|
🇪🇸
34.175.132.42
|
|
34.175.132.42 - - [04/Sep/2026:16:10:38 +0200] "GET /.git/config HTTP/1.1" 401 0 "-" "Mozilla/5.0 (X ...
show more
34.175.132.42 - - [04/Sep/2026:16:10:38 +0200] "GET /.git/config HTTP/1.1" 401 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "ES" "Madrid" "40.41530" "-3.69400"
34.175.132.42 - - [04/Sep/2026:16:10:39 +0200] "GET /.env HTTP/1.1" 401 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "ES" "Madrid" "40.41530" "-3.69400"
34.175.132.42 - - [04/Sep/2026:16:10:39 +0200] "GET /.env.local HTTP/1.1" 401 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "ES" "Madrid" "40.41530" "-3.69400"
34.175.132.42 - - [04/Sep/2026:16:10:39 +0200] "GET /.env.production HTTP/1.1" 401 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "ES" "Madrid" "40.41530" "-3.69400"
34.175.132.42 - - [04/Sep/2026:16:10:39 +0200] "GET /.env.staging HTTP/1.1" 401 0 "-" "Mozilla/5.0 (X11;
...
show less
|
Hacking
Brute-Force
|
|
🇳🇱
195.178.110.15
|
|
195.178.110.15 - - [04/Sep/2026:07:02:36 +0200] "GET /wp-config.php-backup HTTP/1.1" 404 187 "-" "Mo ...
show more
195.178.110.15 - - [04/Sep/2026:07:02:36 +0200] "GET /wp-config.php-backup HTTP/1.1" 404 187 "-" "Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" "BG" "-" "42.69600" "23.33200"
195.178.110.15 - - [04/Sep/2026:09:14:10 +0200] "GET /wp-config.php-backup HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:131.0) Gecko/20100101 Firefox/131.0" "BG" "-" "42.69600" "23.33200"
195.178.110.15 - - [04/Sep/2026:10:26:44 +0200] "GET /wp-config.php-backup HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "BG" "-" "42.69600" "23.33200"
195.178.110.15 - - [04/Sep/2026:15:30:41 +0200] "GET /wp-config.php-backup HTTP/1.1" 302 5 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/608.2.11 (KHTML, like Gecko) Version/13 Safari/608.2.11" "BG" "-" "42.69600" "23.33200"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇦
34.19.181.183
|
|
34.19.181.183 - - [04/Sep/2026:15:25:22 +0200] "GET /.env.production HTTP/1.1" 200 29044 "-" "crusad ...
show more
34.19.181.183 - - [04/Sep/2026:15:25:22 +0200] "GET /.env.production HTTP/1.1" 200 29044 "-" "crusader-worker/1.0" "CA" "Montreal" "45.50750" "-73.58870"
34.19.181.183 - - [04/Sep/2026:15:25:22 +0200] "GET /wp-config.php.swp HTTP/1.1" 200 29044 "-" "crusader-worker/1.0" "CA" "Montreal" "45.50750" "-73.58870"
34.19.181.183 - - [04/Sep/2026:15:25:22 +0200] "GET /.env.save HTTP/1.1" 200 29044 "-" "crusader-worker/1.0" "CA" "Montreal" "45.50750" "-73.58870"
34.19.181.183 - - [04/Sep/2026:15:25:22 +0200] "GET /_ignition/health-check HTTP/1.1" 200 29044 "-" "crusader-worker/1.0" "CA" "Montreal" "45.50750" "-73.58870"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
159.89.38.12
|
|
159.89.38.12 - - [04/Sep/2026:14:55:49 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "" "Mozilla/5.0 ( ...
