|
🇳🇱
45.148.10.119
|
|
2026/03/03 13:15:00 [error] 2355#2355: *11452 access forbidden by rule, client: 45.148.10.119, serve ...
show more
2026/03/03 13:15:00 [error] 2355#2355: *11452 access forbidden by rule, client: 45.148.10.119, server: pixel-sky.com, request: "GET /.git/HEAD HTTP/2.0", host: "pixel-sky.com"
2026/03/03 13:15:07 [error] 2355#2355: *11453 access forbidden by rule, client: 45.148.10.119, server: pixel-sky.com, request: "GET /.git/config HTTP/2.0", host: "pixel-sky.com"
2026/03/03 13:21:51 [error] 2355#2355: *11454 access forbidden by rule, client: 45.148.10.119, server: pixel-sky.com, request: "GET /.git/config HTTP/2.0", host: "pixel-sky.com"
2026/03/03 13:21:51 [error] 2355#2355: *11455 access forbidden by rule, client: 45.148.10.119, server: pixel-sky.com, request: "GET /backend/.env HTTP/2.0", host: "pixel-sky.com"
2026/03/03 13:21:52 [error] 2355#2355: *11456 access forbidden by rule, client: 45.148.10.119, server: pixel-sky.com, request: "GET /%2f%2eenv HTTP/2.0", host: "pixel-sky.com"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
20.127.130.112
|
|
20.127.130.112 - - [03/Mar/2026:11:26:02 +0000] "GET /wp-content/uploads/wp-login.php HTTP/2.0" 404 ...
show more
20.127.130.112 - - [03/Mar/2026:11:26:02 +0000] "GET /wp-content/uploads/wp-login.php HTTP/2.0" 404 5474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d6848b2490220d0-IAD 20.127.130.112
20.127.130.112 - - [03/Mar/2026:11:26:03 +0000] "GET /wp-admin/js/index.php HTTP/2.0" 404 5474 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d6848b4eb0720d0-IAD 20.127.130.112
...
show less
|
Brute-Force
Web App Attack
|
|
🇦🇺
20.92.234.66
|
|
20.92.234.66 - - [03/Mar/2026:11:08:59 +0000] "GET /cgi-bin/xmrlpc.php HTTP/2.0" 200 5628 "-" "Mozil ...
show more
20.92.234.66 - - [03/Mar/2026:11:08:59 +0000] "GET /cgi-bin/xmrlpc.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d682fb6792b6c65-SYD 20.92.234.66
20.92.234.66 - - [03/Mar/2026:11:09:16 +0000] "GET /wp-login.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d68301ebaaa6c65-SYD 20.92.234.66
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
170.39.216.152
|
|
2026/03/03 10:45:55 [error] 2355#2355: *11237 access forbidden by rule, client: 170.39.216.152, serv ...
show more
2026/03/03 10:45:55 [error] 2355#2355: *11237 access forbidden by rule, client: 170.39.216.152, server: api.rares-andrei.me, request: "GET /.env.dist HTTP/1.1", host: "92.82.37.130"
2026/03/03 10:45:55 [error] 2355#2355: *11238 access forbidden by rule, client: 170.39.216.152, server: api.rares-andrei.me, request: "GET /data/.git/config HTTP/1.1", host: "92.82.37.130"
2026/03/03 10:45:55 [error] 2355#2355: *11238 access forbidden by rule, client: 170.39.216.152, server: api.rares-andrei.me, request: "GET /data/.git/config HTTP/1.1", host: "92.82.37.130"
2026/03/03 10:45:56 [error] 2355#2355: *11239 access forbidden by rule, client: 170.39.216.152, server: api.rares-andrei.me, request: "GET /media../.git/config HTTP/1.1", host: "92.82.37.130"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇨🇦
20.151.2.242
|
|
20.151.2.242 - - [03/Mar/2026:07:37:04 +0000] "GET /wp-admin/themes.php HTTP/2.0" 200 5628 "-" "-" 9 ...
