๐ฉ๐ช
BlueWire Hosting
2026-06-29 18:18:24
(2 hours ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
๐บ๐ธ
CounterScrape
2026-06-29 17:01:04
(3 hours ago)
CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ...
show more
CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 8. Bandwidth drained: 0.0 MB.
show less
Bad Web Bot
Port Scan
๐ง๐ช
voormedia
2026-06-29 08:59:44
(11 hours ago)
Accessed trap at '/.git/HEAD'
Web App Attack
๐ซ๐ท
dwmp
2026-06-29 07:10:22
(13 hours ago)
Url probing: /entrance
Web App Attack
๐ซ๐ท
masterguru
2026-06-29 05:00:18
(15 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐ฎ๐น
zenmorro
2026-06-28 20:15:13
(1 day ago)
Honeypot hit (proxmox:8006) โ scanner-path: /.env. Automated report from honeypot infrastructure
Port Scan
Web App Attack
๐จ๐ญ
4server
2026-06-28 19:56:44
(1 day ago)
[SunJun2821:56:40.7699392026][security2:error][pid3310256:tid3310268][client162.141.167.13:0]ModSecu ...
show more
[SunJun2821:56:40.7699392026][security2:error][pid3310256:tid3310268][client162.141.167.13:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"hosting-domain-swiss.com\"][uri\"/.git/config\"][unique_id\"akF8eGa6XvIG06x8tS8KNAAAAAo\"]
show less
Hacking
Web App Attack
๐บ๐ธ
CounterScrape
2026-06-28 16:01:25
(1 day ago)
CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ...
show more
CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 8. Bandwidth drained: 0.0 MB.
show less
Bad Web Bot
Port Scan
๐ซ๐ฎ
as211431.net
2026-06-28 15:54:37
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET metho ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (GET method)
Endpoint: /.aws/credentials
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐บ๐ธ
alecj.com
2026-06-28 15:09:05
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
Anonymous
2026-06-28 14:51:14
(1 day ago)
162.141.167.13 - - [28/Jun/2026:16:51:07 +0200] "GET /.git/HEAD HTTP/1.1" 404 715845 "-" "Mozilla/5. ...
show more
162.141.167.13 - - [28/Jun/2026:16:51:07 +0200] "GET /.git/HEAD HTTP/1.1" 404 715845 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"
162.141.167.13 - - [28/Jun/2026:16:51:09 +0200] "GET /.git/HEAD HTTP/1.1" 404 459380 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"
162.141.167.13 - - [28/Jun/2026:16:51:07 +0200] "GET /.env HTTP/1.1" 404 715814 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"
162.141.167.13 - - [28/Jun/2026:16:51:09 +0200] "GET /.env HTTP/1.1" 404 459257 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"
162.141.167.13 - - [28/Jun/2026:16:51:10 +0200] "GET /backend/.env HTTP/1.1" 404 715863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-06-28 13:43:32
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-06-28 13:33:41
(1 day ago)
162.141.167.13 - - [28/Jun/2026:16:33:39 +0300] "GET /.env HTTP/1.1" 404 735 "-" "Mozilla/5.0 (Macin ...
show more
162.141.167.13 - - [28/Jun/2026:16:33:39 +0300] "GET /.env HTTP/1.1" 404 735 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"
162.141.167.13 - - [28/Jun/2026:16:33:40 +0300] "GET /api/.env HTTP/1.1" 404 3359 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-06-28 12:30:03
(1 day ago)
CrowdSec decision: crowdsecurity/http-sensitive-files (origin: crowdsec)
Web App Attack
๐ฆ๐บ
aranguren.org
2026-06-28 12:06:14
(1 day ago)
162.141.167.13 - - [28/Jun/2026:22:06:12 +1000] "GET /.git/HEAD HTTP/1.1" 404 997 "-" "Mozilla/5.0 ( ...
show more
162.141.167.13 - - [28/Jun/2026:22:06:12 +1000] "GET /.git/HEAD HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"
162.141.167.13 - - [28/Jun/2026:22:06:13 +1000] "GET /.env HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0"
162.141.167.13 - - [28/Jun/2026:22:06:14 +1000] "GET /.env.local HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0"
162.141.167.13 - - [28/Jun/2026:22:06:14 +1000] "GET /.env.production HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0"
162.141.167.13 - - [28/Jun/2026:22:06:14 +1000] "GET /.env.development HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/146.0.3856.109"
162.141.167.13 - - [28/Jun/2026:22:06:14 +1000] "GET /bac
...
show less
Bad Web Bot