|
๐ฉ๐ช
213.209.159.133
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 27 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 27 suspicious requests in last 20000 lines.
Sample log lines:
213.209.159.133 - - [22/Oct/2026:08:30:19 +0200] "GET /.env.dev HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko\n213.209.159.133 - - [22/Oct/2026:08:30:19 +0200] "GET /.env.development HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, li\n213.209.159.133 - - [22/Oct/2026:08:30:19 +0200] "GET /%2f%2eenv HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko\n213.209.159.133 - - [22/Oct/2026:08:30:19 +0200] "GET /%2eenv HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) C\n213.209.159.133 - - [22/Oct/2026:08:30:19 +0200] "GET /%2f%2eaws%2fcredentials HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KH\n213.209.159.133 - - [22/Oct/2026:08:30:19 +0200] "GET /.en
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฉ๐ช
45.139.104.152
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 50 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 50 suspicious requests in last 20000 lines.
Sample log lines:
45.139.104.152 - - [22/Oct/2026:03:15:07 +0200] "GET /.env HTTP/1.1" 403 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"\n45.139.104.152 - - [22/Oct/2026:03:15:10 +0200] "GET /.env.development HTTP/1.1" 404 8126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.139.104.152 - - [22/Oct/2026:03:15:11 +0200] "GET /.env.production HTTP/1.1" 404 8126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.139.104.152 - - [22/Oct/2026:03:15:12 +0200] "GET /.env.staging HTTP/1.1" 404 8126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"\n45.139.104.152 - - [22/Oct/2026:03:15:16 +0200] "GET /.env.test HTTP/1.1" 404 8126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"\n45.139.104.152 - - [22/Oct/2026:03:15:19 +0200] "GET /.env.backup HTTP/1.1" 404 8126
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
34.78.213.249
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 72 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 72 suspicious requests in last 20000 lines.
Sample log lines:
34.78.213.249 - - [22/Oct/2026:22:08:08 +0200] "GET /.git/logs/HEAD HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.78.213.249 - - [22/Oct/2026:22:08:08 +0200] "GET /.git/config HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.78.213.249 - - [22/Oct/2026:22:08:08 +0200] "GET /.env.example HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.78.213.249 - - [22/Oct/2026:22:08:08 +0200] "GET /backend/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.78.213.249 - - [22/Oct/2026:22:08:08 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.78.213.249 - - [22/Oct/2026:22:08:08 +0200] "GET /app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฉ๐ช
34.179.203.23
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 242 suspicious requests in last 2 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 242 suspicious requests in last 20000 lines.
Sample log lines:
34.179.203.23 - - [23/Oct/2026:00:57:15 +0200] "GET /.git/config HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li\n34.179.203.23 - - [23/Oct/2026:00:57:15 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko\n34.179.203.23 - - [23/Oct/2026:00:57:15 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, lik\n34.179.203.23 - - [23/Oct/2026:00:57:15 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML\n34.179.203.23 - - [23/Oct/2026:00:57:15 +0200] "GET /.env.staging HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l\n34.179.203.23 - - [23/Oct/2026:00:57:15 +0200] "GET /.env
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
34.52.150.124
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 74 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 74 suspicious requests in last 20000 lines.
Sample log lines:
34.52.150.124 - - [19/Oct/2026:03:26:35 +0200] "GET /.aws/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.150.124 - - [19/Oct/2026:03:26:35 +0200] "GET /.docker/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.150.124 - - [19/Oct/2026:03:26:35 +0200] "GET /.env.anthropic HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.150.124 - - [19/Oct/2026:03:26:35 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3\n34.52.150.124 - - [19/Oct/2026:03:26:35 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.150.124 - - [19/Oct/2026:03:26:35 +0200] "GET /.env-example HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Win
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
34.79.12.228
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 77 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 77 suspicious requests in last 20000 lines.
