked/mailer/.env" failed (2: No such file or directory), client: 35.199.55.153, server: www.ellasmithurst.com, request: "GET /mailer/.env HTTP/1.0", host: "www.ellasmithurst.com"
2026/10/25 12:00:13 [error] 1932668#1932668: *5503 open() "/var/www/parked/mail/.env" failed (2: No such file or directory), client: 35.199.55.153, server: www.ellasmithurst.com, request: "GET /mail/.env HTTP/1.0", host: "www.ellasmithurst.com"
2026/10/25 12:00:14 [error] 1932666#1932666: *5513 open() "/var/www/parked/mailing/.env" failed (2: No such file or directory), client: 35.199.55.153, server: www.ellasmithurst.com, request: "GET /mailing/.env HTTP/1.0", host: "www.ellasmithurst.com"
2026/10/25 12:00:15 [error] 1932667#1932667: *5541 open() "/var/www/parked/mailgun/.env" failed (2: No such file or directory), client: 35.199.55.153, server: www.ellasmithurst.com, request: "GET /mailgun/.env HTTP/1.0", host: "www.ellasmithurst.com"
2026
... [host=CER***]
show less
|
Web App Attack
|
|
🇺🇸
192.81.131.71
|
|
192.81.131.71 - - [25/Oct/2026:05:15:55 +0000] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|20 ...
show more
192.81.131.71 - - [25/Oct/2026:05:15:55 +0000] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|2013-11-22|'|'||'|'|Win XP|'|'|No|'|'|0.6.4|'|'|..|'|'||'|'|[endof]" 400 150 "-" "-"
192.81.131.71 - - [25/Oct/2026:05:15:55 +0000] "Gh0st\xAD\x00\x00\x00\xE0\x00\x00\x00x\x9CKS``\x98\xC3\xC0\xC0\xC0\x06\xC4\x8C@\xBCQ\x96\x81\x81\x09H\x07\xA7\x16\x95e&\xA7*\x04$&g+\x182\x94\xF6\xB000\xAC\xA8rc\x00\x01\x11\xA0\x82\x1F\x5C`&\x83\xC7K7\x86\x19\xE5n\x0C9\x95n\x0C;\x84\x0F3\xAC\xE8sch\xA8^\xCF4'J\x97\xA9\x82\xE30\xC3\x91h]&\x90\xF8\xCE\x97S\xCBA4L?2=\xE1\xC4\x92\x86\x0B@\xF5`\x0CT\x1F\xAE\xAF]" 400 150 "-" "-"
192.81.131.71 - - [25/Oct/2026:05:15:55 +0000] "145.ll|'|'|SGFjS2VkX0Q0OTkwNjI3|'|'|WIN-JNAPIER0859|'|'|JNapier|'|'|19-02-01|'|'||'|'|Win 7 Professional SP1 x64|'|'|No|'|'|0.7d|'|'|..|'|'|AA==|'|'|112.inf|'|'|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUyDQpEZXNrdG9wDQpjbGllbnRhLmV4ZQ0KRmFsc2UNCkZhbHNlDQpUcnVlDQpGYWxzZQ==12.act|'|'|AA==" 400 150 "-" "-"
192.81.131.71 - - [25/Oct/2026:05:15:56 +0000
... [host=LAN***]
show less
|
Web App Attack
|
|
🇺🇸
212.102.40.218
|
|
212.102.40.218 - - [25/Oct/2026:04:42:59 +0000] "\x16\x03\x03\x01\xA7\x01\x00\x01\xA3\x03\x03\xD9\x0 ...
