🇺🇸
TAY
2026-09-04 07:45:35
(3 hours ago)
169.40.142.134 - - [04/Sep/2026:15:42:33 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6229 "-" "Mozi ...
show more
169.40.142.134 - - [04/Sep/2026:15:42:33 +0800] "GET /wp-config.php.bak HTTP/1.1" 301 6229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:15:42:52 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 54884 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:15:44:00 +0800] "GET /wp-config.php.save HTTP/1.1" 301 6230 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:15:44:33 +0800] "GET /wp-config.php.save HTTP/1.1" 404 54907 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:15:44:59 +0800] "GET /wp-config.php.old HTTP/1.1" 301 6229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH
...
show less
Brute-Force
🇪🇸
Serpes
2026-09-04 07:03:36
(3 hours ago)
Suspicious activity detected
Web App Attack
DDoS Attack
Hacking
🇺🇸
TAY
2026-09-04 06:24:00
(4 hours ago)
169.40.142.134 - - [04/Sep/2026:14:21:38 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 72516 "-" "Moz ...
show more
169.40.142.134 - - [04/Sep/2026:14:21:38 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 72516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:14:22:06 +0800] "GET /wp-config.php~ HTTP/1.1" 404 72516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:14:23:11 +0800] "GET /wp-config.php.save HTTP/1.1" 404 72516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:14:23:44 +0800] "GET /wp-config.php.old HTTP/1.1" 404 72516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:14:23:51 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 72516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH
...
show less
Brute-Force
🇮🇱
spd.co.il
2026-09-04 05:02:15
(5 hours ago)
Web application attack detected
Hacking
Web App Attack
🇺🇸
TAY
2026-09-03 22:45:55
(12 hours ago)
169.40.142.134 - - [04/Sep/2026:06:41:43 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 53604 "-" "Moz ...
show more
169.40.142.134 - - [04/Sep/2026:06:41:43 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 53604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:06:42:26 +0800] "GET /wp-config.php~ HTTP/1.1" 404 53604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:06:43:27 +0800] "GET /wp-config.php.save HTTP/1.1" 404 53626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:06:44:28 +0800] "GET /wp-config.php.old HTTP/1.1" 404 53604 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
169.40.142.134 - - [04/Sep/2026:06:44:51 +0800] "GET /wp-config.php.orig HTTP/1.1" 404 53626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH
...
show less
Brute-Force
🇫🇷
Octopuce
2026-09-03 22:16:34
(12 hours ago)
Aggressive web search of vulnerable pages: /.env.local /.env /.env.php /.gitignore /phpinfo.php /inf ...
show more
Aggressive web search of vulnerable pages: /.env.local /.env /.env.php /.gitignore /phpinfo.php /info.php /backup.sql /test.php /backup.zip /ba ...
show less
Web App Attack
🇲🇾
Rizzy
2026-09-03 22:14:40
(12 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-03 21:59:14
(12 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-02.
show less
Web App Attack
SSH
Hacking
🇩🇪
bogdanv
2026-09-03 21:21:29
(13 hours ago)
$f2bV_matches
DDoS Attack
Web Spam
SQL Injection
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-09-03 21:21:07
(13 hours ago)
Bad behaviour
Web Spam
🇳🇱
e.fierstra
2026-09-03 20:14:15
(14 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
Anonymous
2026-09-03 19:42:50
(15 hours ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
🇬🇧
OptimusGO
2026-09-03 18:06:43
(16 hours ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-09-03 19:06:43 UTC
Log evidence:
09/03/2026-19:06:41.733266 [wDrop] [**] [1:7000500:1] FINSERV CRITICAL: Aggressive Port Scan [**] [Classification: Attempted Information Leak] [Priority: 2] {TCP} 169.40.142.134:43828 -> 185.127.18.66:443
09/03/2026-19:06:41.733266 [**] [1:9000060:2] AUTONOMOUS Long-term Reconnaissance [**] [Classification: (null)] [Priority: 2] {TCP} 169.40.142.134:43828 -> 185.127.18.66:443
show less
Port Scan
Brute-Force
🇩🇪
Blexyel
2026-09-03 17:52:12
(16 hours ago)
169.40.142.134 - - [03/Sep/2026:19:52:11 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ...
show more
169.40.142.134 - - [03/Sep/2026:19:52:11 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-09-03 17:46:02
(17 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1, GET / HTTP/1.1
Hacking
Web App Attack