show more
20.151.2.242 - - [03/Mar/2026:07:37:04 +0000] "GET /wp-admin/themes.php HTTP/2.0" 200 5628 "-" "-" 9d66f94b8a4cc109-YYZ 20.151.2.242
20.151.2.242 - - [03/Mar/2026:07:37:05 +0000] "GET /wp-admin/index.php HTTP/2.0" 200 5628 "-" "-" 9d66f94f9fe3c109-YYZ 20.151.2.242
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
20.151.224.126
|
|
20.151.224.126 - - [03/Mar/2026:07:07:32 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/2.0" 4 ...
show more
20.151.224.126 - - [03/Mar/2026:07:07:32 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/2.0" 404 1875 "-" "-" 9d66ce0a9d38c730-YYZ 20.151.224.126
20.151.224.126 - - [03/Mar/2026:07:07:39 +0000] "GET /wp-admin/maint/about.php HTTP/2.0" 404 1875 "-" "-" 9d66ce30d8d7c730-YYZ 20.151.224.126
...
show less
|
Brute-Force
Web App Attack
|
|
🇪🇸
158.158.32.183
|
|
158.158.32.183 - - [03/Mar/2026:01:57:21 +0000] "GET //wp-admin/images/wp-conflg.php?p= HTTP/2.0" 20 ...
show more
158.158.32.183 - - [03/Mar/2026:01:57:21 +0000] "GET //wp-admin/images/wp-conflg.php?p= HTTP/2.0" 200 5628 "-" "-" 9d6507a8bb18ecab-MAD 158.158.32.183
158.158.32.183 - - [03/Mar/2026:01:57:21 +0000] "GET /xmlrpc.php HTTP/2.0" 200 5628 "-" "-" 9d6507aa9c38ecab-MAD 158.158.32.183
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
20.111.28.66
|
|
20.111.28.66 - - [03/Mar/2026:01:34:20 +0000] "GET /wp-admin/css/bolt.php HTTP/2.0" 404 5474 "-" "-" ...
show more
20.111.28.66 - - [03/Mar/2026:01:34:20 +0000] "GET /wp-admin/css/bolt.php HTTP/2.0" 404 5474 "-" "-" 9d64e5f32bf06f30-CDG 20.111.28.66
20.111.28.66 - - [03/Mar/2026:01:34:25 +0000] "GET /wp-admin/sc.php HTTP/2.0" 404 5474 "-" "-" 9d64e61208276f30-CDG 20.111.28.66
...
show less
|
Brute-Force
Web App Attack
|
|
🇸🇪
51.107.186.117
|
|
51.107.186.117 - - [02/Mar/2026:21:18:17 +0000] "GET //wp-admin/images/wp-conflg.php?p= HTTP/2.0" 30 ...
show more
51.107.186.117 - - [02/Mar/2026:21:18:17 +0000] "GET //wp-admin/images/wp-conflg.php?p= HTTP/2.0" 308 33 "-" "-" 9d636edc3d4a70d5-ARN 51.107.186.117
51.107.186.117 - - [02/Mar/2026:21:18:17 +0000] "GET /wp-admin/images/wp-conflg.php?p= HTTP/2.0" 404 5474 "-" "-" 9d636edc9db470d5-ARN 51.107.186.117
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
170.39.216.152
|
|
2026/03/02 20:31:53 [error] 2355#2355: *6069 access forbidden by rule, client: 170.39.216.152, serve ...
