🇩🇪
161.35.79.204
3 hours ago
161.35.79.204 - - [15/Jun/2026:08:38:16 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 301 496 "-" ...
show more
161.35.79.204 - - [15/Jun/2026:08:38:16 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 301 496 "-" "Go-http-client/1.1"
161.35.79.204 - - [15/Jun/2026:08:38:29 +0200] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 301 496 "-" "Go-http-client/1.1"
show less
Bad Web Bot
Web App Attack
🇧🇪
130.211.70.2
4 hours ago
130.211.70.2 - - [15/Jun/2026:07:14:56 +0200] "GET /wp-json/wp/v2/settings HTTP/1.1" 302 3777 "-" "M ...
show more
130.211.70.2 - - [15/Jun/2026:07:14:56 +0200] "GET /wp-json/wp/v2/settings HTTP/1.1" 302 3777 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36"
130.211.70.2 - - [15/Jun/2026:07:14:56 +0200] "GET /wp-json/gravitysmtp/v1/config HTTP/1.1" 302 3777 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
130.
show less
Hacking
Web App Attack
🇺🇸
34.174.74.130
4 hours ago
34.174.74.130 - - [15/Jun/2026:06:27:50 +0200] "GET /laravel/.git/config HTTP/1.1" 403 3724 "-" "Moz ...
show more
34.174.74.130 - - [15/Jun/2026:06:27:50 +0200] "GET /laravel/.git/config HTTP/1.1" 403 3724 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2859.0 Safari/537.36"
34.174.74.130 - - [15/Jun/2026:06:27:50 +0200] "GET /.git/config HTTP/1.1" 403 3724 "-" "Opera/7.50 (Windows XP; U)"
34.174.74.130 - - [15/Jun/2026:06:27:50 +0200] "GET /app/.git/config HTTP/1.1" 403 3724 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Redmi Note 6 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.105 Mobile Safari/537.36"
3
show less
Hacking
Web App Attack
🇺🇸
35.196.67.138
4 hours ago
35.196.67.138 - - [15/Jun/2026:03:54:26 +0200] "GET /app/api/.env HTTP/1.1" 403 3724 "-" "Mozilla/5. ...
show more
35.196.67.138 - - [15/Jun/2026:03:54:26 +0200] "GET /app/api/.env HTTP/1.1" 403 3724 "-" "Mozilla/5.0 (X11; Linux i686; rv:12.0) Gecko/20120502 Firefox/12.0 SeaMonkey/2.9.1"
35.196.67.138 - - [15/Jun/2026:03:54:26 +0200] "GET /v2/.env HTTP/1.1" 403 3724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.79 Safari/537.36"
show less
Hacking
Web App Attack
🇫🇷
5.189.145.85
17 hours ago
5.189.145.85 - - [14/Jun/2026:19:03:45 +0200] "GET /compose.yml HTTP/1.1" 404 363 "-" "Mozilla/5.0 ( ...
show more
5.189.145.85 - - [14/Jun/2026:19:03:45 +0200] "GET /compose.yml HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible)"
5.189.145.85 - - [14/Jun/2026:19:03:48 +0200] "GET /app/etc/env.php HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible)"
5.189.145.85 - - [14/Jun/2026:19:03:50 +0200] "GET /sites/default/settings.php HTTP/1.1" 403 366 "-" "Mozilla/5.0 (compatible)"
show less
Hacking
Web App Attack
🇧🇪
34.14.87.184
18 hours ago
34.14.87.184 - - [14/Jun/2026:18:35:31 +0200] "GET /v3/imports.sql HTTP/2.0" 403 251 "-" "Mozilla/5. ...
show more
34.14.87.184 - - [14/Jun/2026:18:35:31 +0200] "GET /v3/imports.sql HTTP/2.0" 403 251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36"
34.14.87.184 - - [14/Jun/2026:18:35:31 +0200] "GET /v3/sql.zip HTTP/2.0" 404 224 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36"
show less
Brute-Force
Web App Attack
🇳🇱
34.34.98.39
10 Jun 2026
34.34.98.39 - - [10/Jun/2026:13:30:03 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 4 ...
show more
34.34.98.39 - - [10/Jun/2026:13:30:03 +0200] "GET //site/wp-includes/wlwmanifest.xml HTTP/1.1" 404 425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.34.98.39 - - [10/Jun/2026:13:30:03 +0200] "GET //cms/wp-includes/wlwmanifest.xml HTTP/1.1" 404 425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Web App Attack
🇸🇬
140.245.111.12
10 Jun 2026
Multiple WAF Violations
Web App Attack
🇺🇸
172.202.96.198
09 Jun 2026
172.202.96.198 - - [09/Jun/2026:15:21:25 +0200] "GET /xstelth.php HTTP/1.1" 404 177 "-" "-"
172.202 ...
show more
172.202.96.198 - - [09/Jun/2026:15:21:25 +0200] "GET /xstelth.php HTTP/1.1" 404 177 "-" "-"
172.202.96.198 - - [09/Jun/2026:15:21:25 +0200] "GET /wp-admin/css/colors/midnight/about.php HTTP/1.1" 301 505 "-" "-"
show less
Web App Attack
🇭🇰
199.45.155.80
09 Jun 2026
[2026-06-09 14:38:21 CET] Unauthorized port scanning activity detected. Target port: 25565
Port Scan
🇺🇸
135.119.94.8
09 Jun 2026
135.119.94.8 - - [09/Jun/2026:14:11:08 +0200] "GET /sx_pms.php HTTP/1.1" 301 449 "-" "-"
135.119.94 ...
show more
135.119.94.8 - - [09/Jun/2026:14:11:08 +0200] "GET /sx_pms.php HTTP/1.1" 301 449 "-" "-"
135.119.94.8 - - [09/Jun/2026:14:11:09 +0200] "GET /sx_pms.php HTTP/1.1" 404 177 "-" "-"
135.119.94.8 - - [09/Jun/2026:14:11:09 +0200] "GET /wp-info.php HTTP/1.1" 301 451 "-" "-"
show less
Bad Web Bot
Web App Attack
🇰🇷
110.10.176.24
09 Jun 2026
110.10.176.24 - - [09/Jun/2026:13:47:30 +0200] "GET /admin/config.php HTTP/1.0" 404 3717 "-" "Mozill ...
show more
110.10.176.24 - - [09/Jun/2026:13:47:30 +0200] "GET /admin/config.php HTTP/1.0" 404 3717 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Web App Attack
🇳🇱
86.54.28.27
09 Jun 2026
86.54.28.27 - - [09/Jun/2026:12:24:39 +0200] "\x16\x03\x01\x06\x13\x01" 400 392 "-" "-"
86.54.28.27 ...
show more
86.54.28.27 - - [09/Jun/2026:12:24:39 +0200] "\x16\x03\x01\x06\x13\x01" 400 392 "-" "-"
86.54.28.27 - - [09/Jun/2026:12:24:39 +0200] "GET / HTTP/1.1" 403 3720 "-" "RootEvidence/1.0"
show less
Port Scan
Bad Web Bot
🇸🇬
85.137.51.115
09 Jun 2026
WebApp brute force attack detected. Multiple file scanning attempts from 85.137.51.115. Detected by ...
show more
WebApp brute force attack detected. Multiple file scanning attempts from 85.137.51.115. Detected by fail2ban
show less
Brute-Force
Web App Attack
🇺🇸
35.223.121.113
09 Jun 2026
35.223.121.113 - - [09/Jun/2026:11:13:43 +0200] "GET /public../etc/passwd HTTP/2.0" 404 275 "-" "cur ...