Sample log lines:
34.79.12.228 - - [17/Oct/2026:20:40:32 +0200] "GET /.env.aws HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.79.12.228 - - [17/Oct/2026:20:40:32 +0200] "GET /.env.anthropic HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.79.12.228 - - [17/Oct/2026:20:40:32 +0200] "GET /.aws/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.79.12.228 - - [17/Oct/2026:20:40:32 +0200] "GET /.docker/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.79.12.228 - - [17/Oct/2026:20:40:32 +0200] "GET /.env-sample HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.79.12.228 - - [17/Oct/2026:20:40:32 +0200] "GET /.env.backup HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ณ๐ฑ
159.223.222.80
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 5 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 5 suspicious requests in last 20000 lines.
Sample log lines:
159.223.222.80 - - [13/Oct/2026:08:02:59 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Geck\n159.223.222.80 - - [13/Oct/2026:08:02:59 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; \n159.223.222.80 - - [13/Oct/2026:08:02:59 +0200] "GET /vendor/laravel-filemanager/js/script.js HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) \n159.223.222.80 - - [13/Oct/2026:08:03:00 +0200] "GET /.git/config HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, l\n159.223.222.80 - - [13/Oct/2026:08:03:00 +0200] "GET /public/vendor/laravel-filemanager/js/script.js HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฎ๐ณ
20.219.160.77
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 11 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 11 suspicious requests in last 20000 lines.
Sample log lines:
20.219.160.77 - - [13/Oct/2026:10:44:03 +0200] "GET /.well-known/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.219.160.77 - - [13/Oct/2026:10:44:19 +0200] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 404 8126 "-" "-"\n20.219.160.77 - - [13/Oct/2026:10:44:26 +0200] "GET /cgi-bin/index.php HTTP/1.1" 404 8126 "-" "-"\n20.219.160.77 - - [13/Oct/2026:10:44:28 +0200] "GET /wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.219.160.77 - - [13/Oct/2026:10:44:29 +0200] "GET /wp-admin/user/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.219.160.77 - - [13/Oct/2026:10:44:34 +0200] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 404 8126 "-" "-"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
34.52.133.111
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 75 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 75 suspicious requests in last 20000 lines.
Sample log lines:
34.52.133.111 - - [13/Oct/2026:00:40:23 +0200] "GET /.env.aws HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.133.111 - - [13/Oct/2026:00:40:23 +0200] "GET /.env.anthropic HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.133.111 - - [13/Oct/2026:00:40:23 +0200] "GET /.env-sample HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.133.111 - - [13/Oct/2026:00:40:23 +0200] "GET /.docker/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.133.111 - - [13/Oct/2026:00:40:23 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3\n34.52.133.111 - - [13/Oct/2026:00:40:23 +0200] "GET /.env-example HTTP/1.1" 404 3452 "-" "Mozilla/
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
35.210.103.253
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 242 suspicious requests in last 2 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 242 suspicious requests in last 20000 lines.
Sample log lines:
35.210.103.253 - - [12/Oct/2026:22:50:35 +0200] "GET /.git/config HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KH\n35.210.103.253 - - [12/Oct/2026:22:50:35 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, lik\n35.210.103.253 - - [12/Oct/2026:22:50:35 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHT\n35.210.103.253 - - [12/Oct/2026:22:50:35 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36\n35.210.103.253 - - [12/Oct/2026:22:50:35 +0200] "GET /.env.staging HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (K\n35.210.103.253 - - [12/Oct/2026:22:50:35 +0200] "GET /.en
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
207.175.220.59
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 74 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 74 suspicious requests in last 20000 lines.
Sample log lines:
207.175.220.59 - - [11/Oct/2026:10:03:58 +0200] "GET /.aws/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n207.175.220.59 - - [11/Oct/2026:10:03:58 +0200] "GET /.env-example HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n207.175.220.59 - - [11/Oct/2026:10:03:58 +0200] "GET /.docker/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n207.175.220.59 - - [11/Oct/2026:10:03:58 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n207.175.220.59 - - [11/Oct/2026:10:03:58 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.\n207.175.220.59 - - [11/Oct/2026:10:03:58 +0200] "GET /.env.anthropic HTTP/1.1" 404 3452 "-" "Mozilla/5.0
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฉ๐ช
213.209.159.133
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 27 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 27 suspicious requests in last 20000 lines.
