Secret/config-file recon: requested /.git/config. 171 HTTP request(s), 2026-11-02 09:11:39 to 09:12: ...
show moreSecret/config-file recon: requested /.git/config. 171 HTTP request(s), 2026-11-02 09:11:39 to 09:12:32 UTC (53s).
Requests (method path -> status xcount):
GET [site page] -> 404 x28
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 200
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
...+132 more distinct requests
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Secret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 08:43:02 to 08:43: ...
show moreSecret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 08:43:02 to 08:43:10 UTC (8s).
Requests (method path -> status xcount):
GET [site page] -> 404 x28
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 200
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
...+131 more distinct requests
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Secret/config-file recon: requested /.git/config. 154 HTTP request(s), 2026-11-02 08:21:43 to 08:22: ...
show moreSecret/config-file recon: requested /.git/config. 154 HTTP request(s), 2026-11-02 08:21:43 to 08:22:36 UTC (53s).
Requests (method path -> status xcount):
GET [site page] -> 404 x17
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 301
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
...+126 more distinct requests
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Secret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 07:48:46 to 07:49: ...
show moreSecret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 07:48:46 to 07:49:07 UTC (21s).
Requests (method path -> status xcount):
GET [site page] -> 404 x28
POST / -> 404 x4
GET /.[redacted] -> 404 x2
GET / -> 404
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
...+131 more distinct requests
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Secret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 07:31:41 to 07:32: ...
show moreSecret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 07:31:41 to 07:32:28 UTC (47s).
Requests (method path -> status xcount):
GET [site page] -> 404 x28
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 200
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
...+131 more distinct requests
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Secret/config-file recon: requested /.env.php.bak. 375 HTTP request(s), 2026-11-02 07:30:53 to 07:31 ...
show moreSecret/config-file recon: requested /.env.php.bak. 375 HTTP request(s), 2026-11-02 07:30:53 to 07:31:04 UTC (11s).
Requests (method path -> status xcount):
GET [site page] -> 301 x161
GET / -> 400 x15
GET /api/... -> 301 x11
POST [site page] -> 301 x2
GET /.[redacted] -> 301 x2
GET / -> 301
GET /.env.php.bak -> 301
GET /config/.env.php -> 301
...+181 more distinct requests
UA: DuckAssistBot/1.1 (https://[redacted]/duckassistbot) (+32 other UAs)
show less
Secret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 06:53:43 to 06:53: ...
show moreSecret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 06:53:43 to 06:53:52 UTC (9s).
Requests (method path -> status xcount):
GET [site page] -> 404 x28
POST / -> 404 x4
GET /.[redacted] -> 404 x2
GET / -> 404
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
...+131 more distinct requests
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Secret/config-file recon: requested /.env.production.local. 23 HTTP request(s), 2026-11-02 06:31:35 ...
show moreSecret/config-file recon: requested /.env.production.local. 23 HTTP request(s), 2026-11-02 06:31:35 to 06:31:37 UTC (2s).
Requests (method path -> status xcount):
GET [site page] -> 301 x10
GET / -> 301
GET /.env.production.local -> 301
GET /.env.credentials -> 301
GET /.env.testing -> 301
GET /.env.development.local -> 301
GET /.env.prod.local -> 301
GET /.env.secret -> 301
...+6 more distinct requests
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 (+17 other UAs)
show less
Secret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 05:07:45 to 05:07: ...
show moreSecret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 05:07:45 to 05:07:52 UTC (7s).
Requests (method path -> status xcount):
GET [site page] -> 404 x28
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 200
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
...+131 more distinct requests
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
WordPress credential brute-force: 10 POST login attempts, 0 successful logins, in 24h. Activity 2026 ...
show moreWordPress credential brute-force: 10 POST login attempts, 0 successful logins, in 24h. Activity 2026-11-02 03:44:39 to 04:46:25 UTC (61m46s).
Sample of 10 requests (method path -> status xcount):
POST /wp-login.php -> 200 x9
GET /wp-login.php -> 200
UA: Mozilla/5.0
show less
Secret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 04:44:35 to 04:44: ...
show moreSecret/config-file recon: requested /.git/config. 170 HTTP request(s), 2026-11-02 04:44:35 to 04:44:58 UTC (23s).
Requests (method path -> status xcount):
GET [site page] -> 404 x28
POST / -> 200 x4
GET /.[redacted] -> 404 x2
GET / -> 200
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
...+131 more distinct requests
UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
WordPress credential brute-force: 22 POST login attempts, 0 successful logins, in 24h. Activity 2026 ...
show moreWordPress credential brute-force: 22 POST login attempts, 0 successful logins, in 24h. Activity 2026-11-02 04:21:26 to 04:34:21 UTC (12m55s).
