🇩🇪
213.209.159.133
18 hours ago
Scanning for .env
213.209.159.133 - - [01/Nov/2026:06:31:29 +0000] "GET /.env.bak HTTP/1.1" 500 4 " ...
show more
Scanning for .env
213.209.159.133 - - [01/Nov/2026:06:31:29 +0000] "GET /.env.bak HTTP/1.1" 500 4 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
213.209.159.133 - - [01/Nov/2026:06:31:29 +0000] "GET /api/.env HTTP/1.1" 500 4 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
213.209.159.133 - - [01/Nov/2026:06:31:29 +0000] "GET /.env.dev HTTP/1.1" 500 4 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
show less
Web App Attack
🇳🇱
45.115.26.203
18 hours ago
Scanning for .env
45.115.26.203 - - [01/Nov/2026:08:31:33 +0000] "GET /backend/.env HTTP/1.1" 500 4 ...
show more
Scanning for .env
45.115.26.203 - - [01/Nov/2026:08:31:33 +0000] "GET /backend/.env HTTP/1.1" 500 4 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [01/Nov/2026:08:31:33 +0000] "GET /.env~ HTTP/1.1" 500 4 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
45.115.26.203 - - [01/Nov/2026:08:31:33 +0000] "GET /.env.swp HTTP/1.1" 500 4 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36"
show less
Web App Attack
🇵🇱
45.138.12.51
22 Oct 2026
Scans for vulnerabilities, repeat offender
45.138.12.51 - - [22/Oct/2026:02:31:34 +0000] "GET /.svn ...
show more
Scans for vulnerabilities, repeat offender
45.138.12.51 - - [22/Oct/2026:02:31:34 +0000] "GET /.svn/entries HTTP/1.1" 404 1 "-" "l9explore/1.2.2"
45.138.12.51 - - [22/Oct/2026:02:31:34 +0000] "GET /sftp.json HTTP/1.1" 404 1 "-" "l9explore/1.2.2"
45.138.12.51 - - [22/Oct/2026:02:31:34 +0000] "GET /.env.production HTTP/1.1" 404 1 "-" "l9explore/1.2.2"
show less
Bad Web Bot
Web App Attack
🇺🇸
64.181.199.73
21 Oct 2026
Scans for vulnerable git files
64.181.199.73 - - [21/Oct/2026:19:03:43 +0300] "GET /.git/info/refs ...
show more
Scans for vulnerable git files
64.181.199.73 - - [21/Oct/2026:19:03:43 +0300] "GET /.git/info/refs HTTP/1.1" 500 4 "-" "WebSiphon/next-0.1"
64.181.199.73 - - [21/Oct/2026:19:03:43 +0300] "GET /app/.git/refs/heads/main HTTP/1.1" 500 4 "-" "WebSiphon/next-0.1"
64.181.199.73 - - [21/Oct/2026:19:03:43 +0300] "GET /.git/config HTTP/1.1" 500 4 "-" "WebSiphon/next-0.1"
show less
Web App Attack
🇺🇸
147.224.205.138
21 Oct 2026
Scanning for vulnerable git files
147.224.205.138 - - [21/Oct/2026:19:02:04 +0300] "GET /.git/COMMI ...
show more
Scanning for vulnerable git files
147.224.205.138 - - [21/Oct/2026:19:02:04 +0300] "GET /.git/COMMIT_EDITMSG HTTP/1.1" 500 4 "-" "WebSiphon/next-0.1"
147.224.205.138 - - [21/Oct/2026:19:02:04 +0300] "GET /app/.git/config.worktree HTTP/1.1" 500 4 "-" "WebSiphon/next-0.1"
147.224.205.138 - - [21/Oct/2026:19:02:04 +0300] "GET /.git/config.worktree HTTP/1.1" 500 4 "-" "WebSiphon/next-0.1"
show less
Web App Attack
🇺🇸
163.192.195.95
21 Oct 2026
Scanning for vulnerabilities, sends hundreds of requests per second
163.192.195.95 - - [21/Oct/2026 ...
