Anonymous
2026-07-24 06:43:52
(1 day ago)
"GET /.git/HEAD HTTP/1.1"
Hacking
Web App Attack
๐ท๐ธ
Scan
2026-07-24 00:13:21
(1 day ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
Anonymous
2026-07-24 00:12:40
(1 day ago)
PROTO=TCP DPT=2077
Port Scan
Hacking
๐ฉ๐ช
edena
2026-07-23 23:53:27
(1 day ago)
20.118.246.8 - - [24/Jul/2026:01:53:16 +0200] "GET /.git/config HTTP/1.1" 403 322 "-" "Mozilla/5.0 ( ...
show more
20.118.246.8 - - [24/Jul/2026:01:53:16 +0200] "GET /.git/config HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
20.118.246.8 - - [24/Jul/2026:01:53:25 +0200] "GET /.env.production HTTP/1.1" 403 322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
20.118.246.8 - - [24/Jul/2026:01:53:27 +0200] "GET /.env.backup HTTP/1.1" 403 322 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
Bad Web Bot
๐ง๐พ
lns.bz
2026-07-23 23:07:13
(1 day ago)
Too many 404 requests [BY]
Web App Attack
๐ฉ๐ช
dispaisyenterprises
2026-07-23 21:50:23
(1 day ago)
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2078 [49], 2087 [4], 2083 [1], 208 ...
show more
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 2078 [49], 2087 [4], 2083 [1], 2086 [1], 2095 [1], 2082 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Port Scan
๐บ๐ธ
cwytech
2026-07-23 21:47:57
(1 day ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: cwy/pf-geofence-high.
Hacking
๐ฉ๐ช
maxpower
2026-07-23 21:43:23
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.118.246.8 (US/United States/-): 1 in ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.118.246.8 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.118.246.8 - - [23/Jul/2026:23:43:18 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" "-" host=51.89.20.64
show less
Port Scan
๐จ๐ญ
GAS
2026-07-23 21:04:31
(1 day ago)
Bad Bot.
20.118.246.8 - - [23/Jul/2026:23:04:30 +0200] "GET /.git/config HTTP/1.1" 402 2790 "-" "Moz ...
show more
Bad Bot.
20.118.246.8 - - [23/Jul/2026:23:04:30 +0200] "GET /.git/config HTTP/1.1" 402 2790 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "REDACTED" ""
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-07-23 20:28:52
(1 day ago)
denied traffic to a honeypot network. destination port 2077.
Port Scan
Hacking
๐ณ๐ฑ
tpjg
2026-07-23 19:58:56
(1 day ago)
Automated: 15 requests with error status in 120s window from 20.118.246.8.
Evidence: /.env.docker:30 ...
show more
Automated: 15 requests with error status in 120s window from 20.118.246.8.
Evidence: /.env.docker:301,/.env.bak:301,/.env.old:301,/.env.prod:301,/.env.save:301,/.env.backup:301,/.env.production:301,/.env.local:301,/.env:301,/.git/index:301,/.git/refs/heads/main:301,/.git/refs/heads/master:301,/.git/logs/HEAD:301,/.git/config:301,/.git/HEAD:301
show less
Web App Attack
๐บ๐ธ
LotPhantom
2026-07-23 19:53:17
(1 day ago)
2026-07-23T19:53:16.749856+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ...
show more
2026-07-23T19:53:16.749856+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=20.118.246.8 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=55895 DF PROTO=TCP SPT=53546 DPT=2077 WINDOW=64240 RES=0x00 SYN URGP=0
2026-07-23T19:53:16.749892+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=20.118.246.8 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=50815 DF PROTO=TCP SPT=53511 DPT=2095 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Hacking
Anonymous
2026-07-23 19:38:17
(1 day ago)
20.118.246.8 46.39.185.24 - [23/Jul/2026:21:38:16 +0200] "GET /.git/config HTTP/1.1" 301 0 "-" "Mozi ...
show more
20.118.246.8 46.39.185.24 - [23/Jul/2026:21:38:16 +0200] "GET /.git/config HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
...
show less
Hacking
Web App Attack