🇩🇪
ger-stg-sifi1
2026-11-11 22:19:37
UTC ·
(2 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-11-11 11:47:11
UTC ·
(12 hours ago)
104.28.157.65 - - [11/Nov/2026:11:47:09 +0000] "GET /.env.dev HTTP/1.1" 301 17 "-" "-" 197902 "http-catchall@file" "-" 0ms
104.28.157.65 - - [11/Nov/2026:11:47:10 +0000] "GET /.env.development.local HTTP/1.1" 301 17 "-" "-" 197907 "http-catchall@file ...
show more
104.28.157.65 - - [11/Nov/2026:11:47:09 +0000] "GET /.env.dev HTTP/1.1" 301 17 "-" "-" 197902 "http-catchall@file" "-" 0ms
104.28.157.65 - - [11/Nov/2026:11:47:10 +0000] "GET /.env.development.local HTTP/1.1" 301 17 "-" "-" 197907 "http-catchall@file" "-" 0ms
...
show less
Web App Attack
🇨🇦
zXero
2026-11-11 11:26:23
UTC ·
(13 hours ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇩🇪
FeG Deutschland
2026-11-11 11:24:43
UTC ·
(13 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇳🇱
Alt255
2026-11-11 11:20:14
UTC ·
(13 hours ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.157.65 - - [11/Nov/2026:12:20:07 +0100] "GET /.env.production HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.157.65 - - [11/Nov/2026:12:20:07 +0100] "GET /.env.production HTTP/1.1" 403 5969 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇮🇹
sssrit
2026-11-11 03:08:02
UTC ·
(21 hours ago)
104.28.157.65 - - [11/Nov/2026:04:08:01 +0100] "GET /.env.php HTTP/1.1" 404 142 "https://www.google.com/search?q=fantacalciobazar.sssr.it" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile S ...
show more
104.28.157.65 - - [11/Nov/2026:04:08:01 +0100] "GET /.env.php HTTP/1.1" 404 142 "https://www.google.com/search?q=fantacalciobazar.sssr.it" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
...
show less
Web App Attack
🇺🇸
PlexLads
2026-11-10 21:40:07
UTC ·
(1 day ago)
104.28.157.65 - - [10/Nov/2026:13:40:02 -0800] "GET /.env.production HTTP/1.1" 403 12574 "https://www.tidafoods.com/.env.production" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/ ...
show more
104.28.157.65 - - [10/Nov/2026:13:40:02 -0800] "GET /.env.production HTTP/1.1" 403 12574 "https://www.tidafoods.com/.env.production" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36" 104.28.157.65 - - [10/Nov/2026:13:40:02 -0800] "GET /.env.production HTTP/1.1" 403 12574 "https://www.tidafoods.com/.env.production" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
show less
Hacking
Web App Attack
Anonymous
2026-11-10 18:04:00
UTC ·
(1 day ago)
104.28.157.65 - - [10/Nov/2026:18:03:59 +0000] "GET /.git/config HTTP/1.1" 404 5183 "https://www.google.com/search?q=ashleybutcher.org" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show more
104.28.157.65 - - [10/Nov/2026:18:03:59 +0000] "GET /.git/config HTTP/1.1" 404 5183 "https://www.google.com/search?q=ashleybutcher.org" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
AvonleaConsulting
2026-11-10 17:06:51
UTC ·
(1 day ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-11-10 16:55:03
UTC ·
(1 day ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇺🇸
Rip
2026-11-10 16:13:02
UTC ·
(1 day ago)
Restricted File Access Attempts
Port Scan
Web App Attack
🇩🇪
pltcldvlpr
2026-11-10 15:01:27
UTC ·
(1 day ago)
CMS/framework probe: 104.28.157.65 - - [10/Nov/2026:16:01:27 +0100] "GET /.env.dev HTTP/1.1" 401 188 "https://www.google.com/search?q=munin.netznarbe.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/1 ...
show more
CMS/framework probe: 104.28.157.65 - - [10/Nov/2026:16:01:27 +0100] "GET /.env.dev HTTP/1.1" 401 188 "https://www.google.com/search?q=munin.netznarbe.de" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" asn=13335 org="Cloudflare, Inc." country=KR
...
show less
Web App Attack
🇩🇪
neckaralb-admin.de
2026-11-10 14:43:29
UTC ·
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-11-10 14:21:05
UTC ·
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
ger-stg-sifi1
2026-11-10 14:02:27
UTC ·
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack