🇱🇹
62.60.130.252
29 Oct 2026
Zombie network / Bot scanner detected:
[GET] /wp-admin/
[GET] /wp-login.php
[GET] /wp-login.php
UA ...
show more
Zombie network / Bot scanner detected:
[GET] /wp-admin/
[GET] /wp-login.php
[GET] /wp-login.php
UA: Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.159 Safari/537.36
show less
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
45.148.10.120
29 Oct 2026
Unauthorized access attempts:
[POST] /wp-json/batch/v1
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X ...
show more
Unauthorized access attempts:
[POST] /wp-json/batch/v1
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15
show less
Web App Attack
🇪🇸
188.26.198.135
29 Oct 2026
Unauthorized access attempts:
[GET] /ads.txt
UA: domains-crawler/0.1 (+ads.txt survey; one request ...
show more
Unauthorized access attempts:
[GET] /ads.txt
UA: domains-crawler/0.1 (+ads.txt survey; one request per domain)
show less
Web App Attack
🇨🇳
49.233.10.250
29 Oct 2026
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) ...
show more
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Web App Attack
🇧🇷
201.79.101.156
29 Oct 2026
Unauthorized access attempts:
[GET] /license.txt
[GET] /license.txt
UA: python-requests/2.27.1
Web App Attack
🇳🇱
195.178.110.104
29 Oct 2026
Unauthorized access attempts:
[GET] /old/admin/dashboard
[GET] /old/tickets
[GET] /old/categories
[ ...
show more
Unauthorized access attempts:
[GET] /old/admin/dashboard
[GET] /old/tickets
[GET] /old/categories
[GET] /old/support
[GET] /old/onboarding
[GET] /old/two-factor-challenge
[GET] /old/auth/login
[GET] /old/email/verify
[GET] /old/orders
[GET] /old/admin/products
[GET] /old/upgrade
[GET] /old/shop
[GET] /old/webhooks
[GET] /old/settings
[GET] /old/auth/login
[GET] /old/posts
[GET] /old/telescope
[GET] /old/login
[GET] /old/admin/settings
[GET] /old/forgot-password
[GET] /old/billing
[GET] /old/forgot-password
[GET] /old/admin/reports
[GET] /old/api-keys
[GET] /old/profile
[GET] /old/auth/register
[GET] /old/admin/login
[GET] /old/register
[GET] /old/cart
[GET] /old/about-us
[GET] /old/workspace
[GET] /old/backpack/dashboard
[GET] /old/horizon
[GET] /old/cadastro
[GET] /old/auth/register
[GET] /old/about
[GET] /old/wishlist
[GET] /old/password/reset
[GET] /old/payment
[GET] /old/dashboard
[GET] /old/painel
[GET] /old/contact
[GET] /old/products
[GET] /old/home
[GET] /old/em
...(Truncated)
show less
Web App Attack
🇳🇱
45.148.10.12
29 Oct 2026
Zombie network / Bot scanner detected:
[GET] /health
[GET] /version
UA: Mozilla/5.0 (Macintosh; In ...
show more
Zombie network / Bot scanner detected:
[GET] /health
[GET] /version
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Safari/605.1.15
show less
Bad Web Bot
Exploited Host
Web App Attack
🇨🇳
101.33.237.108
29 Oct 2026
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) ...
show more
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Web App Attack
🇪🇸
34.175.52.233
29 Oct 2026
Unauthorized access attempts:
[GET] /application_default_credentials.json
[GET] /key.json
[GET] /.c ...
show more
Unauthorized access attempts:
[GET] /application_default_credentials.json
[GET] /key.json
[GET] /.config/gcloud/application_default_credentials.json
[GET] /includes/phpinfo.php
[GET] /google-key.json
[GET] /core/phpinfo.php
[GET] /service-account.json
[GET] /google-credentials.json
[GET] /gcp-credentials.json
[GET] /qa/phpinfo.php
[GET] /public_html/phpinfo.php
[GET] /htdocs/phpinfo.php
[GET] /staging/phpinfo.php
[GET] /preview/phpinfo.php
[GET] /uat/phpinfo.php
[GET] /info.php.bak
[GET] /cpanel/phpinfo.php
[GET] /phpinfo.php.save
[GET] /phpversion.php
[GET] /_profiler/phpinfo
[GET] /_environment
[GET] /mail/phpinfo.php
[GET] /server-status.php
[GET] /info
[GET] /_phpinfo.php
[GET] /old_phpinfo.php
[GET] /php-info.php
[GET] /server-info.php
[GET] /tmp/phpinfo.php
[GET] /dev/phpinfo.php
[GET] /debug.php
[GET] /test.php
[GET] /i.php
[GET] /p.php
[GET] /phpinfo
[GET] /php.php
[GET] /config/app/.env
[GET] /qa/.env
[GET] /stage/.env
UA: Mozilla/5.0 (X11; Linux x86_64) Apple
...(Truncated)
show less
Web App Attack
🇭🇰
20.205.120.210
29 Oct 2026
Honeypot hit! 1 attempts in the last 5 minutes.
Sample UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64 ...
show more
Honeypot hit! 1 attempts in the last 5 minutes.
Sample UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
170.106.132.175
29 Oct 2026
Unauthorized access attempts:
[GET] /.env
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77. ...
show more
Unauthorized access attempts:
[GET] /.env
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
show less
Web App Attack
🇳🇱
45.148.10.12
29 Oct 2026
Zombie network / Bot scanner detected:
[GET] /health
[GET] /version
UA: Mozilla/5.0 (Windows NT 10 ...
show more
Zombie network / Bot scanner detected:
[GET] /health
[GET] /version
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Bad Web Bot
Exploited Host
Web App Attack
🇵🇱
45.138.12.24
29 Oct 2026
Unauthorized access attempts:
[GET] /%2f.env
[GET] /openai.config
[GET] /.claude/settings.json
[POS ...
show more
Unauthorized access attempts:
[GET] /%2f.env
[GET] /openai.config
[GET] /.claude/settings.json
[POST] /soap
[GET] /settings
[POST] /rsc
[GET] /vertex-ai-credentials.json
[GET] /conf.json
[GET] /aws/ses/smtp.env
[GET] /config.dev.json
[GET] /.claude/settings.local.json
[GET] ///.env
[GET] /.env.prod.local
[GET] /public_html/.env
[GET] /aws.json
[GET] /azure.yaml
[GET] /env.js
[GET] /.env.1
[GET] /mcp.json
[GET] /aws.yml
[GET] /assets/index.min.js
[GET] /google-ai.json
[GET] /config/runtime-env.js
[GET] /api/v2/.env
[GET] /html/.env
[GET] /config/credentials
[GET] /root/.aws/credentials
[GET] /vertex.json
[GET] /aws/metadata
[GET] /config/aws.php
[GET] /staging/.env
[GET] /s3/config.json
[GET] /config/secrets/aws.json
[GET] /.env.save
[GET] /.dockercfg
[GET] /config/azure-openai.json
[GET] /inventory.ini
[GET] /s3/.env.bak
[GET] /dev/.env
[GET] /.env.swp
[GET] /$(pwd)/terraform.tfstate
[GET] /.aws/config
[GET] /~/.boto
[GET] /aws/credentials.json
[GET] /.passwd-s3fs
[GET]
...(Truncated)
show less
Web App Attack
🇳🇱
85.11.167.192
29 Oct 2026
Unauthorized access attempts:
[GET] /wp-content/plugins/broken-link-checker/readme.txt
[GET] /wp-co ...
show more
Unauthorized access attempts:
[GET] /wp-content/plugins/broken-link-checker/readme.txt
[GET] /wp-content/plugins/visualcomposer/readme.txt
[GET] /wp-content/plugins/translatepress-multilingual/readme.txt
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36
show less
Web App Attack
🇨🇳
123.207.65.62
29 Oct 2026
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) ...
