๐ญ๐ฐ
156.245.205.68
13 Sep 2026
Unauthorized access attempts:
[GET] /static/images/nopic.png
UA: Mozilla/5.0 (Windows NT 10.0; WOW ...
show more
Unauthorized access attempts:
[GET] /static/images/nopic.png
UA: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0
show less
Web App Attack
๐บ๐ธ
45.45.237.97
13 Sep 2026
Zombie network / Bot scanner detected:
[POST] /graphql
[GET] /serviceAccountKey.json
[GET] /app/.en ...
show more
Zombie network / Bot scanner detected:
[POST] /graphql
[GET] /serviceAccountKey.json
[GET] /app/.env
[GET] /application.yml
[GET] /.env.backup
[GET] /web.config
[GET] /config.yml
[GET] /wp/.env
[GET] /.env.staging
[GET] /secrets.json
[GET] /terraform.tfvars
[GET] /local_settings.py
[GET] /service_account.json
[GET] /api/.env
[GET] /env.json
[GET] /firebase.json
[GET] /.git/config
[GET] /credentials.json
[GET] /api/env
[GET] /.env.old
[GET] /netlify.toml
[GET] /key.json
[GET] /.env.prod
[GET] /actuator/env
[GET] /public/.env
[GET] /vercel.json
[GET] /docker-compose.yml
[GET] /keys.json
[GET] /.git/HEAD
[GET] /appsettings.json
[GET] /service-account.json
[GET] /config.json
[GET] /backend/.env
[GET] /.env.bak
[GET] /swagger.json
[GET] /actuator/heapdump
[GET] /actuator/configprops
[GET] /aws-exports.js
[GET] /.gitlab-ci.yml
[GET] /amplifyconfiguration.json
[GET] /.aws/config
[GET] /terraform.tfstate
[GET] /.aws/credentials
[GET] /debug/vars
[GET] /.env.test
[GET] /openapi.
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
๐ญ๐ฐ
20.24.86.237
13 Sep 2026
Unauthorized access attempts:
[GET] /7.php
[GET] /goods.php
[GET] /k2.php
[GET] /aaa.php
UA: Unkno ...
show more
Unauthorized access attempts:
[GET] /7.php
[GET] /goods.php
[GET] /k2.php
[GET] /aaa.php
UA: Unknown
show less
Web App Attack
๐ฎ๐ณ
4.224.45.129
13 Sep 2026
Unauthorized access attempts:
[GET] /blacks.php
[GET] /1.php
[GET] /alfa.php
[GET] /ugmlxqxz.php
[G ...
show more
Unauthorized access attempts:
[GET] /blacks.php
[GET] /1.php
[GET] /alfa.php
[GET] /ugmlxqxz.php
[GET] /fryvbbn.php
[GET] /media.php
UA: Unknown
show less
Web App Attack
๐จ๐ณ
152.136.23.159
13 Sep 2026
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) ...
show more
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Web App Attack
๐จ๐ณ
43.140.247.223
13 Sep 2026
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) ...
show more
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Web App Attack
๐บ๐ธ
154.54.100.175
13 Sep 2026
Unauthorized access attempts:
[GET] /.git/config
UA: Mozilla/5.0 (Linux; Android 9; Redmi Note 4) ...
show more
Unauthorized access attempts:
[GET] /.git/config
UA: Mozilla/5.0 (Linux; Android 9; Redmi Note 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.80 Mobile Safari/537.36
show less
Web App Attack
๐ธ๐ช
185.139.155.252
13 Sep 2026
Unauthorized access attempts:
[GET] /llms.txt
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like M ...
show more
Unauthorized access attempts:
[GET] /llms.txt
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 17_1_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1.2 Mobile/15E148 Safari/604
show less
Web App Attack
๐จ๐ณ
162.14.81.106
13 Sep 2026
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) ...
show more
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Web App Attack
๐บ๐ธ
45.45.237.97
13 Sep 2026
Zombie network / Bot scanner detected:
[GET] /app/.env
[GET] /laravel/.env
[GET] /awsconfiguration. ...