show more
212.102.40.218 - - [25/Oct/2026:04:42:59 +0000] "\x16\x03\x03\x01\xA7\x01\x00\x01\xA3\x03\x03\xD9\x06F\xFD&\xBE\xA1\xE9\x19c\xCB\x88l\xB7?\x14m\x1AE6\x9EU\xE6\x22\xEB=\x02v\xE01\xD1\xC7 5\x8C\xB9\xE2k\xFB#\xE3\x11Q\xB0\xEB$i\x8B\x1B\xFB\x90u\xCA\xB4M\xC10WR\xFE\x16\x9DM~\xA6\x00\x8A\x00\x16\x003\x00g\xC0\x9E\xC0\xA2\x00\x9E\x009\x00k\xC0\x9F\xC0\xA3\x00\x9F\x00E\x00\xBE\x00\x88\x00\xC4\x00\x9A\xC0\x08\xC0\x09\xC0#\xC0\xAC\xC0\xAE\xC0+\xC0" 400 150 "-" "-"
212.102.40.218 - - [25/Oct/2026:04:43:00 +0000] "\x16\x03\x03\x01\xA7\x01\x00\x01\xA3\x03\x03\x16\xC6Mjw]b\xBC\xED\xB8$\x82\x87\x07\xE8\xF5\x90\xB7\xCA^\xE2x\x05>g\x98\xF3\xFC/m\x13o \xE7\x0B\x07\xA9\x7F\xE4\xF5\xF9\xB4\xD9\x15\x91\xCB\xB5\x9D\x85\x82,\xFD\xD7\x8C\xF4J\x85\x07\x15\x99\xC1\xA8\xD8|o\x00\x8A\x00\x05\x00\x04\x00\x07\x00\xC0\x00\x84\x00\xBA\x00A\x00\x9D\xC0\xA1\xC0\x9D\x00=\x005\x00\x9C\xC0\xA0\xC0\x9C\x00<\x00/\x00" 400 150 "-" "-"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇺🇸
172.104.209.135
|
|
172.104.209.135 - - [25/Oct/2026:04:18:59 +0000] "\x16\x03\x01\x00\xD1\x01\x00\x00\xCD\x03\x03\xBD\x ...
show more
172.104.209.135 - - [25/Oct/2026:04:18:59 +0000] "\x16\x03\x01\x00\xD1\x01\x00\x00\xCD\x03\x03\xBD\xCEO5\xF7\xEE\x17\xA2\x92\xD9\xAF\xE5\xB4e\x1E\xDA\xC0\x9B\xB8\xC9\xD7\xBEG\xDE\x1C\xA32\xD6\xC23\xB0\xB1 \xF9jiwzhL\xBA\x17\x070\x06Qi{\x10\x967J \xFED\xD2\x99g\xD0^\xB7\x04*\xBBx\x00\x16\x13\x03\x13\x02\x13\x01\xCC\xA9\xCC\xA8\xC0,\xC0+\xC00\xC0/\x00\x9D\x00\x9C\x01\x00\x00n\x00+\x00\x05\x04\x03\x04\x03\x03\x00" 400 150 "-" "-"
172.104.209.135 - - [25/Oct/2026:04:18:59 +0000] "\x16\x03\x01\x00\xE6\x01\x00\x00\xE2\x03\x03dL;uj7\x8C[\xD6\xFE\xF6\xF9)\x87K7\x9BL\xA3\xCD&I}lD!\xFC\xDB\x81\x96^\x18 \x9DS\xF5\x07[\x05\xA9.\x83F\x8E\xA6\xAAz\xE4\xC4\xEFv\xBD\xDD\xAC\xED\x17\x1E\x97N\xD220MsJ\x00\x0C\x13\x04\x13\x05::\x13\x03\x13\x01::\x01\x00\x00\x8D\x00+\x00\x03\x02\x03\x04\x00" 400 150 "-" "-"
172.104.209.135 - - [25/Oct/2026:04:18:59 +0000] "\x16\x03\x01\x00\xAF\x01\x00\x00\xAB\x03\x03\x18(\x89\xBEWM\xA9\xAA\x9A\x90\x11\xCA\xFC\xB8\xB5\x17 \xDBG\x95\x877\xF4\xEC\xAA\x88>v\xF1GG; \x83\xC3fY\
... [host=LAN***]
show less
|
Web App Attack
|
|
🇸🇬
35.197.144.168
|
|
2026/10/24 23:04:29 [error] 1716634#1716634: *63675 open() "/var/www/parked/mailer/.env" failed (2: ...