show more
Unauthorized access attempts:
[GET] /
UA: Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
show less
Web App Attack
🇷🇴
80.94.92.126
29 Oct 2026
Unauthorized access attempts:
[GET] /.svn/wc.db
UA: Mozilla/5.0 (Linux; Android 9; Redmi Note 8T) ...
show more
Unauthorized access attempts:
[GET] /.svn/wc.db
UA: Mozilla/5.0 (Linux; Android 9; Redmi Note 8T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.61 Mobile Safari/537.36
show less
Web App Attack
🇩🇪
165.22.74.123
29 Oct 2026
Unauthorized access attempts:
[GET] //assets/scripts/filemanager/dialog.php
[GET] //assets/tinymce/ ...
show more
Unauthorized access attempts:
[GET] //assets/scripts/filemanager/dialog.php
[GET] //assets/tinymce/plugins/filemanager/dialog.php
[GET] //js/tinymce4/plugins/filemanager/dialog.php
[GET] //responsive_filemanager/filemanager/dialog.php
[GET] //cms/vendor/responsive_filemanager/filemanager/dialog.php
[GET] //filemanager/filemanager/dialog.php
[GET] //assets/admin/tinymce/plugins/filemanager/dialog.php
[GET] //scripts/filemanager/dialog.php
[GET] //admin/core/kcfinder/upload.php
[GET] //phpformbuilder/plugins/filemanager/dialog.php
[GET] //editor/filemanager/dialog.php
[GET] //public/js/libraries/filemanager/dialog.php
[GET] //resources/js/tinymce/plugins/filemanager/dialog.php
[GET] //js/fileManager/filemanager/dialog.php
[GET] //admin/kcfinder/upload.php
[GET] //cms/tinymce/filemanager/filemanager/dialog.php
[GET] //assets/filemanager/dialog.php
[GET] //assets/plugins/tinymce/plugins/filemanager/dialog.php
[GET] //admin/ckeditor/plugins/kcfinder/upload.php
[GET] //admin/
...(Truncated)
show less
Web App Attack
🇭🇰
20.24.222.184
29 Oct 2026
Honeypot hit! 1 attempts in the last 5 minutes.
Sample UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64 ...
show more
Honeypot hit! 1 attempts in the last 5 minutes.
Sample UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
show less
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
49.51.188.89
29 Oct 2026
Unauthorized access attempts:
[GET] /.env
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77. ...
show more
Unauthorized access attempts:
[GET] /.env
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
show less
Web App Attack
🇵🇱
45.138.12.43
29 Oct 2026
Zombie network / Bot scanner detected:
[POST] /index.php
[POST] /index.php
[POST] /index.php
[POST] ...
show more
Zombie network / Bot scanner detected:
[POST] /index.php
[POST] /index.php
[POST] /index.php
[POST] /index.php
[POST] /index.php
[POST] /wp/wp-json/batch/v1
[GET] /wp-json/wp/v2/posts
[GET] /feed/
[POST] /index.php
[POST] /wordpress/wp-json/batch/v1
[POST] /cms/wp-json/batch/v1
[POST] /index.php
[POST] /blog/wp-json/batch/v1
[POST] /main/wp-json/batch/v1
[POST] /wp-json/batch/v1
[GET] /readme.html
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
show less
Bad Web Bot
Exploited Host
Web App Attack
🇵🇱
45.138.12.22
29 Oct 2026
Unauthorized access attempts:
[GET] /vertex-ai.json
[GET] /app/amplify.yaml
[GET] /config.php
[GET] ...