show more
159.89.38.12 - - [04/Sep/2026:14:55:49 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" "US" "Clifton" "40.83640" "-74.14030"
159.89.38.12 - - [04/Sep/2026:14:55:57 +0200] "GET /wp-login.php HTTP/1.1" 499 0 "http://thedreamer.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" "US" "Clifton" "40.83640" "-74.14030"
159.89.38.12 - - [04/Sep/2026:14:55:56 +0200] "GET /wp-login.php HTTP/2.0" 499 0 "http://thedreamer.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" "US" "Clifton" "40.83640" "-74.14030"
159.89.38.12 - - [04/Sep/2026:14:56:04 +0200] "GET /wp-login.php HTTP/2.0" 499 0 "http://thedreamer.nl/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:154.0) Gecko/20100101 Firefox/154.0" "US" "Clifton" "40.83640" "-74.14030"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇪
34.79.142.26
|
|
34.79.142.26 - - [04/Sep/2026:14:48:37 +0200] "GET /.env.save HTTP/1.1" 404 146 "-" "crusader-worker ...
show more
34.79.142.26 - - [04/Sep/2026:14:48:37 +0200] "GET /.env.save HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "BE" "Brussels" "50.85340" "4.34700"
34.79.142.26 - - [04/Sep/2026:14:48:37 +0200] "GET /.env.dev HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "BE" "Brussels" "50.85340" "4.34700"
34.79.142.26 - - [04/Sep/2026:14:48:37 +0200] "GET /.env.local HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "BE" "Brussels" "50.85340" "4.34700"
34.79.142.26 - - [04/Sep/2026:14:48:37 +0200] "GET /.env.example HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "BE" "Brussels" "50.85340" "4.34700"
...
show less
|
Brute-Force
Bad Web Bot
|
|
🇺🇸
35.236.241.54
|
|
35.236.241.54 - - [04/Sep/2026:14:28:57 +0200] "GET /_ignition/health-check HTTP/1.1" 502 150 "-" "c ...
show more
35.236.241.54 - - [04/Sep/2026:14:28:57 +0200] "GET /_ignition/health-check HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "US" "Washington" "38.89400" "-77.03650"
35.236.241.54 - - [04/Sep/2026:14:28:57 +0200] "GET /.env.old HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "US" "Washington" "38.89400" "-77.03650"
35.236.241.54 - - [04/Sep/2026:14:28:57 +0200] "GET /.env.save HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "US" "Washington" "38.89400" "-77.03650"
35.236.241.54 - - [04/Sep/2026:14:28:57 +0200] "GET /.env.bak HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "US" "Washington" "38.89400" "-77.03650"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇦🇺
34.40.179.42
|
|
34.40.179.42 - - [04/Sep/2026:14:13:40 +0200] "GET /wp-config.php~ HTTP/1.1" 502 150 "-" "crusader-w ...
show more
34.40.179.42 - - [04/Sep/2026:14:13:40 +0200] "GET /wp-config.php~ HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "AU" "Sydney" "-33.86720" "151.19970"
34.40.179.42 - - [04/Sep/2026:14:13:40 +0200] "GET /.env.prod HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "AU" "Sydney" "-33.86720" "151.19970"
34.40.179.42 - - [04/Sep/2026:14:13:40 +0200] "GET /.env.production HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "AU" "Sydney" "-33.86720" "151.19970"
34.40.179.42 - - [04/Sep/2026:14:13:40 +0200] "GET /.env.dev HTTP/1.1" 502 150 "-" "crusader-worker/1.0" "AU" "Sydney" "-33.86720" "151.19970"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇳
34.14.193.187
|
|
34.14.193.187 - - [04/Sep/2026:14:00:42 +0200] "GET /.env HTTP/1.1" 499 0 "-" "crusader-worker/1.0" ...
show more
34.14.193.187 - - [04/Sep/2026:14:00:42 +0200] "GET /.env HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "IN" "Mumbai" "19.07480" "72.88560"
34.14.193.187 - - [04/Sep/2026:14:00:42 +0200] "GET /.env.bak HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "IN" "Mumbai" "19.07480" "72.88560"
34.14.193.187 - - [04/Sep/2026:14:00:42 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "IN" "Mumbai" "19.07480" "72.88560"
34.14.193.187 - - [04/Sep/2026:14:00:42 +0200] "GET /.env.backup HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "IN" "Mumbai" "19.07480" "72.88560"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇳
34.100.232.22
|
|
34.100.232.22 - - [04/Sep/2026:13:44:36 +0200] "GET /html/.git/config HTTP/1.1" 499 0 "-" "crusader- ...
