Anonymous
2026-07-29 07:00:00
(22 hours ago)
Apache probe; attempts=1013; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.devel ...
show more
Apache probe; attempts=1013; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.development | /.env.example | /.env.local | /.env.old | /.env.php.bak | /.env.prod.bak | /.env.production | /.env.production.bak | /.env.staging | /.env.swp | /.env.test | /.git-credentials | /.git-credentials/ | /.git/HEAD | /.git/HEAD/ | /.git/config | /.git/config/ | /.hermes/.env | /.openclaw/.env | /@fs/.env?raw?? | /@fs/root/.env?raw?? | /actuator | /actuator/ | /actuator/configprops | /actuator/configprops/ | /actuator/env | /actuator/env/ | /actuator/mappings | /actuator/mappings/ | /admin/.env | /api/.env | /app/.env | /backend/.env | /config.env | /config/.env | /config/.env.php | /core/.env | /dev/.env | /docker/.env | /frontend/.env | /laravel/.env | /production/.env | /public/.env | /sendgrid.env | /server/.env | /src/.env | /staging/.env | /web/.env
show less
Web App Attack
Anonymous
2026-07-27 10:13:08
(2 days ago)
34.50.184.219 - - [27/Jul/2026:05:13:06 -0500] "GET /.env HTTP/1.1" 403 199 "-" "meta-externalagent/ ...
show more
34.50.184.219 - - [27/Jul/2026:05:13:06 -0500] "GET /.env HTTP/1.1" 403 199 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.50.184.219
34.50.184.219 - - [27/Jul/2026:05:13:06 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.50.184.219
34.50.184.219 - - [27/Jul/2026:05:13:06 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.50.184.219
34.50.184.219 - - [27/Jul/2026:05:13:06 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.50.184.219
34.50.184.219 - - [27/Jul/2026:05:13:06 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.50.184.219
34.50.184.219 - - [27/Jul/2026:05:13:06 -05
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-07-27 10:02:03
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-07-27 09:44:25
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
ger-stg-sifi1
2026-07-27 09:36:58
(2 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-27 05:39:58
(2 days ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_tcp_issues,ndpi_probing_attempt
Hacking
๐ฉ๐ช
Trueforce Threat Report
2026-07-26 05:28:43
(3 days ago)
Automated report, trolling for resource vulnerabilities
Bad Web Bot
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-07-26 02:54:33
(4 days ago)
34.50.184.219 - - [26/Jul/2026:03:54:32 +0100] "GET /.openclaw/.env HTTP/2.0" 404 224 "-" "Mozilla/5 ...
show more
34.50.184.219 - - [26/Jul/2026:03:54:32 +0100] "GET /.openclaw/.env HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-07-26 02:00:33
(4 days ago)
34.50.184.219 - - [26/Jul/2026:03:00:33 +0100] "GET /.hermes/auth.json HTTP/2.0" 404 224 "-" "Mozill ...
show more
34.50.184.219 - - [26/Jul/2026:03:00:33 +0100] "GET /.hermes/auth.json HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ฉ๐ช
macrob
2026-07-26 01:23:43
(4 days ago)
2026/07/26 01:23:41 [error] 2642819#2642819: *411725640 access forbidden by rule, client: 34.50.184. ...
show more
2026/07/26 01:23:41 [error] 2642819#2642819: *411725640 access forbidden by rule, client: 34.50.184.219, server: fn.binixo.es, request: "GET /.git/HEAD HTTP/2.0", host: "oauth.fastcredit.net.ua"
2026/07/26 01:23:41 [error] 2642819#2642819: *411725643 access forbidden by rule, client: 34.50.184.219, server: fn.binixo.es, request: "GET /.aws/config HTTP/2.0", host: "oauth.fastcredit.net.ua"
2026/07/26 01:23:41 [error] 2642817#2642817: *411725644 access forbidden by rule, client: 34.50.184.219, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "oauth.fastcredit.net.ua"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-07-26 00:31:46
(4 days ago)
34.50.184.219 - - [26/Jul/2026:01:31:45 +0100] "GET /.git-credentials HTTP/2.0" 404 224 "-" "Mozilla ...
show more
34.50.184.219 - - [26/Jul/2026:01:31:45 +0100] "GET /.git-credentials HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
Anonymous
2026-07-25 23:16:24
(4 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ท๐ด
INTEQ
2026-07-25 22:34:24
(4 days ago)
Web attack from 34.50.184.219
Web App Attack
๐ฉ๐ช
london2038.com
2026-07-25 20:09:25
(4 days ago)
Probing for exploits
34.50.184.219 - - [25/Jul/2026:22:09:24 +0200] "GET /.git-credentials HTTP/2.0" ...
show more
Probing for exploits
34.50.184.219 - - [25/Jul/2026:22:09:24 +0200] "GET /.git-credentials HTTP/2.0" 422 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +mailto:[email protected] "
34.50.184.219 - - [25/Jul/2026:22:09:25 +0200] "GET /.aws/config HTTP/2.0" 422 0 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
show less
Hacking
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-07-25 18:47:22
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack