|
π³π±
195.178.110.223
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 20000 lines.
Sample log lines:
195.178.110.223 - - [07/Jun/2026:20:27:29 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/13\n195.178.110.223 - - [07/Jun/2026:20:27:29 +0200] "GET /.env.bak HTTP/1.1" 403 195 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ch\n195.178.110.223 - - [07/Jun/2026:20:27:29 +0200] "GET /.env.save HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li\n195.178.110.223 - - [07/Jun/2026:20:27:29 +0200] "GET /.env.backup HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko\n195.178.110.223 - - [07/Jun/2026:20:27:29 +0200] "GET /backend/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Fi\n195.178.110.223 - - [07/Jun/2026:20:27:29 +0200] "GET /admi
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π΅π±
143.20.97.215
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 20000 lines.
Sample log lines:
143.20.97.215 - - [06/Jun/2026:06:21:29 +0200] "GET /vault.env HTTP/2.0" 403 123 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/supp\n143.20.97.215 - - [06/Jun/2026:06:21:40 +0200] "GET /.git/config HTTP/2.0" 404 3440 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/s\n143.20.97.215 - - [06/Jun/2026:06:21:40 +0200] "GET /.env HTTP/2.0" 403 123 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)"\n143.20.97.215 - - [06/Jun/2026:06:21:43 +0200] "GET /.env.production HTTP/2.0" 404 3440 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Per\n143.20.97.215 - - [06/Jun/2026:06:21:43 +0200] "GET /.env.bak HTTP/2.0" 403 123 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityB\n143.20.97.215 - - [06/Jun/2026:06:21:43 +0200] "GET /.env.d
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΊπΈ
74.50.84.246
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 5 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 5 suspicious requests in last 20000 lines.
Sample log lines:
74.50.84.246 - - [02/Jun/2026:12:50:44 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)\n74.50.84.246 - - [02/Jun/2026:12:50:44 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Wi\n74.50.84.246 - - [02/Jun/2026:12:50:44 +0200] "GET /vendor/laravel-filemanager/js/script.js HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap\n74.50.84.246 - - [02/Jun/2026:12:50:44 +0200] "GET /public/vendor/laravel-filemanager/js/script.js HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; \n74.50.84.246 - - [02/Jun/2026:12:50:45 +0200] "GET /.git/config HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π©πͺ
176.65.132.181
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 18 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 18 suspicious requests in last 20000 lines.
Sample log lines:
176.65.132.181 - - [31/May/2026:20:22:02 +0200] "GET /phpinfo HTTP/1.1" 404 8126 "http://halo.habith.eu/phpinfo" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:1\n176.65.132.181 - - [31/May/2026:20:22:02 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 8126 "http://halo.habith.eu/_profiler/phpinfo" "Mozilla/5.0 (Linux; Androi\n176.65.132.181 - - [31/May/2026:20:22:02 +0200] "GET /_profiler/phpinfo.php HTTP/1.1" 404 8126 "http://halo.habith.eu/_profiler/phpinfo.php" "Mozilla/5.0 (Linux\n176.65.132.181 - - [31/May/2026:20:22:02 +0200] "GET /_profiler/info.php HTTP/1.1" 404 8126 "http://halo.habith.eu/_profiler/info.php" "Mozilla/5.0 (X11; Linux \n176.65.132.181 - - [31/May/2026:20:22:02 +0200] "GET /_profiler/php_info.php HTTP/1.1" 404 8126 "http://halo.habith.eu/_profiler/php_info.php" "Mozilla/5.0 (Win\n176.65.132.181 - - [31/May/2026:20:22:03 +0200] "GET /_pro
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π³π±
45.148.10.21
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 40 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 40 suspicious requests in last 20000 lines.