show more
2026/10/24 23:04:29 [error] 1716634#1716634: *63675 open() "/var/www/parked/mailer/.env" failed (2: No such file or directory), client: 35.197.144.168, server: www.edwardsmithurst.com, request: "GET /mailer/.env HTTP/1.0", host: "www.edwardsmithurst.com"
2026/10/24 23:04:29 [error] 1716634#1716634: *63677 open() "/var/www/parked/mail/.env" failed (2: No such file or directory), client: 35.197.144.168, server: www.edwardsmithurst.com, request: "GET /mail/.env HTTP/1.0", host: "www.edwardsmithurst.com"
2026/10/24 23:04:30 [error] 1716634#1716634: *63683 open() "/var/www/parked/mailing/.env" failed (2: No such file or directory), client: 35.197.144.168, server: www.edwardsmithurst.com, request: "GET /mailing/.env HTTP/1.0", host: "www.edwardsmithurst.com"
2026/10/24 23:04:32 [error] 1716632#1716632: *63704 open() "/var/www/parked/mailgun/.env" failed (2: No such file or directory), client: 35.197.144.168, server: www.edwardsmithurst.com, request: "GET /mailgun/.env HTTP/1.0", host: "www.e
... [host=CER***]
show less
|
Web App Attack
|
|
🇺🇸
2600:3c01::2000:48ff:feb4:4cee
|
|
2600:3c01::2000:48ff:feb4:4cee - - [24/Oct/2026:19:18:10 +0000] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MAR ...
show more
2600:3c01::2000:48ff:feb4:4cee - - [24/Oct/2026:19:18:10 +0000] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|2013-11-22|'|'||'|'|Win XP|'|'|No|'|'|0.6.4|'|'|..|'|'||'|'|[endof]" 400 150 "-" "-"
2600:3c01::2000:48ff:feb4:4cee - - [24/Oct/2026:19:18:10 +0000] "Gh0st\xAD\x00\x00\x00\xE0\x00\x00\x00x\x9CKS``\x98\xC3\xC0\xC0\xC0\x06\xC4\x8C@\xBCQ\x96\x81\x81\x09H\x07\xA7\x16\x95e&\xA7*\x04$&g+\x182\x94\xF6\xB000\xAC\xA8rc\x00\x01\x11\xA0\x82\x1F\x5C`&\x83\xC7K7\x86\x19\xE5n\x0C9\x95n\x0C;\x84\x0F3\xAC\xE8sch\xA8^\xCF4'J\x97\xA9\x82\xE30\xC3\x91h]&\x90\xF8\xCE\x97S\xCBA4L?2=\xE1\xC4\x92\x86\x0B@\xF5`\x0CT\x1F\xAE\xAF]" 400 150 "-" "-"
2600:3c01::2000:48ff:feb4:4cee - - [24/Oct/2026:19:18:10 +0000] "145.ll|'|'|SGFjS2VkX0Q0OTkwNjI3|'|'|WIN-JNAPIER0859|'|'|JNapier|'|'|19-02-01|'|'||'|'|Win 7 Professional SP1 x64|'|'|No|'|'|0.7d|'|'|..|'|'|AA==|'|'|112.inf|'|'|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUyDQpEZXNrdG9wDQpjbGllbnRhLmV4ZQ0KRmFsc2UNCkZhbHNlDQpUcnVlDQpGYWxzZQ==12.act|'|'|AA==" 400 150 "-
... [host=LAN***]
show less
|
Web App Attack
|
|
🇺🇸
216.180.246.189
|
|
216.180.246.189 - - [24/Oct/2026:13:47:51 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatib ...
show more
216.180.246.189 - - [24/Oct/2026:13:47:51 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.189 - - [24/Oct/2026:13:47:51 +0000] "GET /manage/account/login HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.189 - - [24/Oct/2026:13:47:52 +0000] "GET /admin/index.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.189 - - [24/Oct/2026:13:47:53 +0000] "GET /index.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
216.180.246.189 - - [24/Oct/2026:13:47:53 +0000] "GET /+CSCOE+/logon.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇺🇸
34.94.249.230
|
|
2026/10/24 11:28:20 [error] 1716633#1716633: *53949 open() "/var/www/parked/mailer/.env" failed (2: ...
