|
🇧🇪
34.156.64.247
|
|
34.156.64.247 - - [12/Nov/2026:18:02:03 +0100] "GET /.env.production.backup HTTP/1.1" 404 2968 "-" " ...
show more
34.156.64.247 - - [12/Nov/2026:18:02:03 +0100] "GET /.env.production.backup HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
34.156.64.247 - - [12/Nov/2026:18:02:03 +0100] "GET /.env.bak2 HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇩🇪
167.94.146.52
|
|
167.94.146.52 - - [12/Nov/2026:17:43:21 +0100] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.146.52 - ...
show more
167.94.146.52 - - [12/Nov/2026:17:43:21 +0100] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
167.94.146.52 - - [12/Nov/2026:17:43:25 +0100] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03m-\xC4\xD4\x1B&\xCD\xF2\xB7\x80\x936\xDBR\x18\x8E\x82u\xC7\x18#&\xB0\xE7\x06\x1A\xFD\xE1_c\xC9\x00 U\xEA\xF8E\xF2\x04\xB4\xC8\xBF\xAD\xB7p\x9E\xFEy\xAA\xDE?6\x12=\xC4mV\xBA\xCD\xED\x07;\x7F7\x5C\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
167.94.146.52 - - [12/Nov/2026:17:43:30 +0100] "\x16\x03\x01\x05\xBA\x01\x00\x05\xB6\x03\x03\xDC&\x95s,\xDC\xFB\xC8\x04^\x12\x99~\x81-\xD8\x00M\x97\x0E\xCC\xEBs\xC4|\x92\x15D\xB8\xA3\xFE\x9C \xF5\xE0\xD4r\xA3\x9A\x89y7:S\xC8x\xBF\xEB\xD7S8\x9E\xC0s)\xB2\xE329\xAA&<\xE3Ga\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
40.124.84.250
|
|
40.124.84.250 - - [12/Nov/2026:14:23:53 +0100] "GET /autodiscover/autodiscover.json?@zdi/Powershell ...
show more
40.124.84.250 - - [12/Nov/2026:14:23:53 +0100] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
40.124.84.250 - - [12/Nov/2026:14:23:53 +0100] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇳🇱
85.11.167.160
|
|
85.11.167.160 - - [12/Nov/2026:13:25:36 +0100] "GET /.git/HEAD HTTP/1.1" 404 2968 "-" "fasthttp" "-" ...
show more
85.11.167.160 - - [12/Nov/2026:13:25:36 +0100] "GET /.git/HEAD HTTP/1.1" 404 2968 "-" "fasthttp" "-"
85.11.167.160 - - [12/Nov/2026:13:25:38 +0100] "GET /.git/HEAD HTTP/1.1" 404 2968 "-" "fasthttp" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
45.156.129.178
|
|
45.156.129.178 - - [12/Nov/2026:12:18:33 +0100] "GET /solr/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 Apple ...
show more
45.156.129.178 - - [12/Nov/2026:12:18:33 +0100] "GET /solr/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "-"
45.156.129.178 - - [12/Nov/2026:12:18:33 +0100] "GET /solr/ HTTP/1.1" 404 2968 "http://george.paschos.name/solr/#/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇳🇱
195.178.110.159
|
|
195.178.110.159 - - [12/Nov/2026:11:37:55 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5 ...
show more
195.178.110.159 - - [12/Nov/2026:11:37:55 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
195.178.110.159 - - [12/Nov/2026:11:37:55 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇬🇧
5.226.140.45
|
|
5.226.140.45 - - [12/Nov/2026:10:40:38 +0100] "GET /mcp HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compati ...
show more
5.226.140.45 - - [12/Nov/2026:10:40:38 +0100] "GET /mcp HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
5.226.140.45 - - [12/Nov/2026:10:40:38 +0100] "GET /mcp HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇬🇧
5.226.140.43
|
|
5.226.140.43 - - [12/Nov/2026:10:40:38 +0100] "GET /api/mcp HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (com ...
show more
5.226.140.43 - - [12/Nov/2026:10:40:38 +0100] "GET /api/mcp HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
5.226.140.43 - - [12/Nov/2026:10:40:38 +0100] "GET /api/mcp HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇬🇧
31.14.254.55
|
|
31.14.254.55 - - [12/Nov/2026:10:40:38 +0100] "GET /mcp/ HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compat ...