Sample log lines:
45.148.10.21 - - [30/May/2026:18:46:33 +0200] "GET /panel/.env HTTP/2.0" 403 123 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.148.10.21 - - [30/May/2026:18:46:33 +0200] "GET /admin/.env HTTP/2.0" 403 123 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.148.10.21 - - [30/May/2026:18:46:33 +0200] "GET /core/.env HTTP/2.0" 403 123 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.148.10.21 - - [30/May/2026:18:46:33 +0200] "GET /server/.env HTTP/2.0" 403 123 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.148.10.21 - - [30/May/2026:18:46:33 +0200] "GET /config/aws.yml HTTP/2.0" 404 3440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.148.10.21 - - [30/May/2026:18:46:33 +0200] "GET /site/all/libraries/mailchimp/.env HTTP/2.0" 403 123 "-" "Mozilla/5
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π¨π¦
20.116.59.164
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 4 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 4 suspicious requests in last 20000 lines.
Sample log lines:
20.116.59.164 - - [28/May/2026:17:44:14 +0200] "GET /cgi-bin/ HTTP/1.1" 404 8126 "-" "-"\n20.116.59.164 - - [28/May/2026:17:44:28 +0200] "GET /wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.116.59.164 - - [28/May/2026:17:45:15 +0200] "GET /test.php HTTP/1.1" 404 8126 "-" "-"\n20.116.59.164 - - [28/May/2026:17:45:41 +0200] "GET /vendor/ HTTP/1.1" 403 162 "-" "-"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π¨π¦
4.205.25.159
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 20000 lines.
Sample log lines:
4.205.25.159 - - [24/May/2026:23:40:30 +0200] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n4.205.25.159 - - [24/May/2026:23:40:32 +0200] "GET /wp-admin/images/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n4.205.25.159 - - [24/May/2026:23:40:33 +0200] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n4.205.25.159 - - [24/May/2026:23:40:43 +0200] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n4.205.25.159 - - [24/May/2026:23:40:49 +0200] "GET /wp-content/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n4.205.25.159 - - [24/May/2026:23:41:16 +0200] "GET /wp-includes/images/smilies/wp-login.php HTTP/1.1" 404 8126 "-" "-"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π³π±
5.255.108.183
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 36 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 36 suspicious requests in last 20000 lines.
Sample log lines:
5.255.108.183 - - [24/May/2026:08:32:39 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.\n5.255.108.183 - - [24/May/2026:08:32:39 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"\n5.255.108.183 - - [24/May/2026:08:32:39 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML\n5.255.108.183 - - [24/May/2026:08:32:39 +0200] "GET /api/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G\n5.255.108.183 - - [24/May/2026:08:32:39 +0200] "GET /app/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, \n5.255.108.183 - - [24/May/2026:08:32:39 +0200] "GET /backen
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΊπΈ
172.202.92.73
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 3 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 3 suspicious requests in last 20000 lines.
Sample log lines:
172.202.92.73 - - [23/May/2026:05:02:33 +0200] "GET /cgi-bin/index.php HTTP/1.1" 404 8126 "-" "-"\n172.202.92.73 - - [23/May/2026:05:02:34 +0200] "GET /wp-login.php HTTP/1.1" 404 8126 "-" "-"\n172.202.92.73 - - [23/May/2026:05:03:08 +0200] "GET /cgi-bin/ HTTP/1.1" 404 8126 "-" "-"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΈπ¬
167.71.198.58
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 5 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 5 suspicious requests in last 20000 lines.
Sample log lines:
167.71.198.58 - - [23/May/2026:08:52:35 +0200] "GET //xmlrpc.php?rsd HTTP/1.1" 404 8126 "https://hairstation.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; W\n167.71.198.58 - - [23/May/2026:08:52:35 +0200] "GET //blog/robots.txt HTTP/1.1" 404 8126 "https://hairstation.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; \n167.71.198.58 - - [23/May/2026:08:52:35 +0200] "GET //blog/ HTTP/1.1" 404 8126 "https://hairstation.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64\n167.71.198.58 - - [23/May/2026:08:52:36 +0200] "GET //wordpress/ HTTP/1.1" 404 8126 "https://hairstation.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64\n167.71.198.58 - - [23/May/2026:08:52:37 +0200] "GET //wp/ HTTP/1.1" 404 8126 "https://hairstation.net//wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΊπΈ
2602:fb54:1400::1f5
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 6 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 6 suspicious requests in last 20000 lines.