show more
2026/10/24 11:28:20 [error] 1716633#1716633: *53949 open() "/var/www/parked/mailer/.env" failed (2: No such file or directory), client: 34.94.249.230, server: www.bensmithurst.com, request: "GET /mailer/.env HTTP/1.0", host: "www.bensmithurst.com"
2026/10/24 11:28:20 [error] 1716633#1716633: *53951 open() "/var/www/parked/mail/.env" failed (2: No such file or directory), client: 34.94.249.230, server: www.bensmithurst.com, request: "GET /mail/.env HTTP/1.0", host: "www.bensmithurst.com"
2026/10/24 11:28:21 [error] 1716633#1716633: *53957 open() "/var/www/parked/mailing/.env" failed (2: No such file or directory), client: 34.94.249.230, server: www.bensmithurst.com, request: "GET /mailing/.env HTTP/1.0", host: "www.bensmithurst.com"
2026/10/24 11:28:22 [error] 1716634#1716634: *53977 open() "/var/www/parked/mailgun/.env" failed (2: No such file or directory), client: 34.94.249.230, server: www.bensmithurst.com, request: "GET /mailgun/.env HTTP/1.0", host: "www.bensmithurst.com"
2026/10/
... [host=CER***]
show less
|
Web App Attack
|
|
🇯🇵
34.97.21.42
|
|
2026/10/24 10:28:37 [error] 1716633#1716633: *52739 open() "/var/www/parked/mailer/.env" failed (2: ...
show more
2026/10/24 10:28:37 [error] 1716633#1716633: *52739 open() "/var/www/parked/mailer/.env" failed (2: No such file or directory), client: 34.97.21.42, server: www.edwardsmithurst.com, request: "GET /mailer/.env HTTP/1.0", host: "www.edwardsmithurst.com"
2026/10/24 10:28:37 [error] 1716633#1716633: *52741 open() "/var/www/parked/mail/.env" failed (2: No such file or directory), client: 34.97.21.42, server: www.edwardsmithurst.com, request: "GET /mail/.env HTTP/1.0", host: "www.edwardsmithurst.com"
2026/10/24 10:28:38 [error] 1716633#1716633: *52747 open() "/var/www/parked/mailing/.env" failed (2: No such file or directory), client: 34.97.21.42, server: www.edwardsmithurst.com, request: "GET /mailing/.env HTTP/1.0", host: "www.edwardsmithurst.com"
2026/10/24 10:28:40 [error] 1716634#1716634: *52767 open() "/var/www/parked/mailgun/.env" failed (2: No such file or directory), client: 34.97.21.42, server: www.edwardsmithurst.com, request: "GET /mailgun/.env HTTP/1.0", host: "www.edwardsmithur
... [host=CER***]
show less
|
Web App Attack
|
|
🇺🇸
2600:3c02::2000:a7ff:feee:af4c
|
|
2600:3c02::2000:a7ff:feee:af4c - - [24/Oct/2026:08:46:20 +0000] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MAR ...
