Anonymous
2026-07-29 07:00:00
UTC ·
(3 months ago)
Apache probe; attempts=823; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.development | /.env.example | /.env.local | /.env.old | /.env.php.bak | /.env.prod.bak | /.env.production | /.env.production.bak | /.env.staging | /.env.swp ...
show more
Apache probe; attempts=823; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.development | /.env.example | /.env.local | /.env.old | /.env.php.bak | /.env.prod.bak | /.env.production | /.env.production.bak | /.env.staging | /.env.swp | /.env.test | /.git-credentials | /.git/HEAD | /.git/config | /.hermes/.env | /.openclaw/.env | /@fs/.env?raw?? | /@fs/root/.env?raw?? | /actuator | /actuator/configprops | /actuator/env | /actuator/mappings | /admin/.env | /api/.env | /api/.env/ | /app/.env | /backend/.env | /config.env | /config/.env | /config/.env.php | /core/.env | /dev/.env | /docker/.env | /frontend/.env | /laravel/.env | /production/.env | /public/.env | /sendgrid.env | /server/.env | /src/.env | /staging/.env | /web/.env
show less
Web App Attack
🇫🇷
IRISIO
2026-07-27 16:11:03
UTC ·
(3 months ago)
scans/SQL injection/spam posts : 6195 queries
Web App Attack
SQL Injection
🇳🇱
WeCloudit-Anti-Abuse
2026-07-27 12:22:16
UTC ·
(3 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇳🇱
WeCloudit-Anti-Abuse
2026-07-27 11:12:50
UTC ·
(3 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
Anonymous
2026-07-27 09:39:55
UTC ·
(3 months ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Site.eu
2026-07-27 09:13:48
UTC ·
(3 months ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-07-26 20:22:11
UTC ·
(3 months ago)
34.12.46.74 - - [26/Jul/2026:22:22:01 +0200] "GET /.git-credentials HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.12.46.74 - - [26/Jul/2026:22:2 ...
show more
34.12.46.74 - - [26/Jul/2026:22:22:01 +0200] "GET /.git-credentials HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.12.46.74 - - [26/Jul/2026:22:22:01 +0200] "GET /.aws/credentials HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.12.46.74 - - [26/Jul/2026:22:22:01 +0200] "GET /.gitconfig HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.12.46.74 - - [26/Jul/2026:22:22:01 +0200] "GET /.git/HEAD HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.12.46.74 - - [26/Jul/2026:22:22:01 +0200] "GET /.github/workflows/deploy.yml HTTP/1.1" 403 7143 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, li
...
show less
DDoS Attack
🇫🇷
IRISIO
2026-07-26 20:12:37
UTC ·
(3 months ago)
scans/SQL injection/spam posts : 1940 queries
Web App Attack
SQL Injection
🇫🇷
Lunix
2026-07-26 19:57:17
UTC ·
(3 months ago)
Brute-Force
Web App Attack
🇬🇧
Marten Mark
2026-07-26 19:13:22
UTC ·
(3 months ago)
34.12.46.74 - - [26/Jul/2026:19:13:18 +0000] "GET /.npmrc HTTP/2.0" 404 1450 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.12.46.74 - - [26/Jul/2026:19:13:18 +0000] "GET /.docker/confi ...
show more
34.12.46.74 - - [26/Jul/2026:19:13:18 +0000] "GET /.npmrc HTTP/2.0" 404 1450 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.12.46.74 - - [26/Jul/2026:19:13:18 +0000] "GET /.docker/config.json HTTP/2.0" 404 1450 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.12.46.74 - - [26/Jul/2026:19:13:18 +0000] "GET /.boto HTTP/2.0" 404 1448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.12.46.74 - - [26/Jul/2026:19:13:19 +0000] "GET /.s3cfg HTTP/2.0" 404 1452 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.12.46.74 - - [26/Jul/2026:19:13:19 +0000] "GET /.vscode/launch.json HTTP/2.0" 404 1448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.12.46.74 - - [26/Jul/2026:19:13:19 +0000]
...
show less
Port Scan
Web App Attack
🇳🇿
Antinson
2026-07-26 17:07:20
UTC ·
(3 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇳🇱
e.fierstra
2026-07-26 10:00:20
UTC ·
(3 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇵🇱
stareradia.pl
2026-07-26 09:13:23
UTC ·
(3 months ago)
[Sun Jul 26 11:13:20.171345 2026] [php:error] [pid 3185823:tid 3185823] [client 34.12.46.74:0] script '/var/www/html/config/.env.php' not found or unable to stat
[Sun Jul 26 11:13:22.399279 2026] [php:error] [pid 3187568:tid 3187568] [client 34.12.46 ...
show more
[Sun Jul 26 11:13:20.171345 2026] [php:error] [pid 3185823:tid 3185823] [client 34.12.46.74:0] script '/var/www/html/config/.env.php' not found or unable to stat
[Sun Jul 26 11:13:22.399279 2026] [php:error] [pid 3187568:tid 3187568] [client 34.12.46.74:0] script '/var/www/html/info.php' not found or unable to stat
[Sun Jul 26 11:13:22.455812 2026] [php:error] [pid 3174024:tid 3174024] [client 34.12.46.74:0] script '/var/www/html/phpinfo.php' not found or unable to stat
[Sun Jul 26 11:13:22.518875 2026] [php:error] [pid 3185823:tid 3185823] [client 34.12.46.74:0] script '/var/www/html/pi.php' not found or unable to stat
...
show less
Web App Attack
🇩🇪
todix
2026-07-26 07:59:15
UTC ·
(3 months ago)
Web App Attack Exploid from 34.12.46.74
Web App Attack
🇮🇳
evicky2002
2026-07-26 06:00:00
UTC ·
(3 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH