๐ฉ๐ช
iNetWorker
2026-05-31 20:59:58
(3 days ago)
trolling for resource vulnerabilities
Web App Attack
๐ฎ๐ช
AutosOnShow
2026-05-31 15:02:05
(3 days ago)
blocked for webapp attack | path requested: /.env | seen at 2026-05-31 15:01:31.024 |
Web App Attack
๐ธ๐ฌ
anotherwatcher
2026-05-31 12:52:43
(3 days ago)
bad bot
Bad Web Bot
๐ซ๐ท
solution.it
2026-05-31 11:52:59
(3 days ago)
[Sun May 31 13:52:58.754691 2026] [php7:error] [pid 4077995:tid 4077995] [client 198.57.179.68:57250 ...
show more
[Sun May 31 13:52:58.754691 2026] [php7:error] [pid 4077995:tid 4077995] [client 198.57.179.68:57250] script '/var/www/html/wp-config.php' not found or unable to stat
show less
Web App Attack
๐ฉ๐ช
maxpower
2026-05-31 11:52:19
(3 days ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 198.57.179.68 (US/United States/bli.blit ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 198.57.179.68 (US/United States/bli.blitzsportsnetwork.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 198.57.179.68 - - [31/May/2026:13:52:14 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "-" host=51.77.95.118
198.57.179.68 - - [31/May/2026:13:52:15 +0200] "GET /.aws/credentials HTTP/1.1" 404 10390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-" host=51.77.95.118
show less
Port Scan
Anonymous
2026-05-31 10:44:24
(3 days ago)
[Thu May 28 11:03:22.847620 2026] [authz_core:error] [pid 15654] [client 198.57.179.68:53406] AH0163 ...
show more
[Thu May 28 11:03:22.847620 2026] [authz_core:error] [pid 15654] [client 198.57.179.68:53406] AH01630: client denied by server configuration: /var/www/html/.env.local
[Sun May 31 13:44:15.063145 2026] [authz_core:error] [pid 30207] [client 198.57.179.68:43012] AH01630: client denied by server configuration: /var/www/html/.git
[Sun May 31 13:44:23.312881 2026] [authz_core:error] [pid 30211] [client 198.57.179.68:59532] AH01630: client denied by server configuration: /var/www/html/.env.local
show less
Bad Web Bot
๐ฉ๐ช
Holger
2026-05-31 08:52:13
(3 days ago)
URL probing: GET /.env
Web App Attack
๐ง๐ช
voormedia
2026-05-31 07:50:05
(4 days ago)
Accessed trap at '/.git/HEAD'
Web App Attack
๐ฉ๐ช
KiekerJan
2026-05-31 07:09:46
(4 days ago)
198.57.179.68 - - [31/May/2026:09:09:26 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 ...
show more
198.57.179.68 - - [31/May/2026:09:09:26 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
198.57.179.68 - - [31/May/2026:09:09:45 +0200] "GET /backup.sql HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฎ๐ช
AutosOnShow
2026-05-31 04:36:06
(4 days ago)
blocked for webapp attack | path requested: /.env | seen at 2026-05-31 04:35:29.272 |
Web App Attack
Anonymous
2026-05-30 22:45:27
(4 days ago)
Bot detected scanning for vulnerable pages
Port Scan
๐ฉ๐ช
gadix
2026-05-30 21:59:46
(4 days ago)
[30/May/2026:23:59:29.696686 +0200] ahtdwSKR1VDhdCnhuF103wAAAAA 198.57.179.68 45784 127.0.0.1 7080
[ ...
show more
[30/May/2026:23:59:29.696686 +0200] ahtdwSKR1VDhdCnhuF103wAAAAA 198.57.179.68 45784 127.0.0.1 7080
[30/May/2026:23:59:42.673591 +0200] ahtdzgvkiO1D_Uvbbp0aGwAAAAg 198.57.179.68 33318 127.0.0.1 7080
[30/May/2026:23:59:44.433488 +0200] ahtd0E-aDZhX0bJHDzMRkQAAAAE 198.57.179.68 33320 127.0.0.1 7080
...
show less
Web App Attack
Anonymous
2026-05-30 20:46:34
(4 days ago)
Unauthorized access (tcp/80/http)
Port Scan
Web App Attack
๐ฉ๐ช
evilrave
2026-05-30 20:19:18
(4 days ago)
198.57.179.68 - - [30/May/2026:20:19:18 +0000] "GET /.git/config HTTP/1.1" 444 0 Host="[REDACTED_IP] ...
show more
198.57.179.68 - - [30/May/2026:20:19:18 +0000] "GET /.git/config HTTP/1.1" 444 0 Host="[REDACTED_IP]" SNI="-"
...
show less
Bad Web Bot
๐บ๐ธ
markawes
2026-05-30 18:26:38
(4 days ago)
[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. ...
show more
[markis] Auto banned by Fail2Ban. Reason: Malicious web scan / attempted access to sensitive paths. Evidence:
198.57.179.68 - - [30/May/2026:19:26:31 +0100] "GET /.git/HEAD HTTP/1.1" 404 455 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
198.57.179.68 - - [30/May/2026:19:26:34 +0100] "GET /.env HTTP/1.1" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
198.57.179.68 - - [30/May/2026:19:26:36 +0100] "GET /.env.local HTTP/1.1" 404 455 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Port Scan
Hacking
Web App Attack