2026-06-10 06:35:32
(2 hours ago)
/.env.swp
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-08 21:59:48
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-07.
show less
Web App Attack
SSH
Hacking
🇩🇪
FeG Deutschland
2026-06-08 15:04:14
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇵🇱
dzpk
2026-06-08 14:28:48
(1 day ago)
[08/Jun/2026:16:26:16 +0200] 178092877684.366052 161.129.174.15 36735 HOST 443 [08/Jun/2026:16:26:29 ...
show more
[08/Jun/2026:16:26:16 +0200] 178092877684.366052 161.129.174.15 36735 HOST 443 [08/Jun/2026:16:26:29 +0200] 178092878921.342486 161.129.174.15 41147 HOST 443 [08/Jun/2026:16:28:47 +0200] 178092892782.608836 161.129.174.15 41609 HOST 443
show less
Web App Attack
2026-06-08 13:39:04
(1 day ago)
Bot / scanning and/or hacking attempts: HEAD /config.php HTTP/1.1, HEAD /wp-config.php HTTP/1.1
Hacking
Web App Attack
🇪🇸
el-brujo
2026-06-08 12:39:44
(1 day ago)
Cloudflare WAF: Request Path: /sftp-config.json Request Query: Host: foro.elhacker.net userAgent: M ...
show more
Cloudflare WAF: Request Path: /sftp-config.json Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (compatible; WhiteWebSecurity/1.0; +https://whitewebsecurity.com; [email protected] ) Action: block Source: firewallManaged ASN Description: The Constant Company, LLC Country: US Method: HEAD Timestamp: 2026-06-08T12:39:44Z ruleId: c2a2f414a67c409f90cccb6c5bba0215. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇫🇷
Donovan
2026-06-08 12:18:42
(1 day ago)
Web scan/exploit blocked by fail2ban on commitshift.fr - jail: npm-scan - 1 attempt(s)
Web App Attack
🇫🇷
bazter.pro
2026-06-08 12:07:16
(1 day ago)
Auto-Ban [2026-06-08 15:07:07]: CRITICAL: Exploit trap paths (4); DC: OCULUS NETWORKS INC [Paths: 25 ...
show more
Auto-Ban [2026-06-08 15:07:07]: CRITICAL: Exploit trap paths (4); DC: OCULUS NETWORKS INC [Paths: 25] | Details: Exploit trap paths: /db.sql, /.git/index, /database.sql, /.aws/credentials | Sensitive files/paths: /db.sql, /.yarnrc.yml, /.travis.yml, /app/etc/env.php.swp, /.wp-config.php.swp | 404 errors (26): /db.php.swp, /config/database.php, /config.yaml.swp, /database.sql, /config.yml.swp, /.travis.yml, /admin/config.php, /kubernetes.yaml, /connect.php.swp, /firebase.json (and 14 more) | Other paths: /application-prod.properties
show less
Web App Attack
Hacking
🇫🇷
Coco Bongo
2026-06-08 11:50:50
(1 day ago)
161.129.174.15 [redacted].contaboserver.net (20473-AS-VULTR United States -) - - [08/Jun/2026:13:48: ...
show more
161.129.174.15 [redacted].contaboserver.net (20473-AS-VULTR United States -) - - [08/Jun/2026:13:48:54 +0200] "HEAD /.git/index HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; WhiteWebSecurity/1.0; +http
...
show less
Bad Web Bot
Web App Attack
🇫🇷
LoneRider
2026-06-08 11:35:30
(1 day ago)
[08/Jun/2026:13:35:03.351331 +0200] aiao56wA69BlqZ3GnKB42AAAAAo 161.129.174.15 40604 127.0.0.1 7081
...
show more
[08/Jun/2026:13:35:03.351331 +0200] aiao56wA69BlqZ3GnKB42AAAAAo 161.129.174.15 40604 127.0.0.1 7081
[08/Jun/2026:13:35:08.341029 +0200] aiao7H54jGBQAXdzgcfxywAAAAg 161.129.174.15 40636 127.0.0.1 7081
[08/Jun/2026:13:35:30.418661 +0200] aiapAq6Z4HqZ_Xoc5LNUXAAAAAE 161.129.174.15 42912 127.0.0.1 7081
...
show less
Hacking
🇬🇧
ISPLtd
2026-06-08 11:17:10
(1 day ago)
161.129.174.15 [08/Jun/2026:08:17:00 -0300] claire.target.domain:80 URL:/.env "HEAD /.env
161.129.17 ...
show more
161.129.174.15 [08/Jun/2026:08:17:00 -0300] claire.target.domain:80 URL:/.env "HEAD /.env
161.129.174.15 [08/Jun/2026:08:17:09 -0300] claire.target.domain:443 URL:/wp-config.php.swp "HEAD /wp-config.php.swp
...
show less
Hacking
Web App Attack
🇫🇷
mrcrassi
2026-06-08 11:15:55
(1 day ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD met ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD method)
Endpoint: /wordpress/wp-config.php
UA: Mozilla/5.0 (compatible; WhiteWebSecurity/1.0; +https://whitewebsecurity.com; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇮
as211431.net
2026-06-08 10:59:21
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD method)
Endpoint: /.travis.yml
UA: Mozilla/5.0 (compatible; WhiteWebSecurity/1.0; +https://whitewebsecurity.com; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
omartin
2026-06-08 10:48:57
(1 day ago)
Critical Vulnerability Scan detected
Hacking
Brute-Force
Exploited Host
Web App Attack
🇫🇷
vtchost.com
2026-06-08 10:46:13
(1 day ago)
vtchost.com:443 161.129.174.15 - - [08/Jun/2026:12:46:12 +0200] "HEAD /.env HTTP/1.1" 418 2711 "-" " ...
show more
vtchost.com:443 161.129.174.15 - - [08/Jun/2026:12:46:12 +0200] "HEAD /.env HTTP/1.1" 418 2711 "-" "Mozilla/5.0 (compatible; WhiteWebSecurity/1.0; +https://whitewebsecurity.com; [email protected] )"
...
show less
Web App Attack