Sample of 12 requests (method path -> status xcount):
POST /wp-login.php -> 200 x11
GET /wp-login.php -> 200
UA: Mozilla/5.0
show less
WordPress login-endpoint abuse: 10 GET requests to auth endpoints, 0 successful logins, in 24h. 82 H ...
show moreWordPress login-endpoint abuse: 10 GET requests to auth endpoints, 0 successful logins, in 24h. 82 HTTP request(s), 2026-11-02 04:14:27 to 04:14:35 UTC (8s).
Requests (method path -> status xcount):
GET /wp-content/... -> 200 x56
GET [site page] -> 200 x6
GET /wp-includes/... -> 200 x6
GET / -> 200 x3
GET [site page] -> 301 x3
GET / -> 301 x2
GET /wp-json/oembed/1.0/embed?url=https://[redacted]/ -> 200
GET /wp-json/oembed/1.0/embed?url=https://[redacted]/&format=xml -> 200
...+4 more distinct requests
UA: Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Mobile Safari/537.36
show less
Secret/config-file recon: requested /.env. 3 HTTP request(s), 2026-11-02 04:16:18 to 04:16:32 UTC (1 ...
show moreSecret/config-file recon: requested /.env. 3 HTTP request(s), 2026-11-02 04:16:18 to 04:16:32 UTC (14s).
Requests (method path -> status xcount):
GET / -> 200
GET /.env -> 404
GET [site page] -> 200
UA: curl/8.14.1
show less
WordPress credential brute-force: 85 POST login attempts, 0 successful logins, in 24h. 85 HTTP reque ...
show moreWordPress credential brute-force: 85 POST login attempts, 0 successful logins, in 24h. 85 HTTP request(s), 2026-11-01 02:33:59 to 07:54:08 UTC (320m09s).
Requests (method path -> status xcount):
POST /wp-login.php -> 200 x83
POST /wp-json/batch/v1 -> 207 x2
UA: Mozilla/5.0 (+1 other UAs)
show less
WordPress credential brute-force: 53 POST login attempts, 0 successful logins, in 24h. 53 HTTP reque ...
show moreWordPress credential brute-force: 53 POST login attempts, 0 successful logins, in 24h. 53 HTTP request(s), 2026-11-01 02:32:09 to 09:03:46 UTC (391m37s).
Requests (method path -> status xcount):
POST /wp-login.php -> 200 x53
UA: Mozilla/5.0
show less
WordPress credential brute-force: 86 POST login attempts, 0 successful logins, in 24h. 86 HTTP reque ...
show moreWordPress credential brute-force: 86 POST login attempts, 0 successful logins, in 24h. 86 HTTP request(s), 2026-11-01 02:33:17 to 08:44:19 UTC (371m02s).
Requests (method path -> status xcount):
POST /wp-login.php -> 200 x84
POST /wp-json/batch/v1 -> 207 x2
UA: Mozilla/5.0 (+1 other UAs)
show less
Secret/config-file recon: requested /.git/config. 335 HTTP request(s), 2026-11-02 01:43:53 to 01:45: ...
show moreSecret/config-file recon: requested /.git/config. 335 HTTP request(s), 2026-11-02 01:43:53 to 01:45:37 UTC (1m44s).
Requests (method path -> status xcount):
GET [site page] -> 301 x28
GET [site page] -> 404 x28
POST / -> 200 x4
GET /.[redacted] -> 301 x2
GET /.[redacted] -> 404 x2
GET / -> 301
GET /.git/config -> 301
GET /.git/config -> 404
...+268 more distinct requests
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Secret/config-file recon: requested /.git/config. 277 HTTP request(s), 2026-11-02 00:55:36 to 00:56: ...
show moreSecret/config-file recon: requested /.git/config. 277 HTTP request(s), 2026-11-02 00:55:36 to 00:56:18 UTC (42s).
Requests (method path -> status xcount):
GET [site page] -> 404 x57
POST / -> 200 x4
GET / -> 200 x2
GET /.[redacted] -> 404 x2
GET [site page] -> 403 x2
GET /.git/config -> 403
GET /.env -> 403
GET /.env.local -> 404
...+207 more distinct requests
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 (+1 other UAs)
show less
HackingBad Web BotWeb App Attack
By clicking โAccept allโ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.