show more
35.223.121.113 - - [09/Jun/2026:11:13:43 +0200] "GET /public../etc/passwd HTTP/2.0" 404 275 "-" "curl/7.88.1"
35.223.121.113 - - [09/Jun/2026:11:13:43 +0200] "GET /dist../etc/passwd HTTP/2.0" 404 275 "-" "curl/7.88.1"
35.223.121.113 - - [09/Jun/2026:11:13:44 +0200] "GET /resource../etc/passwd HTTP/2.0" 404 275 "-" "curl/7.88.1"
show less
Bad Web Bot
Web App Attack
🇺🇸
52.173.233.39
08 Jun 2026
52.173.233.39 - - [08/Jun/2026:14:52:18 +0200] "GET /wp-links.php HTTP/1.1" 404 177 "-" "-"
52.173. ...
show more
52.173.233.39 - - [08/Jun/2026:14:52:18 +0200] "GET /wp-links.php HTTP/1.1" 404 177 "-" "-"
52.173.233.39 - - [08/Jun/2026:14:52:19 +0200] "GET /wp-admin/network/plugins.php HTTP/1.1" 301 485 "-" "-"
show less
Hacking
Web App Attack
🇺🇸
34.162.118.246
08 Jun 2026
34.162.118.246 - - [08/Jun/2026:11:20:14 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gr ...
show more
34.162.118.246 - - [08/Jun/2026:11:20:14 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 302 468 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) coc_coc_browser/80.0.180 Chrome/74.0.3729.180 Safari/537.36"
show less
Web App Attack
🇺🇸
34.46.185.156
08 Jun 2026
4.46.185.156 - - [08/Jun/2026:12:07:17 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 3572 ...
show more
4.46.185.156 - - [08/Jun/2026:12:07:17 +0200] "GET //wp-includes/ID3/license.txt HTTP/1.1" 404 3572 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.46.185.156 - - [08/Jun/2026:12:07:17 +0200] "GET //feed/ HTTP/1.1" 404 425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34.46.185.156 - - [08/Jun/2026:12:07:18 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
34
show less
Hacking
Web App Attack
🇯🇵
172.104.96.18
08 Jun 2026
172.104.96.18 - - [08/Jun/2026:04:23:06 +0200] "GET /docker/config.json HTTP/1.1" 404 3721 "-" "Mozi ...
show more
172.104.96.18 - - [08/Jun/2026:04:23:06 +0200] "GET /docker/config.json HTTP/1.1" 404 3721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
172.104.96.18 - - [08/Jun/2026:04:23:06 +0200] "GET /database.yaml HTTP/1.1" 404 3721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Web App Attack
🇯🇵
172.105.193.152
08 Jun 2026
172.105.193.152 - - [07/Jun/2026:05:43:42 +0200] "GET /database.yaml HTTP/1.1" 404 3721 "-" "Mozilla ...
show more
172.105.193.152 - - [07/Jun/2026:05:43:42 +0200] "GET /database.yaml HTTP/1.1" 404 3721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
172.105.193.152 - - [07/Jun/2026:05:43:43 +0200] "GET /amplify/.config/local-aws-info.json HTTP/1.1" 404 3721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
172.105.193.152 - - [07/Jun/2026:05:43:43 +0200] "GET /database.json HTTP/1.1" 404 3721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
172.105.193.152 - - [07/Jun/2026:05:43:43 +0200] "GET /aws_config.py HTTP/1.1" 404 3721 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
🇺🇸
20.29.126.217
04 Jun 2026
20.29.126.217 - - [04/Jun/2026:15:16:29 +0200] "GET /classgoto24.php HTTP/1.1" 404 177 "-" "-"
20.2 ...
show more
20.29.126.217 - - [04/Jun/2026:15:16:29 +0200] "GET /classgoto24.php HTTP/1.1" 404 177 "-" "-"
20.29.126.217 - - [04/Jun/2026:15:16:30 +0200] "GET /cu.php HTTP/1.1" 301 441 "-" "-"
20.29.126.217 - - [04/Jun/2026:15:16:30 +0200] "GET /cu.php HTTP/1.1" 404 177 "-" "-"
20.29.126.217 - - [04/Jun/2026:15:16:30 +0200] "GET /4PJcpMFsD8B.php HTTP/1.1" 301 459 "-" "-"
20.29.126.217 - - [04/Jun/2026:15:16:30 +0200] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 177 "-" "
show less
Brute-Force
Web App Attack
🇺🇸
23.94.110.24
02 Jun 2026
23.94.110.24 - - [02/Jun/2026:15:10:59 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.p ...
