2026-10-02T11:27:09.485783+02:00 irc.chewbakka.ch sshd[4097160]: Invalid user amalia from 20.77.26.9 ...
show more2026-10-02T11:27:09.485783+02:00 irc.chewbakka.ch sshd[4097160]: Invalid user amalia from 20.77.26.9 port 38556
2026-10-02T11:34:55.696427+02:00 irc.chewbakka.ch sshd[4098473]: Invalid user ahmed from 20.77.26.9 port 42182
...
show less
2026-10-02T10:12:32.399384+02:00 irc.chewbakka.ch sshd[4053214]: Invalid user chenye from 167.71.211 ...
show more2026-10-02T10:12:32.399384+02:00 irc.chewbakka.ch sshd[4053214]: Invalid user chenye from 167.71.211.40 port 49542
2026-10-02T10:17:13.875582+02:00 irc.chewbakka.ch sshd[4057924]: Invalid user test from 167.71.211.40 port 53504
...
show less
2026-10-02T09:31:37.191037+02:00 irc.chewbakka.ch sshd[4042137]: Invalid user dbadmin from 123.25.11 ...
show more2026-10-02T09:31:37.191037+02:00 irc.chewbakka.ch sshd[4042137]: Invalid user dbadmin from 123.25.115.112 port 58260
2026-10-02T09:48:51.420862+02:00 irc.chewbakka.ch sshd[4049094]: Invalid user mt from 123.25.115.112 port 48332
...
show less
2026-10-02T09:38:47.031820+02:00 irc.chewbakka.ch sshd[4043359]: Invalid user life from 81.70.55.207 ...
show more2026-10-02T09:38:47.031820+02:00 irc.chewbakka.ch sshd[4043359]: Invalid user life from 81.70.55.207 port 61158
2026-10-02T09:48:08.600954+02:00 irc.chewbakka.ch sshd[4048950]: Invalid user dspace from 81.70.55.207 port 44800
...
show less
2026-10-02T09:41:32.948465+02:00 irc.chewbakka.ch sshd[4043952]: Invalid user dspace from 123.25.115 ...
show more2026-10-02T09:41:32.948465+02:00 irc.chewbakka.ch sshd[4043952]: Invalid user dspace from 123.25.115.189 port 60170
2026-10-02T09:45:12.878996+02:00 irc.chewbakka.ch sshd[4044593]: Invalid user ubuntu from 123.25.115.189 port 37800
...
show less
2026-10-02T09:38:47.865624+02:00 irc.chewbakka.ch sshd[4043378]: Invalid user safeuser from 191.96.1 ...
show more2026-10-02T09:38:47.865624+02:00 irc.chewbakka.ch sshd[4043378]: Invalid user safeuser from 191.96.110.97 port 52018
2026-10-02T09:41:54.766032+02:00 irc.chewbakka.ch sshd[4043996]: Invalid user ais from 191.96.110.97 port 52274
...
show less
2026-10-02T09:35:00.584145+02:00 irc.chewbakka.ch sshd[4042732]: Invalid user testuser from 157.230. ...
show more2026-10-02T09:35:00.584145+02:00 irc.chewbakka.ch sshd[4042732]: Invalid user testuser from 157.230.218.106 port 47850
2026-10-02T09:40:38.803876+02:00 irc.chewbakka.ch sshd[4043806]: Invalid user dbadmin from 157.230.218.106 port 40332
...
show less
2026-10-02T09:05:34.683949+02:00 irc.chewbakka.ch sshd[3920876]: Invalid user usman from 180.76.102. ...
show more2026-10-02T09:05:34.683949+02:00 irc.chewbakka.ch sshd[3920876]: Invalid user usman from 180.76.102.156 port 37308
2026-10-02T09:27:24.267592+02:00 irc.chewbakka.ch sshd[3924859]: Invalid user debian from 180.76.102.156 port 46544
...