show more
31.14.254.55 - - [12/Nov/2026:10:40:38 +0100] "GET /mcp/ HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
31.14.254.55 - - [12/Nov/2026:10:40:38 +0100] "GET /mcp/ HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇦🇪
74.243.250.30
|
|
74.243.250.30 - - [12/Nov/2026:10:26:41 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
74.243.250.30 - - [12/Nov/2026:10:26:41 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-"
74.243.250.30 - - [12/Nov/2026:10:26:41 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2968 "-" "-" "-"
74.243.250.30 - - [12/Nov/2026:10:26:42 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-"
74.243.250.30 - - [12/Nov/2026:10:26:42 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2968 "-" "-" "-"
74.243.250.30 - - [12/Nov/2026:10:26:42 +0100] "GET /jn.php HTTP/1.1" 301 162 "-" "-" "-"
...
show less
|
Bad Web Bot
|
|
🇷🇴
92.118.39.92
|
|
92.118.39.92 - - [12/Nov/2026:05:01:31 +0100] "PROPFIND / HTTP/1.1" 405 552 "http://85.127.89.64:443 ...
show more
92.118.39.92 - - [12/Nov/2026:05:01:31 +0100] "PROPFIND / HTTP/1.1" 405 552 "http://85.127.89.64:443/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/537.36" "-"
92.118.39.92 - - [12/Nov/2026:05:01:31 +0100] "PROPFIND / HTTP/1.1" 405 552 "http://85.127.89.64:443/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Chrome/126.0.0.0 Mobile Safari/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇭🇰
34.92.124.117
|
|
34.92.124.117 - - [12/Nov/2026:04:01:59 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 ...
show more
34.92.124.117 - - [12/Nov/2026:04:01:59 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.92.124.117 - - [12/Nov/2026:04:02:01 +0100] "GET /.env.local HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
4.227.154.22
|
|
4.227.154.22 - - [12/Nov/2026:03:53:23 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 2968 "-" "Mozi ...
show more
4.227.154.22 - - [12/Nov/2026:03:53:23 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
4.227.154.22 - - [12/Nov/2026:03:53:23 +0100] "GET /owa/auth/logon.aspx HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
23.94.145.185
|
|
23.94.145.185 - - [12/Nov/2026:01:09:53 +0100] "\x16\x03\x01\x00L\x01\x00\x00H\x03\x03\x00\x00\x00\x ...
show more
23.94.145.185 - - [12/Nov/2026:01:09:53 +0100] "\x16\x03\x01\x00L\x01\x00\x00H\x03\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\xFF\x01\x00\x00\x1B\x00\x17\x00\x00\x00" 400 150 "-" "-" "-"
23.94.145.185 - - [12/Nov/2026:01:09:54 +0100] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (X11; Linux x86_64) HighPerfScanner/10G" "-"
23.94.145.185 - - [12/Nov/2026:01:09:55 +0100] "POST / HTTP/1.1" 400 248 "-" "Mozilla/5.0" "-"
...
show less
|
Web App Attack
|
|
🇷🇴
92.118.39.181
|
|
92.118.39.181 - - [11/Nov/2026:22:38:03 +0100] "PROPFIND / HTTP/1.1" 405 150 "http://85.127.89.64:44 ...
show more
92.118.39.181 - - [11/Nov/2026:22:38:03 +0100] "PROPFIND / HTTP/1.1" 405 150 "http://85.127.89.64:443/" "asusrouter-Android-1.0.0.3.58-163" "-"
92.118.39.181 - - [11/Nov/2026:22:38:03 +0100] "PROPFIND / HTTP/1.1" 405 150 "http://85.127.89.64:443/" "asusrouter-Android-1.0.0.3.58-163" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇧🇪
34.62.9.55
|
|
34.62.9.55 - - [11/Nov/2026:21:27:37 +0100] "GET /.env.anthropic HTTP/1.1" 404 2968 "-" "Mozilla/5.0 ...
show more
34.62.9.55 - - [11/Nov/2026:21:27:37 +0100] "GET /.env.anthropic HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
34.62.9.55 - - [11/Nov/2026:21:27:37 +0100] "GET /.env-sample HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
20.14.88.130
|
|
20.14.88.130 - - [11/Nov/2026:21:21:47 +0100] "GET /owa/auth/x.js HTTP/1.1" 404 2968 "-" "Mozilla/5. ...
