|
🇺🇸
35.237.229.237
|
|
35.237.229.237 - - [21/Sep/2026:22:03:42 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "-"
...
|
Web App Attack
|
|
🇳🇱
45.138.12.6
|
|
45.138.12.6 - - [21/Sep/2026:20:49:51 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (X1 ...
show more
45.138.12.6 - - [21/Sep/2026:20:49:51 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
144.172.85.75
|
|
144.172.85.75 - - [21/Sep/2026:20:36:23 +0000] "GET /.git/config HTTP/2.0" 200 36 "http://www.sfmet. ...
show more
144.172.85.75 - - [21/Sep/2026:20:36:23 +0000] "GET /.git/config HTTP/2.0" 200 36 "http://www.sfmet.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
|
Web App Attack
|
|
🇱🇹
62.60.130.227
|
|
62.60.130.227 - - [21/Sep/2026:16:55:48 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0 ...
show more
62.60.130.227 - - [21/Sep/2026:16:55:48 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇧🇪
34.156.22.222
|
|
34.156.22.222 - - [21/Sep/2026:16:07:52 +0000] "GET /.env HTTP/2.0" 200 55 "-" "Mozilla/5.0 (Windows ...
show more
34.156.22.222 - - [21/Sep/2026:16:07:52 +0000] "GET /.env HTTP/2.0" 200 55 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Web App Attack
|
|
🇮🇩
34.50.90.125
|
|
34.50.90.125 - - [21/Sep/2026:16:06:11 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (M ...
show more
34.50.90.125 - - [21/Sep/2026:16:06:11 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
35.196.47.66
|
|
35.196.47.66 - - [21/Sep/2026:14:12:33 +0000] "GET /@fs/../.env?raw?? HTTP/2.0" 200 55 "-" "Mozilla/ ...
show more
35.196.47.66 - - [21/Sep/2026:14:12:33 +0000] "GET /@fs/../.env?raw?? HTTP/2.0" 200 55 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
|
Web App Attack
|
|
🇮🇳
2406:7400:56:bfd9:a48b:5743:b860:ef6e
|
|
2406:7400:56:bfd9:a48b:5743:b860:ef6e - - [21/Sep/2026:10:47:56 +0000] "POST /xmlrpc.php HTTP/2.0" 4 ...
show more
2406:7400:56:bfd9:a48b:5743:b860:ef6e - - [21/Sep/2026:10:47:56 +0000] "POST /xmlrpc.php HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
35.236.117.159
|
|
35.236.117.159 - - [21/Sep/2026:10:26:37 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 ...
show more
35.236.117.159 - - [21/Sep/2026:10:26:37 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇨🇦
216.26.237.145
|
|
216.26.237.145 - - [21/Sep/2026:10:18:17 +0000] "GET /.git/HEAD HTTP/2.0" 200 36 "-" "git/2.40.0"
.. ...
show more
216.26.237.145 - - [21/Sep/2026:10:18:17 +0000] "GET /.git/HEAD HTTP/2.0" 200 36 "-" "git/2.40.0"
...
show less
|
Web App Attack
|
|
🇨🇦
104.207.48.214
|
|
104.207.48.214 - - [21/Sep/2026:10:18:07 +0000] "GET /.git/HEAD HTTP/2.0" 200 36 "-" "git/2.40.0"
.. ...
show more
104.207.48.214 - - [21/Sep/2026:10:18:07 +0000] "GET /.git/HEAD HTTP/2.0" 200 36 "-" "git/2.40.0"
...
show less
|
Web App Attack
|
|
🇮🇩
34.50.100.86
|
|
34.50.100.86 - - [21/Sep/2026:09:06:33 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (M ...
show more
34.50.100.86 - - [21/Sep/2026:09:06:33 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇬🇧
34.147.255.140
|
|
34.147.255.140 - - [21/Sep/2026:09:03:32 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 ...
show more
34.147.255.140 - - [21/Sep/2026:09:03:32 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
34.21.69.23
|
|
34.21.69.23 - - [21/Sep/2026:08:21:25 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (Ma ...