show less
2026-10-02T08:51:01.522069+02:00 irc.chewbakka.ch sshd[3917744]: Invalid user tianyu from 125.162.16 ...
show more2026-10-02T08:51:01.522069+02:00 irc.chewbakka.ch sshd[3917744]: Invalid user tianyu from 125.162.165.233 port 32990
2026-10-02T08:52:39.042520+02:00 irc.chewbakka.ch sshd[3918010]: Invalid user taibabi from 125.162.165.233 port 53606
...
show less
2026-10-02T08:05:40.031525+02:00 irc.chewbakka.ch sshd[3898051]: Invalid user joy from 103.216.170.1 ...
show more2026-10-02T08:05:40.031525+02:00 irc.chewbakka.ch sshd[3898051]: Invalid user joy from 103.216.170.141 port 39358
2026-10-02T08:07:25.400857+02:00 irc.chewbakka.ch sshd[3898336]: Invalid user azureuser from 103.216.170.141 port 36402
...
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-2021-41773
alert_id: 9443
events: 1
creat ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-2021-41773
alert_id: 9443
events: 1
created_at: 2026-10-02T05:14:37Z
message: Ip 34.81.221.156 performed 'crowdsecurity/http-cve-2021-41773' (1 events over 0s) at 2026-10-02 05:14:36.960914787 +0000 UTC
target_uri: ["/cache/original/%2e%2e/%2e%2e/.env"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"]
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-probing
alert_id: 9433
events: 1
created_ ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-probing
alert_id: 9433
events: 1
created_at: 2026-10-02T04:47:24Z
message: Ip 170.64.220.163 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-10-02 04:47:24.168588013 +0000 UTC
target_uri: ["/wp-json/batch/v1"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"]
show less
2026-10-02T06:04:28.455222+02:00 irc.chewbakka.ch sshd[3811819]: Invalid user minecraft from 165.231 ...
show more2026-10-02T06:04:28.455222+02:00 irc.chewbakka.ch sshd[3811819]: Invalid user minecraft from 165.231.143.109 port 34198
2026-10-02T06:05:51.554480+02:00 irc.chewbakka.ch sshd[3812072]: Invalid user dev from 165.231.143.109 port 45834
...
show less
2026-10-02T05:57:46.933180+02:00 irc.chewbakka.ch sshd[3810640]: Invalid user ben from 43.157.200.91 ...
show more2026-10-02T05:57:46.933180+02:00 irc.chewbakka.ch sshd[3810640]: Invalid user ben from 43.157.200.91 port 36244
2026-10-02T06:04:32.071108+02:00 irc.chewbakka.ch sshd[3811825]: Invalid user red from 43.157.200.91 port 43122
...
show less
2026-10-02T06:01:29.784566+02:00 irc.chewbakka.ch sshd[3811298]: Invalid user master from 129.121.78 ...
show more2026-10-02T06:01:29.784566+02:00 irc.chewbakka.ch sshd[3811298]: Invalid user master from 129.121.78.234 port 36642
2026-10-02T06:04:30.426762+02:00 irc.chewbakka.ch sshd[3811822]: Invalid user tester from 129.121.78.234 port 54628
...
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 9428
events: 11
created_at: ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-probing
alert_id: 9428
events: 11
created_at: 2026-10-02T02:22:14Z
message: Ip 34.81.90.137 performed 'crowdsecurity/http-probing' (11 events over 8.388185026s) at 2026-10-02 02:22:14.584058774 +0000 UTC
target_uri: ["/.env","/.env.local","/.env.development","/.env.production","/.env.staging","/.env.prod","/.env.backup","/.env.bak","/.env.old","/.env.save","/.env.orig"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0","Mozilla/5.0 (Windows NT 10.0; Wi
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-2021-42013
alert_id: 9424
events: 1
creat ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-2021-42013
alert_id: 9424
events: 1
created_at: 2026-10-02T01:47:06Z
message: Ip 167.71.233.141 performed 'crowdsecurity/http-cve-2021-42013' (1 events over 0s) at 2026-10-02 01:47:06.13569316 +0000 UTC
target_uri: ["/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"]
method: ["POST"]
status: ["400"]
user_agent: ["libredtail-http"]
show less
2026-10-01T22:47:59.823059+02:00 irc.chewbakka.ch sshd[3680315]: Invalid user vishnu from 43.130.1.4 ...