show more
34.100.232.22 - - [04/Sep/2026:13:44:36 +0200] "GET /html/.git/config HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "IN" "Mumbai" "19.07480" "72.88560"
34.100.232.22 - - [04/Sep/2026:13:44:36 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "IN" "Mumbai" "19.07480" "72.88560"
34.100.232.22 - - [04/Sep/2026:13:44:36 +0200] "GET /site/.git/config HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "IN" "Mumbai" "19.07480" "72.88560"
34.100.232.22 - - [04/Sep/2026:13:44:36 +0200] "GET /app/.git/config HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "IN" "Mumbai" "19.07480" "72.88560"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
35.196.58.98
|
|
35.196.58.98 - - [04/Sep/2026:11:57:35 +0200] "GET /public/.git/config HTTP/1.1" 499 0 "-" "crusader ...
show more
35.196.58.98 - - [04/Sep/2026:11:57:35 +0200] "GET /public/.git/config HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "US" "North Charleston" "32.86080" "-79.97460"
35.196.58.98 - - [04/Sep/2026:11:57:35 +0200] "GET /wordpress/.git/config HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "US" "North Charleston" "32.86080" "-79.97460"
35.196.58.98 - - [04/Sep/2026:11:57:35 +0200] "GET /app/.git/config HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "US" "North Charleston" "32.86080" "-79.97460"
35.196.58.98 - - [04/Sep/2026:11:57:35 +0200] "GET /src/.git/config HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "US" "North Charleston" "32.86080" "-79.97460"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇬🇧
34.105.244.86
|
|
34.105.244.86 - - [04/Sep/2026:11:33:56 +0200] "GET /.env.local HTTP/1.1" 404 14 "-" "crusader-worke ...
show more
34.105.244.86 - - [04/Sep/2026:11:33:56 +0200] "GET /.env.local HTTP/1.1" 404 14 "-" "crusader-worker/1.0" "GB" "City of London" "51.51640" "-0.09300"
34.105.244.86 - - [04/Sep/2026:11:33:56 +0200] "GET /.env.old HTTP/1.1" 404 14 "-" "crusader-worker/1.0" "GB" "City of London" "51.51640" "-0.09300"
34.105.244.86 - - [04/Sep/2026:11:33:56 +0200] "GET /.env.prod HTTP/1.1" 404 14 "-" "crusader-worker/1.0" "GB" "City of London" "51.51640" "-0.09300"
34.105.244.86 - - [04/Sep/2026:11:33:56 +0200] "GET /.env HTTP/1.1" 404 14 "-" "crusader-worker/1.0" "GB" "City of London" "51.51640" "-0.09300"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
34.7.163.229
|
|
34.7.163.229 - - [04/Sep/2026:11:08:12 +0200] "GET /wp-config.php.swp HTTP/1.1" 302 5 "-" "crusader- ...
show more
34.7.163.229 - - [04/Sep/2026:11:08:12 +0200] "GET /wp-config.php.swp HTTP/1.1" 302 5 "-" "crusader-worker/1.0" "NL" "Groningen" "53.22220" "6.56640"
34.7.163.229 - - [04/Sep/2026:11:08:12 +0200] "GET /.env.dev HTTP/1.1" 302 5 "-" "crusader-worker/1.0" "NL" "Groningen" "53.22220" "6.56640"
34.7.163.229 - - [04/Sep/2026:11:08:12 +0200] "GET /.env.example HTTP/1.1" 302 5 "-" "crusader-worker/1.0" "NL" "Groningen" "53.22220" "6.56640"
34.7.163.229 - - [04/Sep/2026:11:08:12 +0200] "GET /.env HTTP/1.1" 302 5 "-" "crusader-worker/1.0" "NL" "Groningen" "53.22220" "6.56640"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
195.178.110.62
|
|
195.178.110.62 - - [04/Sep/2026:10:42:42 +0200] "GET /api/session/properties HTTP/1.1" 403 118 "-" " ...