show more
23.94.110.24 - - [02/Jun/2026:15:10:59 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 529 "-" "Mozilla/5.0"
23.94.110.24 - - [02/Jun/2026:15:10:59 +0200] "GET /etc/passwd HTTP/1.1" 301 449 "-" "Mozilla/5.0"
23.94.110.24 - - [02/Jun/2026:15:10:59 +0200] "GET /phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 301 499 "-" "Mozilla/5.0"
23.94.110.24 - - [02/Jun/2026:15:10:59 +0200] "GET /cgi-bin/.%252e/.%252e/.%252e/.%252e/etc/passwd HTTP/1.1" 301 521 "-" "Mozilla/5.0"
show less
Hacking
Web App Attack
🇺🇸
104.155.147.78
02 Jun 2026
104.155.147.78 - - [02/Jun/2026:10:30:00 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 239 "-" "Mozilla ...
show more
104.155.147.78 - - [02/Jun/2026:10:30:00 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
104.155.147.78 - - [02/Jun/2026:10:30:00 +0200] "GET //blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
104.155.147.78 - - [02/Jun/2026:10:30:00 +0200] "GET //web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
show less
Hacking
Web App Attack
🇺🇸
20.161.70.164
02 Jun 2026
20.161.70.164 - - [02/Jun/2026:11:51:25 +0200] "GET /.htpasswd HTTP/1.1" 301 466 "-" "Mozilla/5.0 (W ...
show more
20.161.70.164 - - [02/Jun/2026:11:51:25 +0200] "GET /.htpasswd HTTP/1.1" 301 466 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
20.161.70.164 - - [02/Jun/2026:11:51:27 +0200] "GET /backup.sql HTTP/1.1" 301 468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0"
20.161.70.164 - - [02/Jun/2026:11:51:32 +0200] "POST /___proxy_subdomain_whm/login/?login_only=1 HTTP/1.1" 404 3698 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0"
20.161.70.164 - - [02/Jun/2026:11:51:32 +0200] "GET /___proxy_subdomain_whm/login/ HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
show less
Hacking
Web App Attack
🇱🇺
64.89.161.29
02 Jun 2026
64.89.161.29 - - [02/Jun/2026:11:05:12 +0200] "GET /?query=SHOW+DATABASES HTTP/1.1" 200 1314 "-" "Mo ...
show more
64.89.161.29 - - [02/Jun/2026:11:05:12 +0200] "GET /?query=SHOW+DATABASES HTTP/1.1" 200 1314 "-" "Mozilla/5.0 (Linux i541 ) AppleWebKit/603.28 (KHTML, like Gecko) Chrome/48.0.3550.391 Safari/537"
64.89.161.29 - - [02/Jun/2026:11:05:12 +0200] "GET /?query=SHOW+TABLES HTTP/1.1" 200 1314 "-" "Mozilla/5.0 (Linux x86_64; en-US) AppleWebKit/536.29 (KHTML, like Gecko) Chrome/51.0.3043.249 Safari/535"
64.89.161.29 - - [02/Jun/2026:11:05:12 +0200] "GET /.htaccess HTTP/1.1" 403 420 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
64.89.161.29 - - [02/Jun/2026:11:05:13 +0200] "GET /.htpasswd HTTP/1.1" 403 420 "-" "Mozilla/5.0 (Linux; U; Linux x86_64) AppleWebKit/600.38 (KHTML, like Gecko) Chrome/52.0.3868.322 Safari/533"
64.89.161.29 - - [02/Jun/2026:11:05:13 +0200] "GET /env HTTP/1.1" 404 417 "-" "Mozilla/5.0 (Windows NT 10.5; x64; en-US) AppleWebKit/536.34 (KHTML, like Gecko) Chrome/54.0.1820.271 Safari/603"
show less
Hacking
Web App Attack