show more
Scanning for vulnerabilities, sends hundreds of requests per second
163.192.195.95 - - [21/Oct/2026:15:01:00 +0000] "GET /.git/refs/heads/main HTTP/1.1" 404 1 "-" "WebSiphon/next-0.1"
163.192.195.95 - - [21/Oct/2026:15:01:00 +0000] "GET /api/.git/refs/heads/master HTTP/1.1" 404 1 "-" "WebSiphon/next-0.1"
163.192.195.95 - - [21/Oct/2026:15:01:00 +0000] "GET /server/.git/logs/HEAD HTTP/1.1" 404 1 "-" "WebSiphon/next-0.1"
show less
Bad Web Bot
Web App Attack
🇧🇷
104.234.186.154
20 Oct 2026
Scanning for vulnerable phpunit
104.234.186.154 - - [20/Oct/2026:05:06:58 +0000] "GET /public/vendo ...
show more
Scanning for vulnerable phpunit
104.234.186.154 - - [20/Oct/2026:05:06:58 +0000] "GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1 "-" "libredtail-http"
104.234.186.154 - - [20/Oct/2026:05:06:58 +0000] "GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1 "-" "libredtail-http"
104.234.186.154 - - [20/Oct/2026:05:06:59 +0000] "GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 1 "-" "libredtail-http"
show less
Bad Web Bot
Web App Attack
🇧🇪
34.62.116.145
20 Oct 2026
Scanning for vulnerabilities, sends about 50 requests per second using HTTP/2
34.62.116.145 - - [20 ...
show more
Scanning for vulnerabilities, sends about 50 requests per second using HTTP/2
34.62.116.145 - - [20/Oct/2026:05:25:21 +0000] "GET /.git/config HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.116.145 - - [20/Oct/2026:05:25:21 +0000] "GET /api/.env HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.116.145 - - [20/Oct/2026:05:25:21 +0000] "GET /core/.env HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
34.181.234.204
16 Oct 2026
Has issued about 6000 requests for non-existing URLs using HTTP/2, repeat offender
34.181.234.204 - ...
show more
Has issued about 6000 requests for non-existing URLs using HTTP/2, repeat offender
34.181.234.204 - - [16/Oct/2026:05:19:42 +0000] "POST /admin HTTP/2.0" 500 4 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.181.234.204 - - [16/Oct/2026:05:19:43 +0000] "POST /dashboard HTTP/2.0" 500 4 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.181.234.204 - - [16/Oct/2026:05:19:44 +0000] "POST /icecoder/lib/file-control.php HTTP/2.0" 404 4 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
show less
Bad Web Bot
Web App Attack
🇰🇷
20.194.17.163
14 Oct 2026
Sends hundreds of requests to non-existing pages, repeat offender
20.194.17.163 - - [14/Oct/2026:18 ...
show more
Sends hundreds of requests to non-existing pages, repeat offender
20.194.17.163 - - [14/Oct/2026:18:38:38 +0000] "GET /wp-content/about.php HTTP/1.1" 404 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.194.17.163 - - [14/Oct/2026:18:38:38 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.194.17.163 - - [14/Oct/2026:18:38:40 +0000] "GET /wp-content/languages/index.php HTTP/1.1" 404 1 "-" "Mozilla/5.0 (Windows NT 10.0; W
in64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇳🇱
159.223.236.5
13 Oct 2026
Scanning for vulnerable files
159.223.236.5 - - [13/Oct/2026:03:35:20 +0000] "GET /.git/config HTTP ...
show more
Scanning for vulnerable files
159.223.236.5 - - [13/Oct/2026:03:35:20 +0000] "GET /.git/config HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
159.223.236.5 - - [13/Oct/2026:03:35:20 +0000] "GET /.env HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
159.223.236.5 - - [13/Oct/2026:03:35:20 +0000] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
show less
Web App Attack
🇧🇪
34.78.213.249
13 Oct 2026
Scanning for vulnerable configuration files using HTTP/2, sends over 100 requests per second
34.78. ...
show more
Scanning for vulnerable configuration files using HTTP/2, sends over 100 requests per second
34.78.213.249 - - [13/Oct/2026:04:28:55 +0000] "GET /.env.aws HTTP/2.0" 404 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.78.213.249 - - [13/Oct/2026:04:28:55 +0000] "GET /.aws/.env HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.78.213.249 - - [13/Oct/2026:04:28:55 +0000] "GET /.aws/config HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Bad Web Bot
Web App Attack
🇮🇳
35.207.214.29
05 Oct 2026
Scans for vulnerable credentials
35.207.214.29 - - [05/Oct/2026:05:41:54 +0000] "GET /graphql/.env ...
