🇫🇷
geot
2026-06-09 10:32:51
(1 week ago)
HEAD /wp-config.php.swp HTTP/1.1
HEAD /settings.php.swp HTTP/1.1
HEAD /.env.local.swo HTTP/1.1
Hacking
Web App Attack
🇳🇱
JCB
2026-06-09 07:47:00
(2 weeks ago)
212.46.142.168 - - [08/Jun/2026:15:09:29 +0300] "HEAD /.env.bak HTTP/1.1" 403 - "-" "Mozilla/5.0 (co ...
show more
212.46.142.168 - - [08/Jun/2026:15:09:29 +0300] "HEAD /.env.bak HTTP/1.1" 403 - "-" "Mozilla/5.0 (compatible; WhiteWebSecurity/1.0; +https://whitewebsecurity.com; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-08 21:59:49
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-07.
show less
Web App Attack
SSH
Hacking
2026-06-08 18:21:44
(2 weeks ago)
/.env.local.swp
Web App Attack
🇩🇪
FeG Deutschland
2026-06-08 15:04:04
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇧🇷
Halux
2026-06-08 14:54:51
(2 weeks ago)
212.46.142.168 Web Application Firewall multiple violations
Hacking
Web App Attack
🇵🇱
dzpk
2026-06-08 14:27:18
(2 weeks ago)
[08/Jun/2026:16:27:10 +0200] 178092883040.103707 212.46.142.168 46259 HOST 443 [08/Jun/2026:16:27:12 ...
show more
[08/Jun/2026:16:27:10 +0200] 178092883040.103707 212.46.142.168 46259 HOST 443 [08/Jun/2026:16:27:12 +0200] 178092883232.039791 212.46.142.168 41767 HOST 443 [08/Jun/2026:16:27:18 +0200] 178092883891.387685 212.46.142.168 35733 HOST 443
show less
Web App Attack
🇪🇸
el-brujo
2026-06-08 12:37:06
(2 weeks ago)
Cloudflare WAF: Request Path: /terraform.tfvars.swp Request Query: Host: foro.elhacker.net userAgen ...
show more
Cloudflare WAF: Request Path: /terraform.tfvars.swp Request Query: Host: foro.elhacker.net userAgent: Mozilla/5.0 (compatible; WhiteWebSecurity/1.0; +https://whitewebsecurity.com; [email protected] ) Action: block Source: firewallManaged ASN Description: HostRoyale Technologies Pvt Ltd Country: US Method: HEAD Timestamp: 2026-06-08T12:37:06Z ruleId: c04705c7adee4ce3a763bd5e18135e0c. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇫🇷
bazter.pro
2026-06-08 12:07:59
(2 weeks ago)
Auto-Ban [2026-06-08 15:07:50]: CRITICAL: .env attack; DC: truview LLC [Paths: 28] | Details: Exploi ...
show more
Auto-Ban [2026-06-08 15:07:50]: CRITICAL: .env attack; DC: truview LLC [Paths: 28] | Details: Exploit trap paths: /.env.local.swp, /.ssh/id_rsa, /backup.sql, /.env.example | Sensitive files/paths: /secrets.json.swp, /application.properties.swp, /secrets.json.swp, /.idea/webServers.xml, /.env.local.swp | 404 errors (22): /.env.example, /app/settings.py, /secrets.json.swp, /backup.sql, /.ssh/id_rsa, /db_connect.php, /settings/production.py, /application-prod.properties, /includes/config.php, /credentials.json (and 12 more) | 403 errors (3): /secrets.json.swp, /application.properties.swp, /.idea/webServers.xml | Other paths: /server.key, /helm/values.yaml, /htpasswd, /.git-credentials
show less
Web App Attack
Hacking
🇫🇷
Coco Bongo
2026-06-08 11:56:36
(2 weeks ago)
212.46.142.168 [redacted].contaboserver.net (205434-Elasticity Limited United Kingdom -) - - [08/Jun ...
show more
212.46.142.168 [redacted].contaboserver.net (205434-Elasticity Limited United Kingdom -) - - [08/Jun/2026:13:49:21 +0200] "HEAD /.env.production.swp HTTP/1.1" 404 0 "-" "Mozilla/5.0 (compatible; WhiteW
...
show less
Bad Web Bot
Web App Attack
🇫🇷
LoneRider
2026-06-08 11:37:35
(2 weeks ago)
[08/Jun/2026:13:34:41.535639 +0200] aiao0YOROfDxght8XttrXwAAAAA 212.46.142.168 49190 127.0.0.1 7081
...
show more
[08/Jun/2026:13:34:41.535639 +0200] aiao0YOROfDxght8XttrXwAAAAA 212.46.142.168 49190 127.0.0.1 7081
[08/Jun/2026:13:35:38.033255 +0200] aiapCnS2tXG_yXGjmQln9wAAAAI 212.46.142.168 42946 127.0.0.1 7081
[08/Jun/2026:13:37:35.087037 +0200] aiapf6wA69BlqZ3GnKB43QAAAAo 212.46.142.168 49528 127.0.0.1 7081
...
show less
Hacking
🇬🇧
ISPLtd
2026-06-08 11:22:48
(2 weeks ago)
212.46.142.168 [08/Jun/2026:08:18:36 -0300] target.domain:80 URL:/.env.php.swp "GET /.env.php.swp
21 ...
show more
212.46.142.168 [08/Jun/2026:08:18:36 -0300] target.domain:80 URL:/.env.php.swp "GET /.env.php.swp
212.46.142.168 [08/Jun/2026:08:22:47 -0300] claire.target.domain:80 URL:/.docker/config.json "HEAD /.docker/config.json
...
show less
Hacking
Web App Attack
🇫🇮
as211431.net
2026-06-08 10:58:40
(2 weeks ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD meth ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/1.1 (HEAD method)
Endpoint: /.idea/webServers.xml
UA: Mozilla/5.0 (compatible; WhiteWebSecurity/1.0; +https://whitewebsecurity.com; [email protected] )
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇫🇷
omartin
2026-06-08 10:49:08
(2 weeks ago)
Critical Vulnerability Scan detected
Hacking
Brute-Force
Exploited Host
Web App Attack
🇫🇷
vtchost.com
2026-06-08 10:48:27
(2 weeks ago)
vtchost.com:443 212.46.142.168 - - [08/Jun/2026:12:48:26 +0200] "HEAD /.env.php.swp HTTP/1.1" 418 27 ...
show more
vtchost.com:443 212.46.142.168 - - [08/Jun/2026:12:48:26 +0200] "HEAD /.env.php.swp HTTP/1.1" 418 2709 "-" "Mozilla/5.0 (compatible; WhiteWebSecurity/1.0; +https://whitewebsecurity.com; [email protected] )"
...
show less
Web App Attack