|
๐ง๐ช
34.22.159.76
|
|
34.22.159.76 - - [13/Nov/2026:12:02:58 +0100] "GET /.env~ HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windo ...
show more
34.22.159.76 - - [13/Nov/2026:12:02:58 +0100] "GET /.env~ HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.159.76 - - [13/Nov/2026:12:02:58 +0100] "GET /.env.backup HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.159.76 - - [13/Nov/2026:12:02:58 +0100] "GET /.env.production HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐ง๐ท
35.199.99.80
|
|
35.199.99.80 - - [12/Nov/2026:23:19:41 +0100] "GET /apps/.env HTTP/1.1" 401 172 "-" "Mozilla/5.0 (co ...
show more
35.199.99.80 - - [12/Nov/2026:23:19:41 +0100] "GET /apps/.env HTTP/1.1" 401 172 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
35.199.99.80 - - [12/Nov/2026:23:19:41 +0100] "GET /old/.env HTTP/1.1" 401 172 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.199.99.80 - - [12/Nov/2026:23:19:41 +0100] "GET /site/.env HTTP/1.1" 401 172 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
|
Hacking
Web App Attack
|
|
๐ง๐ช
34.22.146.232
|
|
34.22.146.232 - - [12/Nov/2026:12:23:39 +0100] "GET /project/.env HTTP/1.1" 404 1898 "-" "Mozilla/5. ...
show more
34.22.146.232 - - [12/Nov/2026:12:23:39 +0100] "GET /project/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.146.232 - - [12/Nov/2026:12:23:39 +0100] "GET /html/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.22.146.232 - - [12/Nov/2026:12:23:39 +0100] "GET /site/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐ง๐ช
35.195.85.59
|
|
35.195.85.59 - - [11/Nov/2026:13:32:30 +0100] "GET /.env.anthropic HTTP/1.1" 404 1898 "-" "Mozilla/5 ...
show more
35.195.85.59 - - [11/Nov/2026:13:32:30 +0100] "GET /.env.anthropic HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [11/Nov/2026:13:32:30 +0100] "GET /.aws/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
35.195.85.59 - - [11/Nov/2026:13:32:30 +0100] "GET /.docker/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐ฎ๐ฑ
20.217.195.13
|
|
20.217.195.13 - - [10/Nov/2026:19:38:07 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.217.195.13 - - [10/Nov/2026:19:38:07 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1898 "-" "-"
20.217.195.13 - - [10/Nov/2026:19:38:11 +0100] "GET /alfa.php HTTP/1.1" 404 1898 "-" "-"
20.217.195.13 - - [10/Nov/2026:19:38:13 +0100] "GET /wp-content/uploads/ HTTP/1.1" 404 1898 "-" "-"
...
show less
|
Hacking
Web App Attack
|
|
๐ง๐ช
34.79.135.70
|
|
34.79.135.70 - - [10/Nov/2026:12:14:49 +0100] "GET /dev/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Wi ...
show more
34.79.135.70 - - [10/Nov/2026:12:14:49 +0100] "GET /dev/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐ซ๐ท
185.177.72.49
|
|
185.177.72.49 - - [10/Nov/2026:09:48:57 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin ...
show more
185.177.72.49 - - [10/Nov/2026:09:48:57 +0100] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1898 "-" "curl/8.7.1"
185.177.72.49 - - [10/Nov/2026:09:48:57 +0100] "POST /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 1898 "-" "curl/8.7.1"
185.177.72.49 - - [10/Nov/2026:09:48:57 +0100] "POST /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1898 "-" "curl/8.7.1"
...
show less
|
Hacking
Web App Attack
|
|
๐ซ๐ท
185.177.72.205
|
|
185.177.72.205 - - [10/Nov/2026:09:45:55 +0100] "GET /aws/s3/env.env HTTP/1.1" 404 1898 "-" "curl/8. ...
show more
185.177.72.205 - - [10/Nov/2026:09:45:55 +0100] "GET /aws/s3/env.env HTTP/1.1" 404 1898 "-" "curl/8.7.1"
185.177.72.205 - - [10/Nov/2026:09:45:56 +0100] "GET /aws_s3_config.json HTTP/1.1" 404 1898 "-" "curl/8.7.1"
185.177.72.205 - - [10/Nov/2026:09:45:56 +0100] "GET /s3/.aws/config HTTP/1.1" 404 1898 "-" "curl/8.7.1"
...
show less
|
Hacking
Web App Attack
|
|
๐ซ๐ฎ
34.88.53.171
|
|
34.88.53.171 - - [10/Nov/2026:05:56:52 +0100] "GET /.git/config HTTP/1.1" 404 1898 "-" "Mozilla/5.0 ...