show more2026-10-01T22:47:59.823059+02:00 irc.chewbakka.ch sshd[3680315]: Invalid user vishnu from 43.130.1.43 port 57346
2026-10-01T22:49:23.285558+02:00 irc.chewbakka.ch sshd[3680548]: Invalid user system from 43.130.1.43 port 60102
...
show less
2026-10-01T22:34:35.705465+02:00 irc.chewbakka.ch sshd[3677841]: Invalid user ruslan from 94.61.235. ...
show more2026-10-01T22:34:35.705465+02:00 irc.chewbakka.ch sshd[3677841]: Invalid user ruslan from 94.61.235.86 port 60584
2026-10-01T22:41:30.831034+02:00 irc.chewbakka.ch sshd[3679091]: Invalid user nikola from 94.61.235.86 port 45738
...
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-probing
alert_id: 9390
events: 1
created_ ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-probing
alert_id: 9390
events: 1
created_at: 2026-10-01T17:08:18Z
message: Ip 20.46.234.109 performed 'crowdsecurity/http-cve-probing' (1 events over 0s) at 2026-10-01 17:08:18.556932091 +0000 UTC
target_uri: ["/developmentserver/metadatauploader"]
method: ["GET"]
status: ["404"]
user_agent: ["Mozilla/5.0 zgrab/0.x"]
show less
2026-10-01T18:56:33.386537+02:00 irc.chewbakka.ch sshd[3547918]: error: maximum authentication attem ...
show more2026-10-01T18:56:33.386537+02:00 irc.chewbakka.ch sshd[3547918]: error: maximum authentication attempts exceeded for root from 201.142.255.3 port 34062 ssh2 [preauth]
2026-10-01T18:56:40.669146+02:00 irc.chewbakka.ch sshd[3547931]: error: maximum authentication attempts exceeded for root from 201.142.255.3 port 34346 ssh2 [preauth]
...
show less
2026-10-01T18:51:31.321051+02:00 irc.chewbakka.ch sshd[3547043]: Invalid user postgres from 213.230. ...
show more2026-10-01T18:51:31.321051+02:00 irc.chewbakka.ch sshd[3547043]: Invalid user postgres from 213.230.109.201 port 56774
2026-10-01T18:51:35.459656+02:00 irc.chewbakka.ch sshd[3547047]: Invalid user user from 213.230.109.201 port 56790
...
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-2021-42013
alert_id: 9388
events: 1
creat ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-cve-2021-42013
alert_id: 9388
events: 1
created_at: 2026-10-01T16:43:18Z
message: Ip 168.228.151.152 performed 'crowdsecurity/http-cve-2021-42013' (1 events over 0s) at 2026-10-01 16:43:18.049444976 +0000 UTC
target_uri: ["/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"]
method: ["POST"]
status: ["400"]
user_agent: ["libredtail-http"]
show less
CrowdSec local HTTP alert
scenario: crowdsecurity/http-open-proxy
alert_id: 9366
events: 1
created_a ...
show moreCrowdSec local HTTP alert
scenario: crowdsecurity/http-open-proxy
alert_id: 9366
events: 1
created_at: 2026-10-01T16:15:14Z
message: Ip 149.56.31.99 performed 'crowdsecurity/http-open-proxy' (1 events over 0s) at 2026-10-01 16:15:14.900169608 +0000 UTC
target_uri: ["chekfast.zennolab.com:443"]
method: ["CONNECT"]
status: ["405"]
user_agent: ["-"]
show less
Bad Web BotWeb App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.