show more
Scans for vulnerable credentials
35.207.214.29 - - [05/Oct/2026:05:41:54 +0000] "GET /graphql/.env HTTP/1.1" 404 1 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.207.214.29 - - [05/Oct/2026:05:41:54 +0000] "GET /gateway/.env HTTP/1.1" 404 1 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.207.214.29 - - [05/Oct/2026:05:41:54 +0000] "GET /microservice/.env HTTP/1.1" 404 1 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.207.214.29 - - [05/Oct/2026:05:41:55 +0000] "GET /api/v3/.env HTTP/1.1" 404 1 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
🇧🇪
34.79.59.9
05 Oct 2026
Scans for vulnerabilities, sends over 100 requests per second
34.79.59.9 - - [05/Oct/2026:02:43:16 ...
show more
Scans for vulnerabilities, sends over 100 requests per second
34.79.59.9 - - [05/Oct/2026:02:43:16 +0000] "GET /api/.env HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [05/Oct/2026:02:43:16 +0000] "GET /admin/.env HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.79.59.9 - - [05/Oct/2026:02:43:16 +0000] "GET /.aws/credentials.bak HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Bad Web Bot
Web App Attack
🇳🇱
104.23.166.21
29 Sep 2026
Scanning for vulnerabilities
104.23.166.21 - - [29/Sep/2026:07:08:29 +0000] "GET /.git/HEAD HTTP/2. ...
show more
Scanning for vulnerabilities
104.23.166.21 - - [29/Sep/2026:07:08:29 +0000] "GET /.git/HEAD HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15"
104.23.166.21 - - [29/Sep/2026:07:08:29 +0000] "GET /.svn/entries HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
104.23.166.21 - - [29/Sep/2026:07:08:45 +0000] "GET /wp-config.php.bak HTTP/2.0" 500 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
show less
Web App Attack
🇳🇱
104.23.166.20
29 Sep 2026
Scanning for vulnerabilities
104.23.166.20 - - [29/Sep/2026:07:08:21 +0000] "GET /.env HTTP/2.0" 50 ...
show more
Scanning for vulnerabilities
104.23.166.20 - - [29/Sep/2026:07:08:21 +0000] "GET /.env HTTP/2.0" 500 4 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Mobile/15E148 Safari/604.1"
104.23.166.20 - - [29/Sep/2026:07:08:21 +0000] "GET /.env.local HTTP/2.0" 500 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
104.23.166.20 - - [29/Sep/2026:07:08:37 +0000] "GET /.ssh/id_rsa HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
104.23.166.20 - - [29/Sep/2026:07:08:37 +0000] "GET /.aws/credentials HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36 Edg/122.0.0.0"
show less
Web App Attack
🇩🇪
94.154.46.246
29 Sep 2026
Scans for vulnerabilities
94.154.46.246 - - [29/Sep/2026:08:26:22 +0000] "GET /wp-config.bak HTTP/1 ...
show more
Scans for vulnerabilities
94.154.46.246 - - [29/Sep/2026:08:26:22 +0000] "GET /wp-config.bak HTTP/1.1" 404 4 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.246 - - [29/Sep/2026:08:26:22 +0000] "GET /.git/HEAD HTTP/1.1" 500 4 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
94.154.46.246 - - [29/Sep/2026:08:26:22 +0000] "GET /.dockerenv HTTP/1.1" 500 4 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
show less
Bad Web Bot
Web App Attack
🇳🇱
45.138.12.52
24 Sep 2026
Scans for vulnerable files, repeat offender, has issued about 400 request in past few days
45.138.1 ...
show more
Scans for vulnerable files, repeat offender, has issued about 400 request in past few days
45.138.12.52 - - [24/Sep/2026:16:37:02 +0000] "GET /dump.sql HTTP/2.0" 404 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [24/Sep/2026:16:37:03 +0000] "GET /.aws/env.bak HTTP/2.0" 404 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
45.138.12.52 - - [24/Sep/2026:16:37:03 +0000] "GET /actuator/env HTTP/2.0" 200 458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
34.26.120.174
10 Sep 2026
Scanning for secrets
34.26.120.174 - - [10/Sep/2026:07:37:21 +0000] "GET /@fs/.env?raw?? HTTP/1.1" ...
show more
Scanning for secrets
34.26.120.174 - - [10/Sep/2026:07:37:21 +0000] "GET /@fs/.env?raw?? HTTP/1.1" 500 4 "-" "Mozilla/5.0 (compatible; LinkedInBot/1.0; +http://www.linkedin.com)"
34.26.120.174 - - [10/Sep/2026:07:37:21 +0000] "GET /@fs/../.env?raw?? HTTP/1.1" 500 4 "-" "Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
34.26.120.174 - - [10/Sep/2026:07:37:21 +0000] "GET /@fs/app/.env?raw?? HTTP/1.1" 500 4 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Bytespider; +https://zhanzhang.toutiao.com/"
show less
Web App Attack
🇳🇱
45.148.10.120
10 Sep 2026
Scans for vulnerabilities, issues requests to multiple hosts over several hours and days
45.148.10. ...
show more
Scans for vulnerabilities, issues requests to multiple hosts over several hours and days
45.148.10.120 - - [10/Sep/2026:06:22:32 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 4 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/13.0"
45.148.10.120 - - [10/Sep/2026:06:22:32 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 500 4 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.5 Safari/605.1.15"
45.148.10.120 - - [10/Sep/2026:07:51:04 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 4 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36"
45.148.10.120 - - [10/Sep/2026:08:11:30 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 500 4 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0"
show less
Web App Attack
🇺🇸
104.129.1.194
07 Sep 2026
Scanning for vulnerabilities
104.129.1.194 - - [07/Sep/2026:06:22:14 +0000] "POST /cgi-bin/.%2e/.%2 ...
show more
Scanning for vulnerabilities
104.129.1.194 - - [07/Sep/2026:06:22:14 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 1 "-" "libredtail-http"
104.129.1.194 - - [07/Sep/2026:06:22:14 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 1 "-" "libredtail-http"
104.129.1.194 - - [07/Sep/2026:06:22:15 +0000] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 405 1 "-" "libredtail-http"
show less
Web App Attack
🇺🇸
35.227.64.102
03 Sep 2026
Sends hundreds of requests with HTTP/2 trying to exploit various configuration files, repeat offende ...
show more
Sends hundreds of requests with HTTP/2 trying to exploit various configuration files, repeat offender
35.227.64.102 - - [03/Sep/2026:12:25:23 +0000] "GET /storage/logs/laravel.log HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
35.227.64.102 - - [03/Sep/2026:12:25:23 +0000] "GET /@fs/.env?raw&url?? HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
35.227.64.102 - - [03/Sep/2026:12:25:23 +0000] "GET /wp-config.php.old HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
show less
Bad Web Bot
Web App Attack
🇯🇵
136.110.82.111
01 Sep 2026
Scanning for vulnerable deployments
136.110.82.111 - - [01/Sep/2026:09:48:37 +0000] "GET /site/.git ...
show more
Scanning for vulnerable deployments
136.110.82.111 - - [01/Sep/2026:09:48:37 +0000] "GET /site/.git/config HTTP/1.1" 500 4 "-" "crusader-worker/1.0"
136.110.82.111 - - [01/Sep/2026:09:48:37 +0000] "GET /.git/config HTTP/1.1" 500 4 "-" "crusader-worker/1.0"
136.110.82.111 - - [01/Sep/2026:09:48:37 +0000] "GET /html/.git/config HTTP/1.1" 500 4 "-" "crusader-worker/1.0"
show less
Web App Attack
🇳🇱
93.123.109.228
01 Sep 2026
Scanning for vulnerabilities, hundreds of requests per second
93.123.109.228 - - [01/Sep/2026:00:36 ...
show more
Scanning for vulnerabilities, hundreds of requests per second
93.123.109.228 - - [01/Sep/2026:00:36:35 +0000] "GET /.amplifyrc HTTP/2.0" 404 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
93.123.109.228 - - [01/Sep/2026:00:36:35 +0000] "GET /.aws/credentials HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0"
93.123.109.228 - - [01/Sep/2026:00:36:35 +0000] "GET /.docker/.env HTTP/2.0" 500 4 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇨🇦
20.48.179.39
29 Aug 2026
Scanning for vulnerable scripts, makes dozens of requests per second
20.48.179.39 - - [29/Aug/2026: ...
show more
Scanning for vulnerable scripts, makes dozens of requests per second
20.48.179.39 - - [29/Aug/2026:10:24:23 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4 "-" "-"
20.48.179.39 - - [29/Aug/2026:10:24:23 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 4 "-" "-"
20.48.179.39 - - [29/Aug/2026:10:24:24 +0000] "GET /robots.php HTTP/1.1" 404 4 "-" "-"
20.48.179.39 - - [29/Aug/2026:10:24:25 +0000] "GET /k.php HTTP/1.1" 404 4 "-" "-"
show less
Bad Web Bot
Web App Attack