Sample log lines:
2602:fb54:1400::1f5 - - [23/May/2026:21:35:00 +0200] "GET /backend/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHT\n2602:fb54:1400::1f5 - - [23/May/2026:21:35:00 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 \n2602:fb54:1400::1f5 - - [23/May/2026:21:35:00 +0200] "GET /app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/2010010\n2602:fb54:1400::1f5 - - [23/May/2026:21:35:00 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36\n2602:fb54:1400::1f5 - - [23/May/2026:21:35:00 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML\n2602:fb54:1400::1f5 - - [23/May/2026:21:35:00 +0200] "GET /
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π§π·
20.226.50.58
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 20000 lines.
Sample log lines:
20.226.50.58 - - [23/May/2026:10:51:43 +0200] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.226.50.58 - - [23/May/2026:10:51:45 +0200] "GET /wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.226.50.58 - - [23/May/2026:10:52:09 +0200] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.226.50.58 - - [23/May/2026:10:52:38 +0200] "GET /cgi-bin/ HTTP/1.1" 404 8126 "-" "-"\n20.226.50.58 - - [23/May/2026:10:52:42 +0200] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 8126 "-" "-"\n20.226.50.58 - - [23/May/2026:10:52:43 +0200] "GET /wp-admin/css/wp-login.php HTTP/1.1" 404 8126 "-" "-"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΊπΈ
20.9.81.163
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 3 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 3 suspicious requests in last 20000 lines.
Sample log lines:
20.9.81.163 - - [20/May/2026:08:52:39 +0200] "GET /cgi-bin/ HTTP/1.1" 404 8126 "-" "-"\n20.9.81.163 - - [20/May/2026:08:53:12 +0200] "GET /test.php HTTP/1.1" 404 8126 "-" "-"\n20.9.81.163 - - [20/May/2026:08:53:28 +0200] "GET /vendor/ HTTP/1.1" 403 162 "-" "-"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π³π±
88.151.34.248
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 8 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 8 suspicious requests in last 20000 lines.
Sample log lines:
88.151.34.248 - - [14/May/2026:09:32:51 +0200] "GET /.git/HEAD HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefo\n88.151.34.248 - - [14/May/2026:09:32:53 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.\n88.151.34.248 - - [14/May/2026:09:32:55 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHT\n88.151.34.248 - - [14/May/2026:09:32:56 +0200] "GET /backend/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Fire\n88.151.34.248 - - [14/May/2026:09:32:56 +0200] "GET /api/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML,\n88.151.34.248 - - [14/May/2026:09:32:56 +0200] "GET /.env.p
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΊπΈ
34.174.209.238
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 10 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 10 suspicious requests in last 20000 lines.
Sample log lines:
34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, lik\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.docker HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1) Gecko/20061024 Firef\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.dev HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/hel\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.development.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows Phone 8.0; Trid\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.dev.local HTTP/1.1" 404 3452 "-" "Opera/9.80 (Android; Opera Mini/7.5.33361/31.1543; U; en) Presto/2.\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΊπΈ
2602:fb54:1400::1d2
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 36 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 36 suspicious requests in last 20000 lines.