show more
Zombie network / Bot scanner detected:
[GET] /app/.env
[GET] /laravel/.env
[GET] /awsconfiguration.json
[GET] /keys.json
[GET] /.env.production
[GET] /.github/workflows/deploy.yml
[GET] /actuator/heapdump
[GET] /.git/HEAD
[GET] /wp/.env
[GET] /env.js
[GET] /config.js
[GET] /.env.old
[GET] /serviceAccountKey.json
[GET] /public/.env
[GET] /.git/config
[GET] /.gitlab-ci.yml
[GET] /wp-config.php
[GET] /appsettings.json
[GET] /.env.test
[GET] /docker-compose.yml
[GET] /config.yml
[GET] /actuator/configprops
[GET] /.env.staging
[GET] /settings.json
[GET] /terraform.tfvars
[GET] /.env.prod
[GET] /graphql
[GET] /swagger.json
[GET] /service_account.json
[GET] /.env.backup
[GET] /.aws/credentials
[GET] /token.json
[GET] /gcp-credentials.json
[GET] /api/.env
[GET] /aws-exports.js
[GET] /key.json
[GET] /wp-config.php.bak
[GET] /actuator/env
[GET] /application.properties
[GET] /api/config
[GET] /terraform.tfstate
[GET] /env.json
[GET] /service-account.json
[GET] /firebase-adminsdk.j
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
๐จ๐ฆ
216.26.234.81
13 Sep 2026
Unauthorized access attempts:
[GET] /xmlrpc.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7 ...
show more
Unauthorized access attempts:
[GET] /xmlrpc.php
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15
show less
Web App Attack
๐ฉ๐ช
134.122.79.67
13 Sep 2026
Unauthorized access attempts:
[GET] //admin/js/kcfinder/upload.php
[GET] //lib/kcfinder/upload.php
...
show more
Unauthorized access attempts:
[GET] //admin/js/kcfinder/upload.php
[GET] //lib/kcfinder/upload.php
[GET] //plugins/responsive_filemanager/filemanager/dialog.php
[GET] //js/fileManager/filemanager/dialog.php
[GET] //resources/js/tinymce/plugins/filemanager/dialog.php
[GET] //admin/core/kcfinder/upload.php
[GET] //admin/kcfinder/upload.php
[GET] //admin/responsive_filemanager/filemanager/dialog.php
[GET] //editor/filemanager/dialog.php
[GET] //phpformbuilder/plugins/filemanager/dialog.php
[GET] //admin/ckeditor/plugins/kcfinder/upload.php
[GET] //tinymce/plugins/filemanager/dialog.php
[GET] //admin/events/lib/external/responsive_filemanager/filemanager/dialog.php
[GET] //assets/plugins/filemanager/dialog.php
[GET] //lib/filemanager/dialog.php
[GET] //arquivos/javascript/responsive_filemanager/filemanager/dialog.php
[GET] //admin/ckeditor/kcfinder/upload.php
[GET] //cms/vendor/responsive_filemanager/filemanager/dialog.php
[GET] //jquery/kcfinder/upload.php
[GET] //public/f
...(Truncated)
show less
Web App Attack
๐ฏ๐ต
35.200.66.179
13 Sep 2026
Zombie network / Bot scanner detected:
[POST] /geoserver/wfs
[GET] /%24%7B%28%23a%3D%40org.apache.c ...
show more
Zombie network / Bot scanner detected:
[POST] /geoserver/wfs
[GET] /%24%7B%28%23a%3D%40org.apache.commons.io.IOUtils%40toString%28%40java.lang.Runtime%40getRuntime%28%29.exec%28%22echo%20GSCAN_CF%22%29.getInputStream%28%29%2C%22utf-8%22%29%29.%28%40com.opensymphony.webwork.ServletActionContext%40getResponse%28%29.setHeader%28%22X-Cmd-Response%22%2C%23a%29%29%7D/
[GET] /index.php
[GET] /url
[POST] /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
[GET] /api/webhook
[GET] /redirect
[GET] /out
[GET] /proxy
[GET] /api/redirect
[GET] /fetch
[GET] /fetch
[GET] /api/webhook
[GET] /fetch
[GET] /proxy
[GET] /fetch
[GET] /fetch
[GET] /fetch
[GET] /system
[POST] /api/run
[GET] /serviceAccount.json
[GET] /stage/.env
[GET] /src/.env.local
[GET] /aws/.env.production
[GET] /.env.openai
[GET] /aws-config.js
[GET] /config.yaml
UA: Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)
show less
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
154.54.100.175
13 Sep 2026
Unauthorized access attempts:
[GET] /.git/config
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_ ...
