๐จ๐ญ
TheCoon
2026-10-24 16:31:40
(3 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐จ๐ญ
TheCoon
2026-10-23 06:36:42
(4 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐จ๐ญ
TheCoon
2026-10-21 06:58:31
(6 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
Anonymous
2026-10-15 14:36:36
(1 week ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.sigasigacollective.com; logs=/var/log/httpd/domains/siga ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.sigasigacollective.com; logs=/var/log/httpd/domains/sigasigacollective.com.log; samples=/.env | /.env.local | /.env.production
show less
Hacking
Web App Attack
๐ฌ๐ง
consul.to
2026-10-15 09:23:07
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
robotstxt
2026-10-15 02:16:55
(1 week ago)
34.81.53.46 - - [15/Oct/2026:02:15:55 +0000] "GET /.env HTTP/1.1" 403 0 "-" "Mozilla/5.0 (X11; Linux ...
show more
34.81.53.46 - - [15/Oct/2026:02:15:55 +0000] "GET /.env HTTP/1.1" 403 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="34.81.53.46"
34.81.53.46 - - [15/Oct/2026:02:15:58 +0000] "GET /.env HTTP/1.1" 403 5 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="34.81.53.46"
34.81.53.46 - - [15/Oct/2026:02:16:00 +0000] "GET /.env HTTP/1.1" 403 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.81.53.46"
34.81.53.46 - - [15/Oct/2026:02:16:03 +0000] "GET /.env.local HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" "-" edge="34.81.53.46"
34.81.53.46 - - [15/Oct/2026:02:16:07 +0000] "GET /.env.local HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
...
show less
Web App Attack
๐ฉ๐ช
Hans Wurst
2026-10-14 23:41:36
(1 week ago)
Many 404-Error: Suspicion of URL-Fuzzing/Bot-Scan.
Web App Attack
๐ซ๐ท
j-tap
2026-10-14 08:08:17
(1 week ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
๐ฌ๐ง
consul.to
2026-10-14 03:31:22
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-10-14 01:53:19
(1 week ago)
34.81.53.46 - - [14/Oct/2026:01:53:19 +0000] "GET /.env HTTP/1.1" 302 572 "-" "Mozilla/5.0 (Windows ...
show more
34.81.53.46 - - [14/Oct/2026:01:53:19 +0000] "GET /.env HTTP/1.1" 302 572 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ฎ
as211431.net
2026-10-14 00:15:48
(1 week ago)
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.zsh_history
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
wpadm4
2026-10-13 15:54:31
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-10-13 12:14:44
(2 weeks ago)
host=- server=- ip=34.81.53.46 method=GET req=/.env uri=/unknown-host.html status=404 bytes=2592 rt= ...
show more
host=- server=- ip=34.81.53.46 method=GET req=/.env uri=/unknown-host.html status=404 bytes=2592 rt=0.001 urt=- lr=- ref="-" ua="Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
show less
Web App Attack
Bad Web Bot
๐บ๐ฆ
URAN Publishing Service
2026-10-13 10:21:16
(2 weeks ago)
[13/Oct/2026:07:53:54 +0300] -- 34.81.53.46 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.e ...
show more
[13/Oct/2026:07:53:54 +0300] -- 34.81.53.46 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /.env HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-13 10:18:02
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: telemetry.budyn.ovh | URI: /.env | UA: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack