Anonymous
2026-09-25 03:54:04
(1 day ago)
Reported from Nginx log analysis 19. Log: 158.94.210.223 - - [25/Sep/2026:xx:xx:xx 0200] "GET /wp-j ...
show more
Reported from Nginx log analysis 19. Log: 158.94.210.223 - - [25/Sep/2026:xx:xx:xx 0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "-" "NL The Netherlands Amsterdam" "AS202412" "Omegatech LTD" | 158.94.210.223 - - [25/Sep/2026:xx:xx:xx 0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "-" "NL The Netherlands Amsterdam" "AS202412" "Omegatech LTD"
show less
Port Scan
Brute-Force
SSH
๐ช๐ธ
robotstxt
2026-09-24 23:41:57
(1 day ago)
158.94.210.223 - - [24/Sep/2026:23:41:08 +0000] "GET /?vcv-template-type=vc&vcv-template=../../../.. ...
show more
158.94.210.223 - - [24/Sep/2026:23:41:08 +0000] "GET /?vcv-template-type=vc&vcv-template=../../../../../../.env HTTP/2.0" 403 2 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="172.69.9.142"
158.94.210.223 - - [24/Sep/2026:23:41:14 +0000] "GET /wp-content/plugins/visualcomposer/readme.txt HTTP/2.0" 403 33638 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="172.70.216.48"
158.94.210.223 - - [24/Sep/2026:23:41:24 +0000] "GET /.env HTTP/2.0" 403 33597 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="172.70.216.48"
158.94.210.223 - - [24/Sep/2026:23:41:26 +0000] "GET /.env.bak HTTP/2.0" 403 33615 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="172.70.216.48"
158.94.210.223 - - [24/Sep/2026:23:41:28 +0000] "GET /.env.local HTTP/2.0" 403 33700 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="162.158.129.101"
...
show less
Web App Attack
๐ง๐ท
radardatelecom
2026-09-24 22:25:43
(1 day ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-09-24 21:36:37
(1 day ago)
158.94.210.223 - - [24/Sep/2026:21:35:47 +0000] "GET /.env?import&raw HTTP/2.0" 403 33606 "-" "Mozil ...
show more
158.94.210.223 - - [24/Sep/2026:21:35:47 +0000] "GET /.env?import&raw HTTP/2.0" 403 33606 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="162.158.129.101"
158.94.210.223 - - [24/Sep/2026:21:35:48 +0000] "GET /.env.local?raw HTTP/2.0" 403 33679 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="172.71.114.188"
158.94.210.223 - - [24/Sep/2026:21:35:50 +0000] "GET /.env.production?raw HTTP/2.0" 403 33629 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="172.70.216.48"
158.94.210.223 - - [24/Sep/2026:21:35:52 +0000] "GET /app/etc/env.php?import&raw HTTP/2.0" 403 33612 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="172.70.216.48"
158.94.210.223 - - [24/Sep/2026:21:35:55 +0000] "GET /.aws/credentials?raw HTTP/2.0" 403 33602 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36" "158.94.210.223" edge="172.69.9.142"
...
show less
Web App Attack
๐ซ๐ท
sthoyer.de
2026-09-24 21:05:10
(1 day ago)
158.94.210.223 - - [24/Sep/2026:23:05:08 +0200] "GET /wp-content/plugins/divi-form-builder/readme.tx ...
show more
158.94.210.223 - - [24/Sep/2026:23:05:08 +0200] "GET /wp-content/plugins/divi-form-builder/readme.txt HTTP/1.1" 302 794 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
158.94.210.223 - - [24/Sep/2026:23:05:08 +0200] "GET /wp-content/plugins/divi-form-builder/readme.txt HTTP/1.1" 302 794 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
158.94.210.223 - - [24/Sep/2026:23:05:08 +0200] "GET /wp-content/plugins/divi-form-builder/readme.txt HTTP/1.1" 302 794 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
...
show less
Web App Attack
Anonymous
2026-09-24 19:40:57
(1 day ago)
$f2bV_matches
Brute-Force
Web App Attack
๐ซ๐ท
sthoyer.de
2026-09-24 19:11:55
(1 day ago)
158.94.210.223 - - [24/Sep/2026:21:11:54 +0200] "GET /wp-content/plugins/divi-form-builder/readme.tx ...
show more
158.94.210.223 - - [24/Sep/2026:21:11:54 +0200] "GET /wp-content/plugins/divi-form-builder/readme.txt HTTP/1.1" 302 794 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
158.94.210.223 - - [24/Sep/2026:21:11:54 +0200] "GET /wp-content/plugins/divi-form-builder/readme.txt HTTP/1.1" 302 794 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
158.94.210.223 - - [24/Sep/2026:21:11:54 +0200] "GET /wp-content/plugins/divi-form-builder/readme.txt HTTP/1.1" 302 794 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
...
show less
Web App Attack
๐ฉ๐ช
langenkamp-media
2026-09-24 19:05:48
(1 day ago)
Fail2Ban: Banned from jail nginx-nohome on 3dausdu.de
Web App Attack
๐ฉ๐ช
findlab
2026-09-24 19:00:02
(1 day ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-24 18:54:07
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
Lee Daniel
2026-09-24 18:43:47
(1 day ago)
158.94.210.223 - - [24/Sep/2026:14:43:46 -0400] "GET /wp-config.php HTTP/1.1" 404 5701 "-" "Mozilla/ ...
show more
158.94.210.223 - - [24/Sep/2026:14:43:46 -0400] "GET /wp-config.php HTTP/1.1" 404 5701 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฑ
spd.co.il
2026-09-24 12:02:17
(2 days ago)
Web application attack detected
Hacking
Web App Attack
๐ฑ๐น
Selckie
2026-09-23 18:11:48
(2 days ago)
fail2ban: NGINX unusual impact
Web App Attack
Anonymous
2026-09-23 18:05:44
(2 days ago)
Unauthorized access (443/tcp/https)
Port Scan
Web App Attack
๐บ๐ธ
Tman111
2026-09-23 16:47:28
(2 days ago)
Unsolicited connection attempt to web ports (80/443). No service is offered to direct-to-IP traffic; ...
show more
Unsolicited connection attempt to web ports (80/443). No service is offered to direct-to-IP traffic; connection dropped. Scanner/bot behavior.
show less
Port Scan