|
🇳🇱
195.178.110.137
|
|
195.178.110.137 - - [30/Aug/2026:00:44:55 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5. ...
show more
195.178.110.137 - - [30/Aug/2026:00:44:55 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-"
195.178.110.137 - - [30/Aug/2026:00:44:55 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇭🇰
199.45.154.70
|
|
199.45.154.70 - - [29/Aug/2026:21:46:44 +0200] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
199.45.154.70 - ...
show more
199.45.154.70 - - [29/Aug/2026:21:46:44 +0200] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
199.45.154.70 - - [29/Aug/2026:21:46:45 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03" 400 150 "-" "-" "-"
199.45.154.70 - - [29/Aug/2026:21:47:06 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03{\xD6\xA9\xEC\xDFwQ\xD2\xFC\xF9c\xC4\x5CH\x8B\x1CC,R\xE7\x83\x94\xBD\xB0\xBE\xA0\xC7\x98u'\xFE\xC2 \x96.~\x09|\x22\xCC\xA6\xA9\x88#\xBFX\x13\xF5\xD0\xFE\xED\xB9\x93\xB3\xC0S\x80\x0E\x15\xC1H\xCC\x1CW[\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
...
show less
|
Web App Attack
|
|
🇨🇦
20.151.200.44
|
|
20.151.200.44 - - [29/Aug/2026:15:43:03 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.151.200.44 - - [29/Aug/2026:15:43:03 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-"
20.151.200.44 - - [29/Aug/2026:15:43:04 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2968 "-" "-" "-"
20.151.200.44 - - [29/Aug/2026:15:43:04 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-"
20.151.200.44 - - [29/Aug/2026:15:43:04 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2968 "-" "-" "-"
20.151.200.44 - - [29/Aug/2026:15:43:04 +0200] "GET /baee.php HTTP/1.1" 301 162 "-" "-" "-"
...
show less
|
Bad Web Bot
|
|
🇺🇸
34.26.254.50
|
|
34.26.254.50 - - [29/Aug/2026:15:21:55 +0200] "GET /www/.git/config HTTP/1.1" 404 2968 "-" "crusader ...
show more
34.26.254.50 - - [29/Aug/2026:15:21:55 +0200] "GET /www/.git/config HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
34.26.254.50 - - [29/Aug/2026:15:21:55 +0200] "GET /src/.git/config HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
34.127.73.185
|
|
34.127.73.185 - - [29/Aug/2026:15:02:10 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 2968 "-" "Mozi ...
show more
34.127.73.185 - - [29/Aug/2026:15:02:10 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 2968 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/)" "-"
34.127.73.185 - - [29/Aug/2026:15:02:10 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 2968 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
20.63.81.20
|
|
20.63.81.20 - - [29/Aug/2026:13:59:51 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
20.63.81.20 - - [29/Aug/2026:13:59:51 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-"
20.63.81.20 - - [29/Aug/2026:13:59:51 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2968 "-" "-" "-"
20.63.81.20 - - [29/Aug/2026:13:59:51 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-"
20.63.81.20 - - [29/Aug/2026:13:59:51 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2968 "-" "-" "-"
20.63.81.20 - - [29/Aug/2026:13:59:52 +0200] "GET /ser.php HTTP/1.1" 301 162 "-" "-" "-"
...
show less
|
Bad Web Bot
|
|
🇺🇸
34.102.85.246
|
|
34.102.85.246 - - [29/Aug/2026:11:41:04 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "crusader-wo ...
show more
34.102.85.246 - - [29/Aug/2026:11:41:04 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
34.102.85.246 - - [29/Aug/2026:11:41:04 +0200] "GET /html/.git/config HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
172.171.246.146
|
|
172.171.246.146 - - [29/Aug/2026:11:15:09 +0200] "GET /autodiscover/autodiscover.json?@zdi/Powershel ...
show more
172.171.246.146 - - [29/Aug/2026:11:15:09 +0200] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
172.171.246.146 - - [29/Aug/2026:11:15:09 +0200] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
169.58.184.188
|
|
169.58.184.188 - - [29/Aug/2026:11:13:12 +0200] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd ...
show more
169.58.184.188 - - [29/Aug/2026:11:13:12 +0200] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
169.58.184.188 - - [29/Aug/2026:11:13:12 +0200] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
169.58.184.188 - - [29/Aug/2026:11:13:12 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
169.58.184.188 - - [29/Aug/2026:11:13:12 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
169.58.184.188 - - [29/Aug/2026:11:13:13 +0200] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
...
show less
|
Bad Web Bot
|
|
🇺🇸
185.180.141.70
|
|
185.180.141.70 - - [29/Aug/2026:10:58:19 +0200] "GET /solr/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 Apple ...