Sample log lines:
213.209.159.133 - - [09/Oct/2026:02:57:58 +0200] "GET /%2f%2eenv HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko\n213.209.159.133 - - [09/Oct/2026:02:57:58 +0200] "GET /_phpinfo.php HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like G\n213.209.159.133 - - [09/Oct/2026:02:57:58 +0200] "GET /%2eenv HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) C\n213.209.159.133 - - [09/Oct/2026:02:57:58 +0200] "GET /app/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko)\n213.209.159.133 - - [09/Oct/2026:02:57:58 +0200] "GET /backend/.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Ge\n213.209.159.133 - - [09/Oct/2026:02:57:58 +0200] "GET /%2f
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
35.210.18.255
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 242 suspicious requests in last 2 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 242 suspicious requests in last 20000 lines.
Sample log lines:
35.210.18.255 - - [08/Oct/2026:22:25:24 +0200] "GET /.git/config HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) \n35.210.18.255 - - [08/Oct/2026:22:25:24 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1\n35.210.18.255 - - [08/Oct/2026:22:25:25 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) C\n35.210.18.255 - - [08/Oct/2026:22:25:25 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gec\n35.210.18.255 - - [08/Oct/2026:22:25:25 +0200] "GET /.env.staging HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)\n35.210.18.255 - - [08/Oct/2026:22:25:25 +0200] "GET /.env
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ณ๐ฑ
93.123.109.55
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 135 suspicious requests in last 2 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 135 suspicious requests in last 20000 lines.
Sample log lines:
93.123.109.55 - - [08/Oct/2026:02:18:14 +0200] "GET /.github/workflows/release.yml HTTP/1.1" 404 8126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit\n93.123.109.55 - - [08/Oct/2026:02:18:14 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 404 8126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,\n93.123.109.55 - - [08/Oct/2026:02:18:14 +0200] "GET /.github/workflows/main.yml HTTP/1.1" 404 8126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53\n93.123.109.55 - - [08/Oct/2026:02:18:14 +0200] "GET /.github/workflows/production.yml HTTP/1.1" 404 8126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb\n93.123.109.55 - - [08/Oct/2026:02:18:14 +0200] "GET /.github/workflows/ci.yml HTTP/1.1" 404 8126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.\n93.123.109.55 - - [08/Oct/2026:02:18:14 +0200] "GET /.git
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
35.241.239.86
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 76 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 76 suspicious requests in last 20000 lines.
Sample log lines:
35.241.239.86 - - [05/Oct/2026:08:46:51 +0200] "GET /api/phpinfo.php HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n35.241.239.86 - - [05/Oct/2026:08:46:51 +0200] "GET /.aws/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n35.241.239.86 - - [05/Oct/2026:08:46:51 +0200] "GET /application/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n35.241.239.86 - - [05/Oct/2026:08:46:51 +0200] "GET /app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n35.241.239.86 - - [05/Oct/2026:08:46:51 +0200] "GET /composer.json HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n35.241.239.86 - - [05/Oct/2026:08:46:51 +0200] "GET /back/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Window
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฉ๐ช
213.209.159.133
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 26 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 26 suspicious requests in last 20000 lines.
Sample log lines:
213.209.159.133 - - [01/Oct/2026:12:16:10 +0200] "GET /%2eenv HTTP/1.1" 403 134 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"\n213.209.159.133 - - [01/Oct/2026:12:16:10 +0200] "GET /%2f%2eenv HTTP/1.1" 403 134 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"\n213.209.159.133 - - [01/Oct/2026:12:16:10 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"\n213.209.159.133 - - [01/Oct/2026:12:16:10 +0200] "GET /.env.prod HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.com/)"\n213.209.159.133 - - [01/Oct/2026:12:16:10 +0200] "GET /%2f%2eaws%2fcredentials HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (compatible; jscrawler/0.1; +https://github.c\n213.209.159.133 - - [01/Oct/2026:12:16:10 +0200] "GET /%2fbackend%2f%2eenv HTTP/1.1" 403 134 "-" "Mozilla
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
34.52.229.253
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 75 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 75 suspicious requests in last 20000 lines.