show more
34.88.53.171 - - [10/Nov/2026:05:56:52 +0100] "GET /.git/config HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.53.171 - - [10/Nov/2026:05:56:53 +0100] "GET /.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.53.171 - - [10/Nov/2026:05:56:53 +0100] "GET /.env.local HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐ฟ๐ฆ
20.87.24.214
|
|
20.87.24.214 - - [09/Nov/2026:13:16:23 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
20.87.24.214 - - [09/Nov/2026:13:16:23 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1898 "-" "-"
20.87.24.214 - - [09/Nov/2026:13:16:27 +0100] "GET /wp-content/themes/index.php HTTP/1.1" 404 1898 "-" "-"
20.87.24.214 - - [09/Nov/2026:13:16:28 +0100] "GET /alfa.php HTTP/1.1" 404 1898 "-" "-"
...
show less
|
Hacking
Web App Attack
|
|
๐ฟ๐ฆ
4.168.232.22
|
|
4.168.232.22 - - [08/Nov/2026:23:09:59 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
4.168.232.22 - - [08/Nov/2026:23:09:59 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1898 "-" "-"
4.168.232.22 - - [08/Nov/2026:23:10:04 +0100] "GET /wp-content/languages/plugins/index.php HTTP/1.1" 404 1898 "-" "-"
4.168.232.22 - - [08/Nov/2026:23:10:05 +0100] "GET /wp-includes/css/index.php HTTP/1.1" 404 1898 "-" "-"
...
show less
|
Hacking
Web App Attack
|
|
๐ง๐ช
34.77.99.151
|
|
34.77.99.151 - - [08/Nov/2026:23:00:38 +0100] "GET /.aws/credentials HTTP/1.1" 404 1898 "-" "Mozilla ...
show more
34.77.99.151 - - [08/Nov/2026:23:00:38 +0100] "GET /.aws/credentials HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.77.99.151 - - [08/Nov/2026:23:00:38 +0100] "GET /.env-example HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.77.99.151 - - [08/Nov/2026:23:00:38 +0100] "GET /.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐บ๐ธ
45.45.237.65
|
|
Mini-SOC HIGH automated vulnerability scanner | jail=nginx-fake-searchbots | evidence: 45.45.237.65 ...
show more
Mini-SOC HIGH automated vulnerability scanner | jail=nginx-fake-searchbots | evidence: 45.45.237.65 - - [08/Nov/2026:15:30:24 +0100] "GET /.git/config HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/bot)" || 45.45.237.65 - - [08/Nov/2026:15:30:24 +0100] "GET /.git/HEAD HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)" || 45.45.237.65 - - [08/Nov/2026:15:30:25 +0100] "GET /.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" ||
show less
|
Bad Web Bot
Web App Attack
|
|
๐ฎ๐น
172.213.9.3
|
|
172.213.9.3 - - [08/Nov/2026:05:46:14 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
172.213.9.3 - - [08/Nov/2026:05:46:14 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1898 "-" "-"
172.213.9.3 - - [08/Nov/2026:05:46:15 +0100] "GET /wp-admin/css/about.php HTTP/1.1" 404 1898 "-" "-"
172.213.9.3 - - [08/Nov/2026:05:46:15 +0100] "GET /wp-content/about.php HTTP/1.1" 404 1898 "-" "-"
...
show less
|
Hacking
Web App Attack
|
|
๐บ๐ธ
52.179.208.167
|
|
52.179.208.167 - - [08/Nov/2026:04:47:10 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
52.179.208.167 - - [08/Nov/2026:04:47:10 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1898 "-" "-"
52.179.208.167 - - [08/Nov/2026:04:47:10 +0100] "GET /kerang.php HTTP/1.1" 404 1898 "-" "-"
52.179.208.167 - - [08/Nov/2026:04:47:12 +0100] "GET /shellerr.php HTTP/1.1" 404 1898 "-" "-"
...
show less
|
Hacking
Web App Attack
|
|
๐ง๐ช
34.79.135.70
|
|
34.79.135.70 - - [08/Nov/2026:01:44:49 +0100] "GET /.aws/credentials.bak HTTP/1.1" 404 1898 "-" "Moz ...
show more
34.79.135.70 - - [08/Nov/2026:01:44:49 +0100] "GET /.aws/credentials.bak HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.135.70 - - [08/Nov/2026:01:44:49 +0100] "GET /.aws/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.135.70 - - [08/Nov/2026:01:44:49 +0100] "GET /.docker/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐ง๐ช
35.195.245.38
|
|
35.195.245.38 - - [07/Nov/2026:20:32:59 +0100] "GET /dev/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (W ...
show more
35.195.245.38 - - [07/Nov/2026:20:32:59 +0100] "GET /dev/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐จ๐ญ
172.161.40.129
|
|
172.161.40.129 - - [07/Nov/2026:19:57:19 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.p ...
