IP Address: 102.220.163.241

Automated web attack: 191 reqs, 73 paths probed, 136 returned 404; probed: 21 .env, 15 .php, 14 other, 9 .json, 9 config, 4 cloud-cred, 1 .git

Automated web attack: 514 reqs, 270 paths probed, 476 returned 404; probed: 200 .env, 22 .php, 14 backup, 13 other, 7 .json, 3 config, 2 .git, 2 .sql, 2 .yml, 1 .jsp, 1 .xml, 1 log, 1 script, 1 ssh-key

Automated web attack: 529 reqs, 271 paths probed, 481 returned 404; probed: 202 .env, 28 .php, 14 backup, 8 other, 6 .json, 3 config, 2 .git, 2 .sql, 2 .yml, 1 .xml, 1 log, 1 script, 1 ssh-key

Automated web attack: 1139 reqs, 286 paths probed, 1033 returned 404; probed: 166 .env, 39 .php, 19 other, 16 .json, 8 backup, 7 .yml, 6 .git, 6 config, 5 cloud-cred, 3 .sql, 3 .xml, 3 log, 2 secret, 2 ssh-key, 1 script

Elasticsearch (TCP/9200): 21 connections | Redis (TCP/6379): 36 commands | Automated web attack: 7753 reqs, 270 paths probed, 1573 returned 404; probed: 200 .env, 22 .php, 14 backup, 13 other, 7 .json, 3 config, 2 .git, 2 .sql, 2 .yml, 1 .jsp, 1 .xml, 1 log, 1 script, 1 ssh-key

Automated web attack: 27 reqs, 26 paths probed, 20 returned 404; probed: 12 .env, 11 .php, 1 .yml, 1 config, 1 script

[probe-44-49] 2026-10-30 01:25:43, Client: 102.220.163.241, Protocol: 6, Unauthorized activity to HTTP: GET /

fail2ban

fail2ban

[probe-44-49] 2026-10-29 04:33:54, Client: 102.220.163.241, Protocol: 6, Unauthorized activity to HTTP: GET /

Automated web attack: 514 reqs, 270 paths probed, 476 returned 404; probed: 200 .env, 22 .php, 14 backup, 13 other, 7 .json, 3 config, 2 .git, 2 .sql, 2 .yml, 1 .jsp, 1 .xml, 1 log, 1 script, 1 ssh-key

[rede-188] 2026-10-28 16:48:15, Client: 102.220.163.241, Protocol: 6, Unauthorized activity to HTTP: GET /

[probe-168-134] 2026-10-28 15:57:32, Client: 102.220.163.241, Protocol: 6, Unauthorized activity to HTTP: GET /

Automated web attack: 1028 reqs, 270 paths probed, 952 returned 404; probed: 200 .env, 22 .php, 14 backup, 13 other, 7 .json, 3 config, 2 .git, 2 .sql, 2 .yml, 1 .jsp, 1 .xml, 1 log, 1 script, 1 ssh-key

fail2ban GET /.git/ (config|HEAD|credentials|index|COMMIT_EDITMSG) (Scan /.git/)

Automated web attack: 2 reqs, 2 paths probed, 1 returned 404; probed: 1 .env, 1 .git

[probe-44-49] 2026-10-27 00:05:42, Client: 102.220.163.241, Protocol: 6, Unauthorized activity to HTTP: GET /.git/config

ipban 1.9.0

[rede-188] 2026-10-26 17:09:18, Client: 102.220.163.241, Protocol: 6, Unauthorized activity to HTTP: GET /.env

[arem1] 2026-10-26 17:12:17, Client: 102.220.163.241, Protocol: 6, Unauthorized activity to HTTP: GET /.env

ipban 3.1.0 - 5152

ipban 2.0.0 - 5152