show more
Unauthorized access attempts:
[GET] /vertex-ai.json
[GET] /app/amplify.yaml
[GET] /config.php
[GET] /gemini.env
[GET] /secrets.js
[GET] /config/index.js
[GET] /var/task/amplify.yaml
[GET] /config/vertex.json
[POST] /xml
[GET] /actuator/health
[GET] /s3.yml
[GET] /%2f.env.production
[GET] /~/.boto
[GET] /azure/local.settings.json
[GET] /app/.env
[GET] /aws/credentials.json
[GET] /serverless.yml
[GET] /.vscode/mcp.json
[GET] /credentials/config.json
[GET] /panel/.env
[GET] /lib../.git/config
[GET] /.terraform.tfstate
[GET] /aws.yml
[GET] /root/.aws/credentials
[GET] /web/.env
[POST] /_next/rsc
[GET] /aws/bucket
[GET] /dev/.env
[POST] /api/rsc
[GET] /s3cmd.ini
[GET] /assets../.git/config
[GET] /.docker/config.json
[GET] /s3/config.json
[GET] /ng/
[GET] /app/.env.production
[GET] /api/v1/health
[GET] /manifest.json
[GET] /.env_1
[GET] /etc/boto.cfg
[GET] /.gemini/settings.json
[GET] /wp-config.php-backup
[GET] /css../.git/config
[GET] /proc/self/environ
[GET] /aws.env
[GET]
...(Truncated)
show less
Web App Attack
🇵🇱
45.138.12.46
29 Oct 2026
Zombie network / Bot scanner detected:
[POST] /index.php
[POST] /index.php
[POST] /index.php
[POST] ...
show more
Zombie network / Bot scanner detected:
[POST] /index.php
[POST] /index.php
[POST] /index.php
[POST] /index.php
[GET] /wp-json/wp/v2/posts
[POST] /wp-json/batch/v1
[GET] /readme.html
[POST] /index.php
[POST] /index.php
[POST] /index.php
[POST] /blog/wp-json/batch/v1
[POST] /wordpress/wp-json/batch/v1
[GET] /feed/
[POST] /cms/wp-json/batch/v1
[POST] /new/wp-json/batch/v1
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15
show less
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
195.178.110.31
29 Oct 2026
Unauthorized access attempts:
[GET] /readme.html
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) App ...
show more
Unauthorized access attempts:
[GET] /readme.html
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0
show less
Web App Attack
🇸🇬
194.5.82.51
29 Oct 2026
Zombie network / Bot scanner detected:
[GET] /wp-content/plugins/upspy/up.php
[GET] /wp-content/plu ...
show more
Zombie network / Bot scanner detected:
[GET] /wp-content/plugins/upspy/up.php
[GET] /wp-content/plugins/wp-plugin/wp-plugin.php
[GET] /assets/av.php
[GET] /.well-known/acme-challenge/mah.php
[GET] /uploads/c99shell.php
[GET] /wp-includes/assets/script-loader-react-refresh-runtime-num.php
[GET] /wp-includes/l10n/class-wp-translation-file-mo-event.php
[GET] /wp-includes/js/dist/bypass.php
[GET] /wp-includes/theme-compat/footer-embed-function.php
[GET] /images/av.php
[GET] /wp-admin/user/header.php
[GET] /wp-includes/IXR/xsec1.php
[GET] /wp-content/1.php%20
[GET] /.well-known/acme-challenge/wp-login.php
[GET] /wp-includes/rest-api/1.php
[GET] /wp-admin/js/load.php
[GET] /wp-content/plugins/fix/bypass.php
[GET] /wp-content/upgrade/index.php
[GET] /.well-known/pki-validation/xmrlpc.php
[GET] /wp-content/plugins/pwnd/1.php
[GET] /makeasmtp.php
[GET] /wp-includes/widgets/bypass.php
[GET] /wp-includes/style-engine/adminfus.php
[GET] /wp-content/themes/twentytwentyfour/content-i
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
🇸🇬
194.5.82.23
29 Oct 2026
Zombie network / Bot scanner detected:
[GET] /wp-includes/images/smilies/
[GET] /wp-includes/custom ...
show more
Zombie network / Bot scanner detected:
[GET] /wp-includes/images/smilies/
[GET] /wp-includes/customize/
[GET] /assets/plugins/plupload/examples/upload.php
UA: Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0
show less
Bad Web Bot
Exploited Host
Web App Attack