show more
195.178.110.62 - - [04/Sep/2026:10:42:42 +0200] "GET /api/session/properties HTTP/1.1" 403 118 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" "BG" "-" "42.69600" "23.33200"
195.178.110.62 - - [04/Sep/2026:10:42:57 +0200] "POST /api/session/reset_password HTTP/1.1" 403 118 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" "BG" "-" "42.69600" "23.33200"
195.178.110.62 - - [04/Sep/2026:10:42:57 +0200] "POST /api/session/reset_password HTTP/1.1" 403 118 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" "BG" "-" "42.69600" "23.33200"
195.178.110.62 - - [04/Sep/2026:10:42:57 +0200] "POST /api/session/reset_password HTTP/1.1" 403 118 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" "BG" "-" "42.69600" "23.33200"
...
show less
|
Brute-Force
Bad Web Bot
|
|
🇺🇸
34.177.119.63
|
|
34.177.119.63 - - [04/Sep/2026:10:39:43 +0200] "GET /crusader-404-probe HTTP/1.1" 404 146 "-" "crusa ...
show more
34.177.119.63 - - [04/Sep/2026:10:39:43 +0200] "GET /crusader-404-probe HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "The Dalles" "45.59990" "-121.18710"
34.177.119.63 - - [04/Sep/2026:10:39:43 +0200] "GET /_ignition/health-check HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "The Dalles" "45.59990" "-121.18710"
34.177.119.63 - - [04/Sep/2026:10:39:43 +0200] "GET /env HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "The Dalles" "45.59990" "-121.18710"
34.177.119.63 - - [04/Sep/2026:10:39:43 +0200] "GET /.env.production HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "The Dalles" "45.59990" "-121.18710"
...
show less
|
Brute-Force
Bad Web Bot
|
|
🇳🇱
195.178.110.108
|
|
195.178.110.108 - - [04/Sep/2026:10:30:12 +0200] "GET /wp-json/ HTTP/1.1" 404 181 "-" "Mozilla/5.0 ( ...
show more
195.178.110.108 - - [04/Sep/2026:10:30:12 +0200] "GET /wp-json/ HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "BG" "-" "42.69600" "23.33200"
195.178.110.108 - - [04/Sep/2026:10:30:29 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "BG" "-" "42.69600" "23.33200"
195.178.110.108 - - [04/Sep/2026:10:30:29 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "BG" "-" "42.69600" "23.33200"
...
show less
|
Brute-Force
Bad Web Bot
|
|
🇯🇵
34.104.216.120
|
|
34.104.216.120 - - [04/Sep/2026:10:07:51 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "crusader- ...
show more
34.104.216.120 - - [04/Sep/2026:10:07:51 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "JP" "Tokyo" "35.68930" "139.68990"
34.104.216.120 - - [04/Sep/2026:10:07:51 +0200] "GET /.env.prod HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "JP" "Tokyo" "35.68930" "139.68990"
34.104.216.120 - - [04/Sep/2026:10:07:51 +0200] "GET /.env.local HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "JP" "Tokyo" "35.68930" "139.68990"
34.104.216.120 - - [04/Sep/2026:10:07:51 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "JP" "Tokyo" "35.68930" "139.68990"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇹🇼
34.81.68.190
|
|
2026/09/04 10:03:12 [error] 1017#1017: *908591 access forbidden by rule, client: 34.81.68.190, serve ...
show more
2026/09/04 10:03:12 [error] 1017#1017: *908591 access forbidden by rule, client: 34.81.68.190, server: dump.thedreamer.nl, request: "GET /.env.backup HTTP/1.1", host: "dump.thedreamer.nl"
2026/09/04 10:03:12 [error] 1002#1002: *908592 access forbidden by rule, client: 34.81.68.190, server: dump.thedreamer.nl, request: "GET /.env.old HTTP/1.1", host: "dump.thedreamer.nl"
2026/09/04 10:03:12 [error] 1017#1017: *908594 access forbidden by rule, client: 34.81.68.190, server: dump.thedreamer.nl, request: "GET /.env.bak HTTP/1.1", host: "dump.thedreamer.nl"
2026/09/04 10:03:12 [error] 1017#1017: *908593 access forbidden by rule, client: 34.81.68.190, server: dump.thedreamer.nl, request: "GET /wp-config.php.swp HTTP/1.1", host: "dump.thedreamer.nl"
2026/09/04 10:03:12 [error] 1002#1002: *908595 access forbidden by rule, client: 34.81.68.190, server: dump.thedreamer.nl, request: "GET /_ignition/health-check HTTP/1.1", host: "dump.thedreamer.nl"
...