show more
2600:3c02::2000:a7ff:feee:af4c - - [24/Oct/2026:08:46:20 +0000] "lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|2013-11-22|'|'||'|'|Win XP|'|'|No|'|'|0.6.4|'|'|..|'|'||'|'|[endof]" 400 150 "-" "-"
2600:3c02::2000:a7ff:feee:af4c - - [24/Oct/2026:08:46:20 +0000] "Gh0st\xAD\x00\x00\x00\xE0\x00\x00\x00x\x9CKS``\x98\xC3\xC0\xC0\xC0\x06\xC4\x8C@\xBCQ\x96\x81\x81\x09H\x07\xA7\x16\x95e&\xA7*\x04$&g+\x182\x94\xF6\xB000\xAC\xA8rc\x00\x01\x11\xA0\x82\x1F\x5C`&\x83\xC7K7\x86\x19\xE5n\x0C9\x95n\x0C;\x84\x0F3\xAC\xE8sch\xA8^\xCF4'J\x97\xA9\x82\xE30\xC3\x91h]&\x90\xF8\xCE\x97S\xCBA4L?2=\xE1\xC4\x92\x86\x0B@\xF5`\x0CT\x1F\xAE\xAF]" 400 150 "-" "-"
2600:3c02::2000:a7ff:feee:af4c - - [24/Oct/2026:08:46:20 +0000] "145.ll|'|'|SGFjS2VkX0Q0OTkwNjI3|'|'|WIN-JNAPIER0859|'|'|JNapier|'|'|19-02-01|'|'||'|'|Win 7 Professional SP1 x64|'|'|No|'|'|0.7d|'|'|..|'|'|AA==|'|'|112.inf|'|'|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUyDQpEZXNrdG9wDQpjbGllbnRhLmV4ZQ0KRmFsc2UNCkZhbHNlDQpUcnVlDQpGYWxzZQ==12.act|'|'|AA==" 400 150 "-
... [host=CER***]
show less
|
Web App Attack
|
|
🇨🇦
35.234.252.65
|
|
2026/10/24 03:19:07 [error] 1216581#1216581: *40941 open() "/var/www/parked/mailer/.env" failed (2: ...
show more
2026/10/24 03:19:07 [error] 1216581#1216581: *40941 open() "/var/www/parked/mailer/.env" failed (2: No such file or directory), client: 35.234.252.65, server: www.smithurst.uk, request: "GET /mailer/.env HTTP/1.0", host: "www.smithurst.uk"
2026/10/24 03:19:07 [error] 1216581#1216581: *40943 open() "/var/www/parked/mail/.env" failed (2: No such file or directory), client: 35.234.252.65, server: www.smithurst.uk, request: "GET /mail/.env HTTP/1.0", host: "www.smithurst.uk"
2026/10/24 03:19:08 [error] 1216581#1216581: *40951 open() "/var/www/parked/mailing/.env" failed (2: No such file or directory), client: 35.234.252.65, server: www.smithurst.uk, request: "GET /mailing/.env HTTP/1.0", host: "www.smithurst.uk"
2026/10/24 03:19:09 [error] 1216584#1216584: *40971 open() "/var/www/parked/mailgun/.env" failed (2: No such file or directory), client: 35.234.252.65, server: www.smithurst.uk, request: "GET /mailgun/.env HTTP/1.0", host: "www.smithurst.uk"
2026/10/24 03:19:10 [error] 1216584#1216
... [host=CER***]
show less
|
Web App Attack
|
|
🇬🇧
35.203.211.23
|
|
35.203.211.23 - - [24/Oct/2026:01:30:15 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\ ...
show more
35.203.211.23 - - [24/Oct/2026:01:30:15 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xB5}\x00\x00\x01\x00\x00\x0E\x00\x02NT LM 0.12\x00\x02\x00" 400 150 "-" "-"
35.203.211.23 - - [24/Oct/2026:01:30:15 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x02\x02" 400 150 "-" "-"
35.203.211.23 - - [24/Oct/2026:01:30:15 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x10\x02" 400 150 "-" "-"
35.203.211.23 - - [24/Oc
... [host=LAN***]
show less
|
Web App Attack
|
|
🇺🇸
162.216.150.22
|
|
162.216.150.22 - - [24/Oct/2026:00:55:55 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00 ...
show more
162.216.150.22 - - [24/Oct/2026:00:55:55 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xB5}\x00\x00\x01\x00\x00\x0E\x00\x02NT LM 0.12\x00\x02\x00" 400 150 "-" "-"
162.216.150.22 - - [24/Oct/2026:00:55:55 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x02\x02" 400 150 "-" "-"
162.216.150.22 - - [24/Oct/2026:00:55:55 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x10\x02" 400 150 "-" "-"
162.216.150.22 - - [2
... [host=LAN***]
show less
|
Web App Attack
|
|
🇺🇸
162.216.149.237
|
|
162.216.149.237 - - [23/Oct/2026:22:51:13 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x0 ...