Sample log lines:
34.52.229.253 - - [01/Oct/2026:18:51:39 +0200] "GET /phpinfo.php HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.229.253 - - [01/Oct/2026:18:51:39 +0200] "GET /production/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.229.253 - - [01/Oct/2026:18:51:39 +0200] "GET /server/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.229.253 - - [01/Oct/2026:18:51:39 +0200] "GET /test/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.229.253 - - [01/Oct/2026:18:51:39 +0200] "GET /v2/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.52.229.253 - - [01/Oct/2026:18:51:39 +0200] "GET /web/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0;
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฏ๐ต
34.146.8.237
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 115 suspicious requests in last 2 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 115 suspicious requests in last 20000 lines.
Sample log lines:
34.146.8.237 - - [01/Oct/2026:08:28:23 +0200] "GET /static../.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"\n34.146.8.237 - - [01/Oct/2026:08:28:23 +0200] "GET /js../.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"\n34.146.8.237 - - [01/Oct/2026:08:28:24 +0200] "GET /css../.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4\n34.146.8.237 - - [01/Oct/2026:08:28:24 +0200] "GET /build../.env HTTP/1.1" 403 134 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"\n34.146.8.237 - - [01/Oct/2026:08:28:24 +0200] "GET /..%2f.env HTTP/1.1" 400 166 "-" "-"\n34.146.8.237 - - [01/Oct/2026:08:28:24 +0200] "GET //.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฆ๐บ
20.5.79.49
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 3 suspicious requests in last 200 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 3 suspicious requests in last 20000 lines.
Sample log lines:
20.5.79.49 - - [29/Sep/2026:22:10:04 +0200] "GET /test.php/wp-content/uploads/wp_live_chat/abruzi.php HTTP/1.1" 404 8126 "-" "-"\n20.5.79.49 - - [29/Sep/2026:22:10:07 +0200] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.5.79.49 - - [29/Sep/2026:22:10:44 +0200] "GET /wp-includes/images/wp-login.php HTTP/1.1" 404 8126 "-" "-"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฉ๐ช
213.209.159.84
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 26 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 26 suspicious requests in last 20000 lines.
Sample log lines:
213.209.159.84 - - [30/Sep/2026:00:03:06 +0200] "GET /%2eenv HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Ch\n213.209.159.84 - - [30/Sep/2026:00:03:06 +0200] "GET /%2f%2eenv HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko)\n213.209.159.84 - - [30/Sep/2026:00:03:06 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chro\n213.209.159.84 - - [30/Sep/2026:00:03:06 +0200] "GET /.env.staging HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Ge\n213.209.159.84 - - [30/Sep/2026:00:03:06 +0200] "GET /_phpinfo.php HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Ge\n213.209.159.84 - - [30/Sep/2026:00:03:06 +0200] "GET /.env
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ง๐ช
34.62.82.165
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 73 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 73 suspicious requests in last 20000 lines.
Sample log lines:
34.62.82.165 - - [29/Sep/2026:13:23:07 +0200] "GET /.env-example HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.62.82.165 - - [29/Sep/2026:13:23:07 +0200] "GET /.env-sample HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.62.82.165 - - [29/Sep/2026:13:23:07 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\n34.62.82.165 - - [29/Sep/2026:13:23:07 +0200] "GET /.docker/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.62.82.165 - - [29/Sep/2026:13:23:07 +0200] "GET /.env.anthropic HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n34.62.82.165 - - [29/Sep/2026:13:23:07 +0200] "GET /.env.aws HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฏ๐ต
34.146.145.165
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 118 suspicious requests in last 2 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 118 suspicious requests in last 20000 lines.