show less
|
Hacking
Brute-Force
Web App Attack
|
|
🇨🇦
34.152.56.181
|
|
34.152.56.181 - - [04/Sep/2026:10:02:53 +0200] "GET /.env.example HTTP/1.1" 401 0 "-" "crusader-work ...
show more
34.152.56.181 - - [04/Sep/2026:10:02:53 +0200] "GET /.env.example HTTP/1.1" 401 0 "-" "crusader-worker/1.0" "CA" "Montreal" "45.50750" "-73.58870"
34.152.56.181 - - [04/Sep/2026:10:02:53 +0200] "GET /.env.bak HTTP/1.1" 401 0 "-" "crusader-worker/1.0" "CA" "Montreal" "45.50750" "-73.58870"
34.152.56.181 - - [04/Sep/2026:10:02:53 +0200] "GET /wp-config.php.swp HTTP/1.1" 401 0 "-" "crusader-worker/1.0" "CA" "Montreal" "45.50750" "-73.58870"
34.152.56.181 - - [04/Sep/2026:10:02:53 +0200] "GET /.env.backup HTTP/1.1" 401 0 "-" "crusader-worker/1.0" "CA" "Montreal" "45.50750" "-73.58870"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.26.63.173
|
|
34.26.63.173 - - [04/Sep/2026:08:36:41 +0200] "GET /.env HTTP/1.1" 404 146 "-" "crusader-worker/1.0" ...
show more
34.26.63.173 - - [04/Sep/2026:08:36:41 +0200] "GET /.env HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "North Charleston" "32.86080" "-79.97460"
34.26.63.173 - - [04/Sep/2026:08:36:41 +0200] "GET /.env.local HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "North Charleston" "32.86080" "-79.97460"
34.26.63.173 - - [04/Sep/2026:08:36:41 +0200] "GET /actuator/env HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "North Charleston" "32.86080" "-79.97460"
34.26.63.173 - - [04/Sep/2026:08:36:41 +0200] "GET /.env.old HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "North Charleston" "32.86080" "-79.97460"
...
show less
|
Brute-Force
Bad Web Bot
|
|
🇸🇪
104.23.223.113
|
|
104.23.223.113 - - [04/Sep/2026:08:26:41 +0200] "GET /.env.production HTTP/2.0" 200 995 "https://www ...
show more
104.23.223.113 - - [04/Sep/2026:08:26:41 +0200] "GET /.env.production HTTP/2.0" 200 995 "https://www.google.com/search?q=thedreamer.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "SE" "Stockholm" "59.32870" "18.07170"
104.23.223.113 - - [04/Sep/2026:08:26:43 +0200] "GET /.env.test HTTP/2.0" 200 995 "https://www.google.com/search?q=thedreamer.nl" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "SE" "Stockholm" "59.32870" "18.07170"
104.23.223.113 - - [04/Sep/2026:08:26:51 +0200] "GET /.env.production.local HTTP/2.0" 200 995 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.0.0 Safari/537.36" "SE" "Stockholm" "59.32870" "18.07170"
104.23.223.113 - - [04/Sep/2026:08:26:51 +0200] "GET /.env.bak HTTP/2.0" 200 995 "https://www.google.com/search?q=thedreamer.nl" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇮
104.28.254.16
|
|
104.28.254.16 - - [04/Sep/2026:08:26:32 +0200] "HEAD /wp-config.php.bak HTTP/1.1" 200 0 "https://www ...
show more
104.28.254.16 - - [04/Sep/2026:08:26:32 +0200] "HEAD /wp-config.php.bak HTTP/1.1" 200 0 "https://www.google.com/search?q=thedreamer.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "FI" "Helsinki" "60.17190" "24.93470"
104.28.254.16 - - [04/Sep/2026:08:26:33 +0200] "HEAD /.git/config HTTP/1.1" 200 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "FI" "Helsinki" "60.17190" "24.93470"
104.28.254.16 - - [04/Sep/2026:08:26:33 +0200] "HEAD /.env HTTP/1.1" 200 0 "https://www.google.com/search?q=thedreamer.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15" "FI" "Helsinki" "60.17190" "24.93470"
104.28.254.16 - - [04/Sep/2026:08:26:33 +0200] "HEAD /.env.local HTTP/1.1" 200 0 "https://www.google.com/search?q=thedreamer.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇬
35.240.223.21
|
|
35.240.223.21 - - [04/Sep/2026:07:55:18 +0200] "GET /.env.example HTTP/1.1" 499 0 "-" "crusader-work ...
show more
35.240.223.21 - - [04/Sep/2026:07:55:18 +0200] "GET /.env.example HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "SG" "Singapore" "1.28720" "103.85070"
35.240.223.21 - - [04/Sep/2026:07:55:18 +0200] "GET /.env.dev HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "SG" "Singapore" "1.28720" "103.85070"
35.240.223.21 - - [04/Sep/2026:07:55:18 +0200] "GET /_ignition/health-check HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "SG" "Singapore" "1.28720" "103.85070"
35.240.223.21 - - [04/Sep/2026:07:55:18 +0200] "GET /wp-config.php.swp HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "SG" "Singapore" "1.28720" "103.85070"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.135.217.123
|
|
34.135.217.123 - - [04/Sep/2026:07:22:46 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "crusader- ...
show more
34.135.217.123 - - [04/Sep/2026:07:22:46 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "US" "Council Bluffs" "41.25910" "-95.85170"
34.135.217.123 - - [04/Sep/2026:07:22:46 +0200] "GET /wp-config.php~ HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "Council Bluffs" "41.25910" "-95.85170"
34.135.217.123 - - [04/Sep/2026:07:22:46 +0200] "GET /.env.prod HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "US" "Council Bluffs" "41.25910" "-95.85170"
34.135.217.123 - - [04/Sep/2026:07:22:46 +0200] "GET /.env.backup HTTP/1.1" 499 0 "-" "crusader-worker/1.0" "US" "Council Bluffs" "41.25910" "-95.85170"
...
show less
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
34.85.224.198
|
|
34.85.224.198 - - [04/Sep/2026:06:53:29 +0200] "GET /public/.git/config HTTP/1.1" 404 146 "-" "crusa ...
show more
34.85.224.198 - - [04/Sep/2026:06:53:29 +0200] "GET /public/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "Washington" "38.89400" "-77.03650"
34.85.224.198 - - [04/Sep/2026:06:53:29 +0200] "GET /html/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "Washington" "38.89400" "-77.03650"
34.85.224.198 - - [04/Sep/2026:06:53:29 +0200] "GET /www/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "Washington" "38.89400" "-77.03650"
34.85.224.198 - - [04/Sep/2026:06:53:29 +0200] "GET /var/www/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "US" "Washington" "38.89400" "-77.03650"
...
show less
|
Brute-Force
Bad Web Bot
|
|
🇧🇷
34.151.228.123
|
|
34.151.228.123 - - [04/Sep/2026:05:51:49 +0200] "GET /.env.dev HTTP/1.1" 404 146 "-" "crusader-worke ...
show more
34.151.228.123 - - [04/Sep/2026:05:51:49 +0200] "GET /.env.dev HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610"
34.151.228.123 - - [04/Sep/2026:05:51:49 +0200] "GET /_ignition/health-check HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610"
34.151.228.123 - - [04/Sep/2026:05:51:49 +0200] "GET /.env.example HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610"
34.151.228.123 - - [04/Sep/2026:05:51:49 +0200] "GET /.env.old HTTP/1.1" 404 146 "-" "crusader-worker/1.0" "BR" "S\xC3\xA3o Paulo" "-23.54750" "-46.63610"
...
show less
|
Brute-Force
Bad Web Bot
|