show more
162.216.149.237 - - [23/Oct/2026:22:51:13 +0000] "\x00\x00\x001\xFFSMBr\x00\x00\x00\x00\x18Eh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xB5}\x00\x00\x01\x00\x00\x0E\x00\x02NT LM 0.12\x00\x02\x00" 400 150 "-" "-"
162.216.149.237 - - [23/Oct/2026:22:51:13 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x02\x02" 400 150 "-" "-"
162.216.149.237 - - [23/Oct/2026:22:51:13 +0000] "\x00\x00\x00f\xFESMB@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x001234567890123456$\x00\x01\x00\x01\x00\x00\x00\x00\x00\x00\x001234567890123456\x00\x00\x00\x00\x00\x00\x00\x00\x10\x02" 400 150 "-" "-"
162.216.149.237 -
... [host=LAN***]
show less
|
Web App Attack
|
|
🇯🇵
34.97.217.92
|
|
2026/10/23 19:35:18 [error] 1216583#1216583: *34910 open() "/var/www/parked/mailer/.env" failed (2: ...
show more
2026/10/23 19:35:18 [error] 1216583#1216583: *34910 open() "/var/www/parked/mailer/.env" failed (2: No such file or directory), client: 34.97.217.92, server: www.ellasmithurst.com, request: "GET /mailer/.env HTTP/1.0", host: "www.ellasmithurst.com"
2026/10/23 19:35:18 [error] 1216583#1216583: *34912 open() "/var/www/parked/mail/.env" failed (2: No such file or directory), client: 34.97.217.92, server: www.ellasmithurst.com, request: "GET /mail/.env HTTP/1.0", host: "www.ellasmithurst.com"
2026/10/23 19:35:19 [error] 1216583#1216583: *34918 open() "/var/www/parked/mailing/.env" failed (2: No such file or directory), client: 34.97.217.92, server: www.ellasmithurst.com, request: "GET /mailing/.env HTTP/1.0", host: "www.ellasmithurst.com"
2026/10/23 19:35:22 [error] 1216582#1216582: *34938 open() "/var/www/parked/mailgun/.env" failed (2: No such file or directory), client: 34.97.217.92, server: www.ellasmithurst.com, request: "GET /mailgun/.env HTTP/1.0", host: "www.ellasmithurst.com"
2026
... [host=CER***]
show less
|
Web App Attack
|
|
🇨🇱
34.176.40.192
|
|
2026/10/23 17:44:05 [error] 1216584#1216584: *33141 open() "/var/web/sites/ipcheck/web/frontend/mail ...
show more
2026/10/23 17:44:05 [error] 1216584#1216584: *33141 open() "/var/web/sites/ipcheck/web/frontend/mailer/.env" failed (2: No such file or directory), client: 34.176.40.192, server: ipcheck.smithurst.uk, request: "GET /mailer/.env HTTP/1.0", host: "ipcheck.smithurst.uk"
2026/10/23 17:44:05 [error] 1216584#1216584: *33142 open() "/var/web/sites/ipcheck/web/frontend/mail/.env" failed (2: No such file or directory), client: 34.176.40.192, server: ipcheck.smithurst.uk, request: "GET /mail/.env HTTP/1.0", host: "ipcheck.smithurst.uk"
2026/10/23 17:44:05 [error] 1216583#1216583: *33145 open() "/var/web/sites/ipcheck/web/frontend/mailing/.env" failed (2: No such file or directory), client: 34.176.40.192, server: ipcheck.smithurst.uk, request: "GET /mailing/.env HTTP/1.0", host: "ipcheck.smithurst.uk"
2026/10/23 17:44:07 [error] 1216583#1216583: *33155 open() "/var/web/sites/ipcheck/web/frontend/mailgun/.env" failed (2: No such file or directory), client: 34.176.40.192, server: ipcheck.smithurst.
