Automated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Req ...
show moreAutomated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Requests: GET /src/.env → 404, GET /v1/.env → 404, GET /backup/.env → 404, GET /v2/.env → 404, GET /server/.env → 404
show less
Automated web attack detected by a SOC sensor: 404 flood (path brute forcing). Requests: {"host":"be ...
show moreAutomated web attack detected by a SOC sensor: 404 flood (path brute forcing). Requests: {"host":"beratungbewegt.at","worker":"brbwg-ph","n":154,"n4":145,"n5":0,"paths":17}
show less
Automated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Req ...
show moreAutomated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Requests: GET /demo/.env → 404, GET /.aws/credentials → 404, GET /core/.env → 404, GET /.env.save → 404, GET /config.js → 404
show less
Automated web attack detected by a SOC sensor: WordPress probing on a non-WordPress site. Requests: ...
show moreAutomated web attack detected by a SOC sensor: WordPress probing on a non-WordPress site. Requests: GET /wp-login.php → 404, GET /wp-json/ → 404
show less
Automated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Req ...
show moreAutomated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Requests: GET /.git/HEAD → 404
show less
Automated web attack detected by a SOC sensor: Known-bad IP (threat intel feed). Requests: 45.138.12 ...
show moreAutomated web attack detected by a SOC sensor: Known-bad IP (threat intel feed). Requests: 45.138.12.217 listed by spamhaus,firehol
show less
Automated web attack detected: probed 36 sensitive paths (/xmlrpc.php, /wp-admin/includes/xmrlpc.php ...
show moreAutomated web attack detected: probed 36 sensitive paths (/xmlrpc.php, /wp-admin/includes/xmrlpc.php, /wp-admin/css/colors/blue/index.php/); 404 flood: 204 of 204 over 172 paths; known attacker: AbuseIPDB 100% (3178 reports). Requests: GET /ok.php → 404, GET /user.php → 404, GET /contact.php → 404, GET /inputs.php → 404, GET /asasx.php → 404 User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Automated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Req ...
show moreAutomated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Requests: GET /config.php → 404
show less
Automated web attack detected by a SOC sensor: WordPress probing on a non-WordPress site. Requests: ...
show moreAutomated web attack detected by a SOC sensor: WordPress probing on a non-WordPress site. Requests: GET /wp-login.php?_=770094 → 404, GET /cms/wp-login.php → 404, GET /site/wp-login.php → 404, GET /site/wp-login.php → 404, GET /wp/wp-login.php → 404
show less
Automated web attack detected by a SOC sensor: WordPress probing on a non-WordPress site. Requests: ...
show moreAutomated web attack detected by a SOC sensor: WordPress probing on a non-WordPress site. Requests: GET /wp-login.php → 404, GET /wp-json/ → 404
show less
Automated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Req ...
show moreAutomated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Requests: GET /.git/config → 404
show less
Automated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Req ...
show moreAutomated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Requests: GET /.env → 404
show less
Automated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Req ...
show moreAutomated web attack detected by a SOC sensor: Secrets and config probing (.env, .git, backups). Requests: GET /.git/config → 404
show less
Automated web attack detected: probed 35 sensitive paths (/.env.prod, /.env.www, /.git/config); inje ...
show moreAutomated web attack detected: probed 35 sensitive paths (/.env.prod, /.env.www, /.git/config); injection / traversal in 9 URLs; 404 flood: 356 of 390 over 167 paths; 390 requests in 15 min; known attacker: AbuseIPDB 100% (109 reports). Requests: GET /leistungen.html → 307, GET /application/.env → 404, GET /var/.env → 404, GET /.env.prod → 404, GET /.env.www → 404 User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0
show less
Automated web attack detected: probed 6 sensitive paths (/.svn/entries, /.svn/format, /.hg/store/req ...
show moreAutomated web attack detected: probed 6 sensitive paths (/.svn/entries, /.svn/format, /.hg/store/requires); known attacker: AbuseIPDB 100% (3349 reports). Requests: GET /.svn/entries → 404, GET /.svn/format → 404, GET /.hg/store/requires → 404, GET /.svn/wc.db → 404, GET /.git/config → 404 User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
show less
Automated web attack detected: probed 29 sensitive paths (/.env~, /.env.test, /server-info.php); 404 ...
show moreAutomated web attack detected: probed 29 sensitive paths (/.env~, /.env.test, /server-info.php); 404 flood: 164 of 168 over 163 paths. Requests: GET /nest/.env → 404, POST / → 403, GET /shared/.env → 404, GET /src/.env → 404, GET /brevo/.env → 404 User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Automated web attack detected: probed 19 sensitive paths (/.env.backup, /.env.staging, /config/datab ...
show moreAutomated web attack detected: probed 19 sensitive paths (/.env.backup, /.env.staging, /config/database.yml); 404 flood: 33 of 35 over 34 paths; known attacker: AbuseIPDB 100% (2580 reports). Requests: GET /api/.env → 404, GET /.env.backup → 404, GET /credentials.json → 404, GET /.env.staging → 404, GET /config/database.yml → 404 User agent: Mozilla/5.0 (compatible; SecurityResearch/1.0)
show less
Automated web attack detected: probed 39 sensitive paths (/.env.development, /phpinfo.php, /.git/log ...
show moreAutomated web attack detected: probed 39 sensitive paths (/.env.development, /phpinfo.php, /.git/logs/HEAD); 404 flood: 97 of 111 over 84 paths; known attacker: AbuseIPDB 100% (6796 reports). Requests: GET /wp-json/wp/v2/users → 404, GET /api/config.php → 404, GET /wp-settings.php → 404, GET /.env.development → 404, GET /frontend/.env → 404 User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36
show less
Automated web attack detected: probed 22 sensitive paths (/info.php, /server-status, /.env.productio ...
show moreAutomated web attack detected: probed 22 sensitive paths (/info.php, /server-status, /.env.production); 404 flood: 42 of 47 over 46 paths; known attacker: AbuseIPDB 100% (9330 reports). Requests: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js → 302, GET /info.php → 404, GET /server-status → 404, GET /%2eenv → 404, GET /.env.production → 404 User agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36
show less
Automated web attack detected: probed 8 sensitive paths (/.env.vercel, /wp-content/debug.log, /.env. ...
show moreAutomated web attack detected: probed 8 sensitive paths (/.env.vercel, /wp-content/debug.log, /.env.contentful); 404 flood: 104 of 104 over 104 paths; known attacker: AbuseIPDB 100% (856 reports). Requests: GET /aws.json → 404, GET /settings.json → 404, GET /mailgun_api_key.txt → 404, GET /algolia-config.json → 404, GET /aws.yaml → 404 User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36
show less
Automated web attack detected: probed 41 sensitive paths (/data.sql, /mysql.sql, /user_secrets.yml.o ...
show moreAutomated web attack detected: probed 41 sensitive paths (/data.sql, /mysql.sql, /user_secrets.yml.old). Requests: GET /data.sql → 302, GET /mysql.sql → 302, GET /local.settings.json → 302, GET /secrets.tfvars → 302, GET /terraform.tfstate → 302 User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
show less
Web App AttackBad Web Bot
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.