show more
20.14.88.130 - - [11/Nov/2026:21:21:47 +0100] "GET /owa/auth/x.js HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
20.14.88.130 - - [11/Nov/2026:21:21:47 +0100] "GET /owa/auth/x.js HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇸🇬
143.198.216.234
|
|
143.198.216.234 - - [11/Nov/2026:19:24:34 +0100] "GET //images/images/cache.php HTTP/1.1" 301 162 "w ...
show more
143.198.216.234 - - [11/Nov/2026:19:24:34 +0100] "GET //images/images/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-"
143.198.216.234 - - [11/Nov/2026:19:24:38 +0100] "GET //images/images/cache.php HTTP/1.1" 404 2968 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-"
143.198.216.234 - - [11/Nov/2026:19:24:44 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 301 162 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-"
143.198.216.234 - - [11/Nov/2026:19:24:49 +0100] "GET //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 404 2968 "www.google.com" "Mozlila/5.0 (Linux; Andr
...
show less
|
Bad Web Bot
|
|
🇧🇪
34.22.173.23
|
|
34.22.173.23 - - [11/Nov/2026:18:31:40 +0100] "GET /.env.aws HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Wi ...
show more
34.22.173.23 - - [11/Nov/2026:18:31:40 +0100] "GET /.env.aws HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
34.22.173.23 - - [11/Nov/2026:18:31:40 +0100] "GET /.env.aws HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇦🇺
20.92.243.53
|
|
20.92.243.53 - - [11/Nov/2026:18:26:51 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
20.92.243.53 - - [11/Nov/2026:18:26:51 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-"
20.92.243.53 - - [11/Nov/2026:18:26:52 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2968 "-" "-" "-"
20.92.243.53 - - [11/Nov/2026:18:26:52 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-"
20.92.243.53 - - [11/Nov/2026:18:26:53 +0100] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2968 "-" "-" "-"
20.92.243.53 - - [11/Nov/2026:18:26:53 +0100] "GET /rezor.php HTTP/1.1" 301 162 "-" "-" "-"
...
show less
|
Bad Web Bot
|
|
🇺🇸
134.122.7.4
|
|
134.122.7.4 - - [11/Nov/2026:16:44:09 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 ( ...
show more
134.122.7.4 - - [11/Nov/2026:16:44:09 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" "-"
134.122.7.4 - - [11/Nov/2026:16:44:09 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
216.180.246.115
|
|
216.180.246.115 - - [11/Nov/2026:15:12:50 +0100] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatib ...
show more
216.180.246.115 - - [11/Nov/2026:15:12:50 +0100] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
216.180.246.115 - - [11/Nov/2026:15:12:52 +0100] "GET /manage/account/login HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
216.180.246.115 - - [11/Nov/2026:15:12:54 +0100] "GET /admin/index.html HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-"
...
show less
|
Web App Attack
|
|
🇧🇪
34.38.88.176
|
|
34.38.88.176 - - [11/Nov/2026:14:55:18 +0100] "GET /.env.anthropic HTTP/1.1" 404 2968 "-" "Mozilla/5 ...
show more
34.38.88.176 - - [11/Nov/2026:14:55:18 +0100] "GET /.env.anthropic HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
34.38.88.176 - - [11/Nov/2026:14:55:18 +0100] "GET /.cursor/mcp.json HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
172.81.135.182
|
|
172.81.135.182 - - [11/Nov/2026:14:04:00 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5. ...
show more
172.81.135.182 - - [11/Nov/2026:14:04:00 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) snap Chromium/75.0.3770.142 Chrome/75.0.3770.142 Safari/537.36" "-"
172.81.135.182 - - [11/Nov/2026:14:04:00 +0100] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) snap Chromium/75.0.3770.142 Chrome/75.0.3770.142 Safari/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇬🇧
217.146.80.108
|
|
217.146.80.108 - - [11/Nov/2026:11:26:33 +0100] "GET /mcp HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compa ...
show more
217.146.80.108 - - [11/Nov/2026:11:26:33 +0100] "GET /mcp HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
217.146.80.108 - - [11/Nov/2026:11:26:33 +0100] "GET /mcp HTTP/1.1" 404 1596 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
...
show less
|
Brute-Force
Web App Attack
|