show more
185.180.141.70 - - [29/Aug/2026:10:58:19 +0200] "GET /solr/ HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "-"
185.180.141.70 - - [29/Aug/2026:10:58:20 +0200] "GET /solr/ HTTP/1.1" 404 2968 "http://www.paschos.name/solr/#/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇸🇬
185.151.146.160
|
|
185.151.146.160 - - [29/Aug/2026:09:20:40 +0200] "POST /index.php?%25ADd+allow_url_include%3D1+%25AD ...
show more
185.151.146.160 - - [29/Aug/2026:09:20:40 +0200] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
185.151.146.160 - - [29/Aug/2026:09:20:46 +0200] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
185.151.146.160 - - [29/Aug/2026:09:20:52 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
185.151.146.160 - - [29/Aug/2026:09:20:55 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
185.151.146.160 - - [29/Aug/2026:09:21:01 +0200] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
...
show less
|
Bad Web Bot
|
|
🇺🇸
50.114.236.48
|
|
50.114.236.48 - - [29/Aug/2026:08:20:53 +0200] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+ ...
show more
50.114.236.48 - - [29/Aug/2026:08:20:53 +0200] "POST /index.php?%25ADd+allow_url_include%3D1+%25ADd+auto_prepend_file%3Dphp://input HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
50.114.236.48 - - [29/Aug/2026:08:20:54 +0200] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
50.114.236.48 - - [29/Aug/2026:08:20:57 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
50.114.236.48 - - [29/Aug/2026:08:20:58 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
50.114.236.48 - - [29/Aug/2026:08:20:58 +0200] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 500 3322 "-" "libredtail-http" "-"
...
show less
|
Bad Web Bot
|
|
🇺🇸
8.228.0.3
|
|
8.228.0.3 - - [29/Aug/2026:06:48:11 +0200] "GET /static../.env HTTP/1.1" 404 2968 "-" "Mozilla/5.0 A ...
show more
8.228.0.3 - - [29/Aug/2026:06:48:11 +0200] "GET /static../.env HTTP/1.1" 404 2968 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "-"
8.228.0.3 - - [29/Aug/2026:06:48:11 +0200] "GET /static../.env HTTP/1.1" 404 2968 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
4.249.17.74
|
|
4.249.17.74 - - [29/Aug/2026:06:07:29 +0200] "GET /actuator/health HTTP/1.1" 404 2968 "-" "Mozilla/5 ...
show more
4.249.17.74 - - [29/Aug/2026:06:07:29 +0200] "GET /actuator/health HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
4.249.17.74 - - [29/Aug/2026:06:07:29 +0200] "GET /actuator/health HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇦🇺
34.129.28.168
|
|
34.129.28.168 - - [29/Aug/2026:05:16:54 +0200] "GET /wordpress/.git/config HTTP/1.1" 404 2968 "-" "c ...
show more
34.129.28.168 - - [29/Aug/2026:05:16:54 +0200] "GET /wordpress/.git/config HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
34.129.28.168 - - [29/Aug/2026:05:16:54 +0200] "GET /api/.git/config HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
136.113.243.77
|
|
136.113.243.77 - - [29/Aug/2026:03:00:43 +0200] "GET /.env.dev HTTP/1.1" 404 2968 "-" "crusader-work ...
show more
136.113.243.77 - - [29/Aug/2026:03:00:43 +0200] "GET /.env.dev HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
136.113.243.77 - - [29/Aug/2026:03:00:43 +0200] "GET /.env.production HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
34.148.205.86
|
|
34.148.205.86 - - [29/Aug/2026:02:50:49 +0200] "GET /uploads../.env HTTP/1.1" 404 2968 "-" "Mozilla/ ...
show more
34.148.205.86 - - [29/Aug/2026:02:50:49 +0200] "GET /uploads../.env HTTP/1.1" 404 2968 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected]" "10.255.58.126"
34.148.205.86 - - [29/Aug/2026:02:50:49 +0200] "GET /img../.env HTTP/1.1" 404 2968 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected]" "192.168.92.57"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
35.192.120.35
|
|
35.192.120.35 - - [29/Aug/2026:02:45:29 +0200] "GET /.env.dev HTTP/1.1" 404 2968 "-" "crusader-worke ...
show more
35.192.120.35 - - [29/Aug/2026:02:45:29 +0200] "GET /.env.dev HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
35.192.120.35 - - [29/Aug/2026:02:45:29 +0200] "GET /.env.example HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
20.48.250.41
|
|
20.48.250.41 - - [29/Aug/2026:01:35:44 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php ...