Sample log lines:
2602:fb54:1400::1d2 - - [14/May/2026:18:08:43 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:150.0) Gecko/20100101 Fi\n2602:fb54:1400::1d2 - - [14/May/2026:18:08:43 +0200] "GET /backend/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.3\n2602:fb54:1400::1d2 - - [14/May/2026:18:08:43 +0200] "GET /api/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, \n2602:fb54:1400::1d2 - - [14/May/2026:18:08:43 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/1\n2602:fb54:1400::1d2 - - [14/May/2026:18:08:43 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/201\n2602:fb54:1400::1d2 - - [14/May/2026:18:08:43 +0200] "GET
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΊπΈ
34.174.209.238
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 10 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 10 suspicious requests in last 20000 lines.
Sample log lines:
34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, lik\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.docker HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1) Gecko/20061024 Firef\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.dev HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (compatible; Yahoo! Slurp China; http://misc.yahoo.com.cn/hel\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.development.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows Phone 8.0; Trid\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env.dev.local HTTP/1.1" 404 3452 "-" "Opera/9.80 (Android; Opera Mini/7.5.33361/31.1543; U; en) Presto/2.\n34.174.209.238 - - [14/May/2026:02:37:29 +0200] "GET /.env
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π§π·
4.201.98.220
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 9 suspicious requests in last 20000 lines.
Sample log lines:
4.201.98.220 - - [12/May/2026:21:33:31 +0200] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n4.201.98.220 - - [12/May/2026:21:33:32 +0200] "GET /wp-login.php HTTP/1.1" 404 8126 "-" "-"\n4.201.98.220 - - [12/May/2026:21:34:02 +0200] "GET /wp-content/uploads/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n4.201.98.220 - - [12/May/2026:21:34:34 +0200] "GET /cgi-bin/ HTTP/1.1" 404 8126 "-" "-"\n4.201.98.220 - - [12/May/2026:21:34:39 +0200] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 8126 "-" "-"\n4.201.98.220 - - [12/May/2026:21:34:39 +0200] "GET /wp-admin/css/wp-login.php HTTP/1.1" 404 8126 "-" "-"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π³π±
45.148.10.166
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 38 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 38 suspicious requests in last 20000 lines.
Sample log lines:
45.148.10.166 - - [12/May/2026:03:48:05 +0200] "GET /app/.env HTTP/2.0" 403 123 "-" "Mozilla/5.0"\n45.148.10.166 - - [12/May/2026:03:48:05 +0200] "GET /.gitignore HTTP/2.0" 404 3440 "-" "Mozilla/5.0"\n45.148.10.166 - - [12/May/2026:03:48:05 +0200] "GET /local/.env HTTP/2.0" 403 123 "-" "Mozilla/5.0"\n45.148.10.166 - - [12/May/2026:03:48:05 +0200] "GET /.env.development HTTP/2.0" 404 3440 "-" "Mozilla/5.0"\n45.148.10.166 - - [12/May/2026:03:48:05 +0200] "GET /.env.old HTTP/2.0" 404 3440 "-" "Mozilla/5.0"\n45.148.10.166 - - [12/May/2026:03:48:05 +0200] "GET /..%252f..%252f.ENV HTTP/2.0" 403 123 "-" "Mozilla/5.0"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΊπΈ
103.215.74.60
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 56 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 56 suspicious requests in last 20000 lines.
Sample log lines:
103.215.74.60 - - [11/May/2026:05:45:56 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.\n103.215.74.60 - - [11/May/2026:05:45:56 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like\n103.215.74.60 - - [11/May/2026:05:45:57 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firef\n103.215.74.60 - - [11/May/2026:05:45:57 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 \n103.215.74.60 - - [11/May/2026:05:45:58 +0200] "GET /.env.development HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101\n103.215.74.60 - - [11/May/2026:05:45:58 +0200] "GET /.env.
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π³π±
45.148.10.246
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 52 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 52 suspicious requests in last 20000 lines.
Sample log lines:
45.148.10.246 - - [10/May/2026:10:29:13 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like\n45.148.10.246 - - [10/May/2026:10:29:13 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1\n45.148.10.246 - - [10/May/2026:10:29:13 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTM\n45.148.10.246 - - [10/May/2026:10:29:13 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 \n45.148.10.246 - - [10/May/2026:10:29:13 +0200] "GET /.env.development HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36\n45.148.10.246 - - [10/May/2026:10:29:13 +0200] "GET /.env.