show more
Unauthorized access attempts:
[GET] /.git/config
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36 OPR/60.0.3255.170
show less
Web App Attack
๐ฎ๐ณ
4.224.45.129
13 Sep 2026
Unauthorized access attempts:
[GET] /blacks.php
[GET] /red.php
[GET] //coffexium2.php
[GET] /akiccv ...
show more
Unauthorized access attempts:
[GET] /blacks.php
[GET] /red.php
[GET] //coffexium2.php
[GET] /akiccv.php
[GET] /zpcutwcq.php
[GET] /h2.php
[GET] /inx.php
[GET] /rfgymredns.php
[GET] /zwso.php
[GET] /edit.php
[GET] /mini.php
[GET] //cae.php
[GET] /filemanager.php
[GET] /makeasmtp.php
[GET] /NewFile.php
[GET] /mpwkxnos.php
[GET] /ass.php
[GET] /elements.php
[GET] /mod_simplefileuploadv1.3.php
[GET] /wp-22.php
[GET] /ded.php
[GET] /modules.php
[GET] /indo.php
[GET] /xetmolxr.php
[GET] /x33.php
[GET] /x.php
[GET] /mk.php
[GET] /ugmlxqxz.php
[GET] /sitemap.php
[GET] /we.php
[GET] //uejvv.php
[GET] /mds.php
[GET] /pJPoKA.php
[GET] /mga.php
[GET] /wp-admin/css/colors/modern/
[GET] /i18n.php
[GET] /iov.php
[GET] /file.php
[GET] /fffm.php
[GET] /fix.php
[GET] /wp-admin/css/colors/sunrise/
[GET] /ccc.php
[GET] /zzfenvgd.php
[GET] /ant.php
[GET] /admin.php
[GET] /hur.php
[GET] /BDKR28WP.php
[GET] /prv8.php
[GET] /gigi.php
[GET] /ba.php
UA: Unknown
show less
Web App Attack
๐บ๐ธ
45.45.237.97
13 Sep 2026
Zombie network / Bot scanner detected:
[POST] /graphql
[GET] /key.json
[GET] /.env.local
[GET] /loc ...
show more
Zombie network / Bot scanner detected:
[POST] /graphql
[GET] /key.json
[GET] /.env.local
[GET] /local_settings.py
[GET] /wp-config.php.bak
[GET] /actuator/heapdump
[GET] /credentials.json
[GET] /firebase.json
[GET] /wp/.env
[GET] /amplifyconfiguration.json
[GET] /.aws/config
[GET] /api/config
[GET] /.env.production
[GET] /.gitlab-ci.yml
[GET] /actuator/env
[GET] /instance/config.py
[GET] /.netrc
[GET] /config.json
[GET] /vercel.json
[GET] /graphql
[GET] /env.json
[GET] /config.js
[GET] /application.properties
[GET] /api/.env
[GET] /.git/HEAD
[GET] /backend/.env
[GET] /swagger.json
[GET] /application.yml
[GET] /token.json
[GET] /netlify.toml
[GET] /sitemap.xml
[GET] /actuator/configprops
[GET] /terraform.tfstate
[GET] /.aws/credentials
[GET] /secrets.json
[GET] /.env.staging
[GET] /.env.development
[GET] /web.config
[GET] /keys.json
[GET] /api/env
[GET] /env.js
[GET] /config.yml
[GET] /.git/config
[GET] /service_account.json
[GET] /aws-exports.js
[GET] /appsettings.json
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
๐ฑ๐บ
64.89.161.90
13 Sep 2026
Unauthorized access attempts:
[GET] /admin/assets/ajax_fullcalendar.php
[GET] /admin/assets/ajax_fu ...
show more
Unauthorized access attempts:
[GET] /admin/assets/ajax_fullcalendar.php
[GET] /admin/assets/ajax_fullcalendar.php
[GET] /admin/assets/ajax_fullcalendar.php
UA: ALittle Client
show less
Web App Attack
๐จ๐ฆ
209.50.177.12
13 Sep 2026
Unauthorized access attempts:
[GET] /xmlrpc.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:1 ...
show more
Unauthorized access attempts:
[GET] /xmlrpc.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
show less
Web App Attack
๐ฐ๐ท
52.141.45.117
13 Sep 2026
Unauthorized access attempts:
[GET] /chosen.php
[GET] /dex.php
[GET] /almafkew.php
[GET] /run.php
[ ...
