Anonymous
2026-07-29 07:00:00
(3 days ago)
Apache probe; attempts=924; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.develo ...
show more
Apache probe; attempts=924; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.development | /.env.example | /.env.local | /.env.old | /.env.php.bak | /.env.prod.bak | /.env.production | /.env.production.bak | /.env.staging | /.env.swp | /.env.test | /.git-credentials | /.git/HEAD | /.git/config | /.hermes/.env | /.openclaw/.env | /@fs/.env?raw?? | /@fs/root/.env?raw?? | /actuator | /actuator/configprops | /actuator/env | /actuator/mappings | /admin/.env | /api/.env | /api/.env/ | /app/.env | /backend/.env | /config.env | /config/.env | /config/.env.php | /core/.env | /dev/.env | /docker/.env | /frontend/.env | /laravel/.env | /production/.env | /public/.env | /sendgrid.env | /server/.env | /src/.env | /staging/.env | /web/.env
show less
Web App Attack
๐บ๐ธ
drewking
2026-07-28 18:45:25
(4 days ago)
Rate-limit abuse โ 48 requests in a short window (brute-force / scraping). Targeted paths: /api/v2/c ...
show more
Rate-limit abuse โ 48 requests in a short window (brute-force / scraping). Targeted paths: /api/v2/config, /env.json, /api/v1/config, /settings.json, /firebase-config.json.
show less
Web App Attack
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-07-28 08:22:23
(4 days ago)
Excessive multi-domain requests
Brute-Force
๐ฎ๐น
Inartis
2026-07-27 11:01:12
(5 days ago)
34.39.196.181 - - [27/Jul/2026:13:01:11 +0200] "GET /.git/config HTTP/1.1" 404 5559 "-" "Mozilla/5.0 ...
show more
34.39.196.181 - - [27/Jul/2026:13:01:11 +0200] "GET /.git/config HTTP/1.1" 404 5559 "-" "Mozilla/5.0 (compatible; Applebot-Extended/0.1; +http://www.apple.com/go/applebot)"
34.39.196.181 - - [27/Jul/2026:13:01:11 +0200] "GET /.env.example HTTP/1.1" 404 403 "-" "Mozilla/5.0 (compatible; Applebot-Extended/0.1; +http://www.apple.com/go/applebot)"
34.39.196.181 - - [27/Jul/2026:13:01:11 +0200] "GET /.env HTTP/1.1" 404 403 "-" "Mozilla/5.0 (compatible; Applebot-Extended/0.1; +http://www.apple.com/go/applebot)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-07-27 10:09:34
(5 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-07-27 09:38:25
(5 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-07-27 09:38:25
(5 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
Tsumugi Kotobuki
2026-07-27 05:42:17
(5 days ago)
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 59 | Len: 60B | Win: ...
show more
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 59 | Len: 60B | Win: 65320(1) | rDNS: 181.196.39.34.bc.googleusercontent.com | F2B/ufw-honeypot@2026-07-27T05:42:17Z
show less
Port Scan
Hacking
๐ฎ๐น
CoreTech srl
2026-07-27 05:36:18
(6 days ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
๐ฉ๐ช
macrob
2026-07-26 22:33:17
(6 days ago)
2026/07/26 22:33:15 [error] 3625865#3625865: *414833918 access forbidden by rule, client: 34.39.196. ...
show more
2026/07/26 22:33:15 [error] 3625865#3625865: *414833918 access forbidden by rule, client: 34.39.196.181, server: binixo.pl, request: "GET /.aws/config HTTP/2.0", host: "binixo.pl", referrer: "https://staging.binixo.pl/.aws/config"
2026/07/26 22:33:16 [error] 3625866#3625866: *414832957 access forbidden by rule, client: 34.39.196.181, server: binixo.pl, request: "GET /.git/HEAD HTTP/2.0", host: "binixo.pl", referrer: "https://staging.binixo.pl/.git/HEAD"
2026/07/26 22:33:16 [error] 3625865#3625865: *414842364 access forbidden by rule, client: 34.39.196.181, server: binixo.pl, request: "GET /.git-credentials HTTP/2.0", host: "binixo.pl", referrer: "https://staging.binixo.pl/.git-credentials"
...
show less
Web App Attack
Anonymous
2026-07-26 21:06:48
(6 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.39.196.181 (BR/Brazil/181.196.39.34. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.39.196.181 (BR/Brazil/181.196.39.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐ท๐บ
ago.su
2026-07-26 20:19:01
(6 days ago)
F2B blocked nginx bad bot [otd]
Hacking
Web App Attack
๐บ๐ธ
deskpass.com
2026-07-26 19:58:31
(6 days ago)
GET /info.php
Web App Attack
๐ง๐ช
voormedia
2026-07-26 19:55:39
(6 days ago)
Accessed trap at '/.gitlab-ci.yml'
Web App Attack
๐บ๐ธ
Penny Packer
2026-07-26 19:31:06
(6 days ago)
Fail2Ban apache-404
Web App Attack