show more
34.21.69.23 - - [21/Sep/2026:08:21:25 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
161.35.3.25
|
|
161.35.3.25 - - [21/Sep/2026:06:56:20 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0"
. ...
show more
161.35.3.25 - - [21/Sep/2026:06:56:20 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0"
...
show less
|
Web App Attack
|
|
🇸🇬
35.240.231.78
|
|
35.240.231.78 - - [21/Sep/2026:06:54:27 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 ( ...
show more
35.240.231.78 - - [21/Sep/2026:06:54:27 +0000] "GET /.git/config HTTP/2.0" 200 36 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Web App Attack
|
|
🇺🇸
159.223.135.42
|
|
159.223.135.42 - - [21/Sep/2026:04:27:25 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0 ...
show more
159.223.135.42 - - [21/Sep/2026:04:27:25 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0"
...
show less
|
Web App Attack
|
|
🇺🇸
174.138.68.208
|
|
174.138.68.208 - - [21/Sep/2026:03:50:14 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0 ...
show more
174.138.68.208 - - [21/Sep/2026:03:50:14 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0"
...
show less
|
Web App Attack
|
|
🇺🇸
2602:fa59:2:9f3d::1
|
|
2602:fa59:2:9f3d::1 - - [21/Sep/2026:03:21:30 +0000] "GET /.git/config HTTP/2.0" 200 36 "http://www. ...
show more
2602:fa59:2:9f3d::1 - - [21/Sep/2026:03:21:30 +0000] "GET /.git/config HTTP/2.0" 200 36 "http://www.sfmet.com/.git/config" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
|
Web App Attack
|
|
🇩🇪
138.68.82.45
|
|
138.68.82.45 - - [21/Sep/2026:03:20:12 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0"
...
show more
138.68.82.45 - - [21/Sep/2026:03:20:12 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0"
...
show less
|
Web App Attack
|
|
🇨🇭
107.189.6.149
|
|
107.189.6.149 - - [21/Sep/2026:01:55:06 +0000] "POST /wp-admin/admin-ajax.php?action=updraft_central ...
show more
107.189.6.149 - - [21/Sep/2026:01:55:06 +0000] "POST /wp-admin/admin-ajax.php?action=updraft_central_ajaxcallback HTTP/2.0" 403 107 "-" "python-requests/2.34.2"
...
show less
|
Web App Attack
|
|
🇩🇪
93.152.221.87
|
|
93.152.221.87 - - [21/Sep/2026:01:39:36 +0000] "GET /.env HTTP/2.0" 200 55 "-" "python-requests/2.34 ...
show more
93.152.221.87 - - [21/Sep/2026:01:39:36 +0000] "GET /.env HTTP/2.0" 200 55 "-" "python-requests/2.34.2"
...
show less
|
Web App Attack
|
|
🇩🇪
94.26.106.214
|
|
2026-09-19 21:52:32,201 fail2ban.actions [3837553]: NOTICE [nginx-honeypot] Ban 94.26.106.21 ...
show more
2026-09-19 21:52:32,201 fail2ban.actions [3837553]: NOTICE [nginx-honeypot] Ban 94.26.106.214
2026-09-19 21:52:32,519 fail2ban.actions [3837553]: NOTICE [nginx-vulnerability-scanner] Ban 94.26.106.214
2026-09-20 23:27:59,492 fail2ban.actions [3837553]: NOTICE [nginx-vulnerability-scanner] Ban 94.26.106.214
...
show less
|
Brute-Force
SSH
|
|
🇨🇳
116.179.32.109
|
|
116.179.32.109 - - [20/Sep/2026:22:50:13 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0 ...
show more
116.179.32.109 - - [20/Sep/2026:22:50:13 +0000] "GET /wp-login.php HTTP/2.0" 200 33 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
|
Web App Attack
|
|
🇫🇷
85.204.70.96
|
|
85.204.70.96 - - [20/Sep/2026:21:49:58 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 403 169 " ...
show more
85.204.70.96 - - [20/Sep/2026:21:49:58 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/2.0" 403 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
...
show less
|
Web App Attack
|