show more
172.161.40.129 - - [07/Nov/2026:19:57:19 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 1898 "-" "-"
172.161.40.129 - - [07/Nov/2026:19:57:19 +0100] "GET /zwso.php HTTP/1.1" 404 1898 "-" "-"
172.161.40.129 - - [07/Nov/2026:19:57:19 +0100] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 404 1898 "-" "-"
...
show less
|
Hacking
Web App Attack
|
|
๐บ๐ธ
192.178.15.40
|
|
192.178.15.40 - - [07/Nov/2026:00:17:25 +0100] "GET /dev/cgpt.php HTTP/1.1" 404 1898 "-" "Mozilla/5. ...
show more
192.178.15.40 - - [07/Nov/2026:00:17:25 +0100] "GET /dev/cgpt.php HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36 (compatible; Google-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)"
...
show less
|
Hacking
Web App Attack
|
|
๐ณ๐ฑ
66.249.81.231
|
|
66.249.81.231 - - [07/Nov/2026:00:17:25 +0100] "GET /dev/cgpt.php HTTP/1.1" 404 1898 "-" "Mozilla/5. ...
show more
66.249.81.231 - - [07/Nov/2026:00:17:25 +0100] "GET /dev/cgpt.php HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Mobile Safari/537.36 (compatible; Google-Read-Aloud; +https://support.google.com/webmasters/answer/1061943)"
...
show less
|
Hacking
Web App Attack
|
|
๐ต๐ฑ
2a00:f41:190c:a20c:4d08:2a70:bfd3:d317
|
|
2a00:f41:190c:a20c:4d08:2a70:bfd3:d317 - - [07/Nov/2026:00:17:23 +0100] "GET /dev/cgpt.php HTTP/1.1" ...
show more
2a00:f41:190c:a20c:4d08:2a70:bfd3:d317 - - [07/Nov/2026:00:17:23 +0100] "GET /dev/cgpt.php HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/156.0.0.0 Safari/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐ฑ๐น
77.90.185.122
|
|
77.90.185.122 - - [06/Nov/2026:19:05:30 +0100] "GET /.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windo ...
show more
77.90.185.122 - - [06/Nov/2026:19:05:30 +0100] "GET /.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 6.2; rv:36.0) Gecko/20100101 Firefox/36.0"
77.90.185.122 - - [06/Nov/2026:19:05:31 +0100] "GET /phpinfo/ HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 6.2; rv:36.0) Gecko/20100101 Firefox/36.0"
77.90.185.122 - - [06/Nov/2026:19:05:31 +0100] "GET /dev/.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (Windows NT 6.2; rv:36.0) Gecko/20100101 Firefox/36.0"
...
show less
|
Hacking
Web App Attack
|
|
๐ณ๐ฑ
34.7.141.195
|
|
34.7.141.195 - - [06/Nov/2026:10:43:02 +0100] "GET /.git/config HTTP/1.1" 404 1898 "-" "Mozilla/5.0 ...
show more
34.7.141.195 - - [06/Nov/2026:10:43:02 +0100] "GET /.git/config HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.7.141.195 - - [06/Nov/2026:10:43:02 +0100] "GET /.env HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.7.141.195 - - [06/Nov/2026:10:43:02 +0100] "GET /.env.local HTTP/1.1" 404 1898 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Hacking
Web App Attack
|
|
๐บ๐ธ
34.168.59.58
|
|
34.168.59.58 - - [05/Nov/2026:21:24:39 +0100] "GET /.env.prod.local HTTP/1.1" 401 172 "-" "DuckAssis ...
show more
34.168.59.58 - - [05/Nov/2026:21:24:39 +0100] "GET /.env.prod.local HTTP/1.1" 401 172 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.168.59.58 - - [05/Nov/2026:21:24:39 +0100] "GET /.env.supabase HTTP/1.1" 401 172 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.168.59.58 - - [05/Nov/2026:21:24:39 +0100] "GET /.env.keys HTTP/1.1" 401 172 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected])"
...
show less
|
Hacking
Web App Attack
|
|
๐บ๐ธ
34.173.71.7
|
|
34.173.71.7 - - [05/Nov/2026:16:33:42 +0100] "GET /.docker/config.json HTTP/1.1" 401 574 "-" "Mozill ...
show more
34.173.71.7 - - [05/Nov/2026:16:33:42 +0100] "GET /.docker/config.json HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.173.71.7 - - [05/Nov/2026:16:33:43 +0100] "GET /.docker/config.json HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.173.71.7 - - [05/Nov/2026:16:33:51 +0100] "GET /backend/.env HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Hacking
Web App Attack
|