show more
Unauthorized access attempts:
[GET] /chosen.php
[GET] /dex.php
[GET] /almafkew.php
[GET] /run.php
[GET] //CAE-2.5.php
[GET] /edit-tags.php
[GET] /wp-content/uploads/
[GET] /jybkxer.php
UA: Unknown
show less
Web App Attack
๐ธ๐พ
77.44.191.249
13 Sep 2026
Unauthorized access attempts:
[GET] /v2/355B7434-E0CA-44EC-942B-C7BE35752881
UA: Mozilla/5.0 (Wind ...
show more
Unauthorized access attempts:
[GET] /v2/355B7434-E0CA-44EC-942B-C7BE35752881
UA: Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.19041.6456
show less
Web App Attack
๐ญ๐ฐ
20.24.86.237
13 Sep 2026
Unauthorized access attempts:
[GET] /zpcutwcq.php
[GET] /almafkew.php
[GET] /b8.php
[GET] /xxw.php
...
show more
Unauthorized access attempts:
[GET] /zpcutwcq.php
[GET] /almafkew.php
[GET] /b8.php
[GET] /xxw.php
[GET] /min.php
[GET] /leeocvou.php
[GET] //CAE-2.5.php
[GET] /x33.php
UA: Unknown
show less
Web App Attack
๐ฎ๐ณ
4.224.45.129
13 Sep 2026
Unauthorized access attempts:
[GET] /ass.php
[GET] /xp.php
[GET] /ab.php
[GET] /radio.php
[GET] //a ...
show more
Unauthorized access attempts:
[GET] /ass.php
[GET] /xp.php
[GET] /ab.php
[GET] /radio.php
[GET] //av.php
[GET] /jybkxer.php
[GET] /ops.php
[GET] /3PJcpMFsD8B.php
UA: Unknown
show less
Web App Attack
๐ฉ๐ช
134.122.71.164
13 Sep 2026
Unauthorized access attempts:
[GET] //admin/events/lib/external/responsive_filemanager/filemanager/ ...
show more
Unauthorized access attempts:
[GET] //admin/events/lib/external/responsive_filemanager/filemanager/dialog.php
[GET] //media/filemanager/dialog.php
[GET] //resources/plugins/tiny_mce/plugins/filemanager/dialog.php
[GET] //scripts/filemanager/dialog.php
[GET] //arquivos/javascript/responsive_filemanager/filemanager/dialog.php
[GET] //assets/responsive_filemanager/filemanager/dialog.php
[GET] //public/js/libraries/filemanager/dialog.php
[GET] //admin/responsive_filemanager/filemanager/dialog.php
[GET] //phpformbuilder/plugins/filemanager/dialog.php
[GET] //public/filemanager/dialog.php
[GET] //responsive_filemanager/filemanager/dialog.php
[GET] //tinymce/plugins/filemanager/dialog.php
[GET] //filemanager/dialog.php
[GET] //assets/scripts/filemanager/dialog.php
[GET] //asset/filemanager/dialog.php
[GET] //js/fileManager/filemanager/dialog.php
[GET] //admin/js/kcfinder/upload.php
[GET] //lib/filemanager/dialog.php
[GET] //plugins/responsive_filemanager/filemanager/dialog.php
...(Truncated)
show less
Web App Attack
๐ฎ๐ณ
4.224.45.129
13 Sep 2026
Unauthorized access attempts:
[GET] /mini.php
[GET] /wp-admin/css/colors/modern/
[GET] /wp-admin/cs ...
show more
Unauthorized access attempts:
[GET] /mini.php
[GET] /wp-admin/css/colors/modern/
[GET] /wp-admin/css/
[GET] /p.php
UA: Unknown
show less
Web App Attack
๐ง๐ท
38.211.128.10
13 Sep 2026
Unauthorized access attempts:
[POST] /api/session/reset_password
[POST] /api/session/reset_password ...
show more
Unauthorized access attempts:
[POST] /api/session/reset_password
[POST] /api/session/reset_password
[POST] /api/session/reset_password
[GET] /api/session/properties
[GET] /api/session/properties
UA: metabase-cve-2026-72898-detect/1.0 (benign detection probes only)
show less
Web App Attack