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π³π±
45.148.10.249
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 51 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 51 suspicious requests in last 20000 lines.
Sample log lines:
45.148.10.249 - - [09/May/2026:20:01:06 +0200] "GET /.env HTTP/2.0" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like\n45.148.10.249 - - [09/May/2026:20:01:06 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like\n45.148.10.249 - - [09/May/2026:20:01:06 +0200] "GET /.env.local HTTP/2.0" 404 3440 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTM\n45.148.10.249 - - [09/May/2026:20:01:06 +0200] "GET /.env.production HTTP/2.0" 404 3440 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 \n45.148.10.249 - - [09/May/2026:20:01:06 +0200] "GET /.env.development HTTP/2.0" 404 3440 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36\n45.148.10.249 - - [09/May/2026:20:01:06 +0200] "GET /.env.
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
πΊπΈ
2602:fb54:1a00::6a
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 6 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 6 suspicious requests in last 20000 lines.
Sample log lines:
2602:fb54:1a00::6a - - [06/May/2026:21:37:52 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like \n2602:fb54:1a00::6a - - [06/May/2026:21:37:52 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 \n2602:fb54:1a00::6a - - [06/May/2026:21:37:52 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (\n2602:fb54:1a00::6a - - [06/May/2026:21:37:52 +0200] "GET /app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (\n2602:fb54:1a00::6a - - [06/May/2026:21:37:52 +0200] "GET /backend/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.\n2602:fb54:1a00::6a - - [06/May/2026:21:37:52 +0200] "GET /a
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π³π±
85.11.167.155
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 11 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 11 suspicious requests in last 20000 lines.
Sample log lines:
85.11.167.155 - - [02/May/2026:17:47:31 +0200] "GET /phpinfo.php HTTP/1.1" 404 3452 "http://halo.habith.eu/phpinfo.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x6\n85.11.167.155 - - [02/May/2026:17:47:31 +0200] "GET /.git/config HTTP/1.1" 404 3452 "http://halo.habith.eu/.git/config" "Mozilla/5.0 (X11; Linux x86_64; rv:133.\n85.11.167.155 - - [02/May/2026:17:47:31 +0200] "GET /.env HTTP/1.1" 403 195 "http://halo.habith.eu/.env" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/\n85.11.167.155 - - [02/May/2026:17:50:05 +0200] "GET /.gitconfig HTTP/1.1" 404 3452 "http://halo.habith.eu/.gitconfig" "Mozilla/5.0 (Windows NT 10.0; Win64; x64;\n85.11.167.155 - - [02/May/2026:17:50:05 +0200] "GET /.env.bak HTTP/1.1" 403 195 "http://halo.habith.eu/.env.bak" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl\n85.11.167.155 - - [02/May/2026:17:50:05 +0200] "GET /compo
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
π³π±
88.151.34.253
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 18 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 18 suspicious requests in last 20000 lines.
Sample log lines:
88.151.34.253 - - [03/May/2026:02:02:19 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (iPad; CPU OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like\n88.151.34.253 - - [03/May/2026:02:02:19 +0200] "GET /.env.backup HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 9) AppleWebKit/537.36 (KHTML, lik\n88.151.34.253 - - [03/May/2026:02:02:19 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KH\n88.151.34.253 - - [03/May/2026:02:02:19 +0200] "GET /app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.7; rv:133.0) Gecko/20100101 Firef\n88.151.34.253 - - [03/May/2026:02:02:20 +0200] "GET /.env.production.bak HTTP/1.1" 403 134 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebK\n88.151.34.253 - - [03/May/2026:02:02:20 +0200] "GET /backe
show less
|
DDoS Attack
Ping of Death
Hacking
|