Sample log lines:
34.146.145.165 - - [29/Sep/2026:08:46:16 +0200] "GET /userfiles?path=../../.env HTTP/1.1" 404 3452 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compa\n34.146.145.165 - - [29/Sep/2026:08:46:16 +0200] "GET /config/env/aws_credentials.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https:\n34.146.145.165 - - [29/Sep/2026:08:46:16 +0200] "GET /userfiles?path=../../../.env HTTP/1.1" 404 3452 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistb\n34.146.145.165 - - [29/Sep/2026:08:46:16 +0200] "GET /userfiles?path=../../../../.env HTTP/1.1" 404 3452 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassi\n34.146.145.165 - - [29/Sep/2026:08:46:16 +0200] "GET /userfiles/x?path=../../.env HTTP/1.1" 404 3452 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"\n34.146.145.165 - - [29/Sep/2026:08:46:16 +0200] "GET /@fs/../.env?raw?
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ฏ๐ต
34.146.145.165
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 93 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 93 suspicious requests in last 20000 lines.
Sample log lines:
34.146.145.165 - - [28/Sep/2026:13:41:41 +0200] "GET /userfiles?path=../../.env HTTP/1.1" 404 3452 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compa\n34.146.145.165 - - [28/Sep/2026:13:41:41 +0200] "GET /userfiles?path=../../../../.env HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://d\n34.146.145.165 - - [28/Sep/2026:13:41:41 +0200] "GET /config/env/aws_credentials.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; c\n34.146.145.165 - - [28/Sep/2026:13:41:41 +0200] "GET /app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"\n34.146.145.165 - - [28/Sep/2026:13:41:41 +0200] "GET /userfiles?path=../../../.env HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.a\n34.146.145.165 - - [28/Sep/2026:13:41:42 +0200] "GET /userfiles
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ณ๐ด
20.251.39.228
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 10 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 10 suspicious requests in last 20000 lines.
Sample log lines:
20.251.39.228 - - [27/Sep/2026:13:16:58 +0200] "GET /wp-includes/images/crystal/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.251.39.228 - - [27/Sep/2026:13:16:59 +0200] "GET /wp-includes/Text/Diff/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.251.39.228 - - [27/Sep/2026:13:16:59 +0200] "GET /wp-includes/Text/Diff/Engine/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.251.39.228 - - [27/Sep/2026:13:17:00 +0200] "GET /wp-admin/js/widgets/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.251.39.228 - - [27/Sep/2026:13:17:00 +0200] "GET /wp-includes/Text/Diff/Renderer/wp-login.php HTTP/1.1" 404 8126 "-" "-"\n20.251.39.228 - - [27/Sep/2026:13:17:01 +0200] "GET /wp-admin/css/colors/light/wp-login.php HTTP/1.1" 404 8126 "-" "-"
show less
|
DDoS Attack
Ping of Death
Hacking
|
|
๐ต๐ฑ
45.138.12.30
|
|
Automated report from halo.habith.eu (NGINX access log).
Detected 73 suspicious requests in last 20 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 73 suspicious requests in last 20000 lines.
Sample log lines:
45.138.12.30 - - [27/Sep/2026:15:54:33 +0200] "GET /.env-example HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.138.12.30 - - [27/Sep/2026:15:54:33 +0200] "GET /.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.138.12.30 - - [27/Sep/2026:15:54:33 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\n45.138.12.30 - - [27/Sep/2026:15:54:33 +0200] "GET /.docker/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.138.12.30 - - [27/Sep/2026:15:54:33 +0200] "GET /.aws/.env HTTP/1.1" 403 134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"\n45.138.12.30 - - [27/Sep/2026:15:54:33 +0200] "GET /.env.aws HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (Windows NT 10.
show less
|
DDoS Attack
Ping of Death
Hacking
|