... [host=CER***]
show less
|
Web App Attack
|
|
🇺🇸
34.53.70.63
|
|
34.53.70.63 - - [23/Oct/2026:15:04:02 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.53.70.63 - ...
show more
34.53.70.63 - - [23/Oct/2026:15:04:02 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.53.70.63 - - [23/Oct/2026:15:04:02 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
34.53.70.63 - - [23/Oct/2026:15:04:02 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.53.70.63 - - [23/Oct/2026:15:04:02 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 150 "-" "-"
34.53.70.63 - - [23/Oct/2026:15:04:03 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇸🇬
34.143.213.99
|
|
34.143.213.99 - - [23/Oct/2026:12:11:35 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ H ...
show more
34.143.213.99 - - [23/Oct/2026:12:11:35 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.143.213.99 - - [23/Oct/2026:12:11:35 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
34.143.213.99 - - [23/Oct/2026:12:11:35 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇸🇬
34.143.213.99
|
|
34.143.213.99 - - [23/Oct/2026:10:48:49 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 ...
show more
34.143.213.99 - - [23/Oct/2026:10:48:49 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
34.143.213.99 - - [23/Oct/2026:10:48:50 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.143.213.99 - - [23/Oct/2026:10:48:50 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.143.213.99 - - [23/Oct/2026:10:48:50 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.143.213.99 - - [23/Oct/2026:10:48:51 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇳🇱
34.12.3.43
|
|
34.12.3.43 - - [23/Oct/2026:08:22:24 +0000] "GET /public/plugins/alertlist/../../../../../../../../p ...
show more
34.12.3.43 - - [23/Oct/2026:08:22:24 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.12.3.43 - - [23/Oct/2026:08:22:24 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.12.3.43 - - [23/Oct/2026:08:22:24 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.12.3.43 - - [23/Oct/2026:08:22:24 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.12.3.43 - - [23/Oct/2026:08:22:28 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇯🇵
35.243.77.133
|
|
35.243.77.133 - - [23/Oct/2026:05:07:29 +0000] "GET /public/plugins/alertlist/../../../../../../../. ...
show more
35.243.77.133 - - [23/Oct/2026:05:07:29 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
35.243.77.133 - - [23/Oct/2026:05:07:29 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
35.243.77.133 - - [23/Oct/2026:05:07:29 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
35.243.77.133 - - [23/Oct/2026:05:07:29 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
35.243.77.133 - - [23/Oct/2026:05:07:29 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇺🇸
136.108.94.124
|
|
136.108.94.124 - - [23/Oct/2026:00:14:08 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ ...
show more
136.108.94.124 - - [23/Oct/2026:00:14:08 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-"
136.108.94.124 - - [23/Oct/2026:00:14:08 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
136.108.94.124 - - [23/Oct/2026:00:14:08 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
136.108.94.124 - - [23/Oct/2026:00:14:08 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
|
Web App Attack
|
|
🇷🇴
193.32.162.206
|
|
2026-10-22 16:06:27 H=(dV6aOwTIk) [193.32.162.206] I=[[TARGET-IPv4]]:25 X=TLS1.2:ECDHE_SECP256R1__EC ...
show more
2026-10-22 16:06:27 H=(dV6aOwTIk) [193.32.162.206] I=[[TARGET-IPv4]]:25 X=TLS1.2:ECDHE_SECP256R1__ECDSA_SHA512__AES_256_GCM:256 CV=no F=<[email protected]> rejected RCPT <REDACTED>: relay not permitted
2026-10-22 16:06:28 SMTP protocol error in "AUTH LOGIN" H=(QoIc7alP) [193.32.162.206] I=[[TARGET-IPv4]]:25 AUTH command used when not advertised
2026-10-22 16:06:28 SMTP protocol error in "AUTH LOGIN" H=(RySU4V) [193.32.162.206] I=[[TARGET-IPv4]]:25 AUTH command used when not advertised
... [host=MEI***]
show less
|
Email Spam
Brute-Force
|