show more
20.48.250.41 - - [29/Aug/2026:01:35:44 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-"
20.48.250.41 - - [29/Aug/2026:01:35:45 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2968 "-" "-" "-"
20.48.250.41 - - [29/Aug/2026:01:35:45 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-"
20.48.250.41 - - [29/Aug/2026:01:35:45 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2968 "-" "-" "-"
20.48.250.41 - - [29/Aug/2026:01:35:45 +0200] "GET /Jcrop.php HTTP/1.1" 301 162 "-" "-" "-"
...
show less
|
Bad Web Bot
|
|
🇺🇸
66.132.186.162
|
|
66.132.186.162 - - [28/Aug/2026:23:08:04 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x1E\x0 ...
show more
66.132.186.162 - - [28/Aug/2026:23:08:04 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x1E\x031\x93,\x96\xDF\xE9C=8\x84\xBE\xB7-?B3\xBD9\xF3\xA7\xFD\x01\xB8\xBE\x85\xFA\xD1\xB1\xAB\x97 \x1F\xB45\xDE\x22\xEB\x0E\x99;\x04\x1A\x1E\x1C\xA9\xBFJ\x87\xFE.\x87]Li\xC1\x84oO\xD83;\xF4\x09\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
66.132.186.162 - - [28/Aug/2026:23:08:07 +0200] "PRI * HTTP/2.0" 400 150 "-" "-" "-"
66.132.186.162 - - [28/Aug/2026:23:08:46 +0200] "\x16\x03\x01\x00\xEE\x01\x00\x00\xEA\x03\x03\x9F\x86A\x84\x1D\x98\xB2\xAD-\x94\x08\x99\xFA\xE7\x13\xA3\xBC+\xA1\x09\xF0\x87i\x0CvG\xB8\x00\x06\xDCa\xFC `2\xE7YI`\xE3\x02\x82\xD7\xE4\xCF\xCA\x07\xEE\x22\xD9\x0B}\x98\x8F5u\x96*K\x09m\x9DBwk\x00&\xCC\xA8\xCC\xA9\xC0/\xC00\xC0+\xC0,\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" "-"
...
show less
|
Web App Attack
|
|
🇺🇸
20.168.116.255
|
|
20.168.116.255 - - [28/Aug/2026:22:44:50 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 404 2968 "-" "Mo ...
show more
20.168.116.255 - - [28/Aug/2026:22:44:50 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
20.168.116.255 - - [28/Aug/2026:22:44:50 +0200] "GET /owa/auth/logon.aspx HTTP/1.1" 404 2968 "-" "Mozilla/5.0 zgrab/0.x" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇩🇪
34.40.27.8
|
|
34.40.27.8 - - [28/Aug/2026:20:12:03 +0200] "GET /.env.production HTTP/1.1" 404 2968 "-" "crusader-w ...
show more
34.40.27.8 - - [28/Aug/2026:20:12:03 +0200] "GET /.env.production HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
34.40.27.8 - - [28/Aug/2026:20:12:03 +0200] "GET /.env.backup HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
34.58.194.160
|
|
34.58.194.160 - - [28/Aug/2026:19:00:07 +0200] "GET /.env.save HTTP/1.1" 404 2968 "-" "crusader-work ...
show more
34.58.194.160 - - [28/Aug/2026:19:00:07 +0200] "GET /.env.save HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
34.58.194.160 - - [28/Aug/2026:19:00:07 +0200] "GET /.env.bak HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
20.104.49.130
|
|
20.104.49.130 - - [28/Aug/2026:17:48:06 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
20.104.49.130 - - [28/Aug/2026:17:48:06 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 162 "-" "-" "-"
20.104.49.130 - - [28/Aug/2026:17:48:07 +0200] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 2968 "-" "-" "-"
20.104.49.130 - - [28/Aug/2026:17:48:07 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 162 "-" "-" "-"
20.104.49.130 - - [28/Aug/2026:17:48:07 +0200] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 2968 "-" "-" "-"
20.104.49.130 - - [28/Aug/2026:17:48:07 +0200] "GET /002.php?p= HTTP/1.1" 301 162 "-" "-" "-"
...
show less
|
Bad Web Bot
|
|
🇺🇸
34.122.117.202
|
|
34.122.117.202 - - [28/Aug/2026:17:01:08 +0200] "GET /.env.local HTTP/1.1" 404 2968 "-" "crusader-wo ...
show more
34.122.117.202 - - [28/Aug/2026:17:01:08 +0200] "GET /.env.local HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
34.122.117.202 - - [28/Aug/2026:17:01:08 +0200] "GET /.env.backup HTTP/1.1" 404 2968 "-" "crusader-worker/1.0" "-"
...
show less
|
Brute-Force
Web App Attack
|