show more
2026/03/02 20:31:53 [error] 2355#2355: *6069 access forbidden by rule, client: 170.39.216.152, server: api.rares-andrei.me, request: "GET /files/.git/config HTTP/1.1", host: "92.82.37.130"
2026/03/02 20:31:54 [error] 2355#2355: *6070 access forbidden by rule, client: 170.39.216.152, server: api.rares-andrei.me, request: "GET /.env.backup HTTP/1.1", host: "92.82.37.130"
2026/03/02 20:31:55 [error] 2355#2355: *6071 access forbidden by rule, client: 170.39.216.152, server: api.rares-andrei.me, request: "GET /settings/.env HTTP/1.1", host: "92.82.37.130"
2026/03/02 20:31:56 [error] 2355#2355: *6072 access forbidden by rule, client: 170.39.216.152, server: api.rares-andrei.me, request: "GET /backup/.git/config HTTP/1.1", host: "92.82.37.130"
2026/03/02 20:31:58 [error] 2355#2355: *6073 access forbidden by rule, client: 170.39.216.152, server: api.rares-andrei.me, request: "GET /api/.git/config HTTP/1.1", host: "92.82.37.130"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇮🇩
185.213.83.180
|
|
185.213.83.180 - - [02/Mar/2026:20:03:31 +0000] "GET /wp-login.php HTTP/2.0" 200 5628 "https://www.g ...
show more
185.213.83.180 - - [02/Mar/2026:20:03:31 +0000] "GET /wp-login.php HTTP/2.0" 200 5628 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 9d630158ffc64068-SIN 185.213.83.180
185.213.83.180 - - [02/Mar/2026:20:03:45 +0000] "GET /wp-login.php HTTP/2.0" 200 5628 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 9d6301ae58e74068-SIN 185.213.83.180
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
2a09:bac5:9529:31f5::4fa:1e
|
|
2a09:bac5:9529:31f5::4fa:1e - - [02/Mar/2026:16:36:50 +0000] "GET /wp-admin/style.php HTTP/2.0" 404 ...
show more
2a09:bac5:9529:31f5::4fa:1e - - [02/Mar/2026:16:36:50 +0000] "GET /wp-admin/style.php HTTP/2.0" 404 5474 "http://rares-andrei.me/wp-admin/style.php" "Go-http-client/2.0" 9d61d29909e5f97d-ORD 2a09:bac5:9529:31f5::4fa:1e
2a09:bac5:9529:31f5::4fa:1e - - [02/Mar/2026:16:36:53 +0000] "GET /wp-admin/admin-ajax.php HTTP/2.0" 404 5474 "http://rares-andrei.me/wp-admin/admin-ajax.php" "Go-http-client/2.0" 9d61d2a89c79f97d-ORD 2a09:bac5:9529:31f5::4fa:1e
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
20.216.146.160
|
|
20.216.146.160 - - [02/Mar/2026:14:33:42 +0000] "GET //wp-admin/images/wp-conflg.php?p= HTTP/2.0" 30 ...
show more
20.216.146.160 - - [02/Mar/2026:14:33:42 +0000] "GET //wp-admin/images/wp-conflg.php?p= HTTP/2.0" 308 33 "-" "-" 9d611e36281ac752-CDG 20.216.146.160
20.216.146.160 - - [02/Mar/2026:14:33:42 +0000] "GET /wp-admin/images/wp-conflg.php?p= HTTP/2.0" 404 5474 "-" "-" 9d611e36a8c4c752-CDG 20.216.146.160
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
4.204.200.32
|
|
4.204.200.32 - - [02/Mar/2026:12:43:01 +0000] "GET /wp-admin/css/bolt.php HTTP/2.0" 200 5628 "-" "-" ...
show more
4.204.200.32 - - [02/Mar/2026:12:43:01 +0000] "GET /wp-admin/css/bolt.php HTTP/2.0" 200 5628 "-" "-" 9d607c13985b36d3-YYZ 4.204.200.32
4.204.200.32 - - [02/Mar/2026:12:43:12 +0000] "GET /wp-admin/sc.php HTTP/2.0" 200 5628 "-" "-" 9d607c5d3f9336d3-YYZ 4.204.200.32
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
20.220.211.108
|
|
20.220.211.108 - - [02/Mar/2026:11:09:43 +0000] "GET /cgi-bin/ HTTP/2.0" 200 5628 "-" "Mozilla/5.0 ( ...
show more
20.220.211.108 - - [02/Mar/2026:11:09:43 +0000] "GET /cgi-bin/ HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d5ff367fc18aa71-YYZ 20.220.211.108
20.220.211.108 - - [02/Mar/2026:11:09:43 +0000] "GET /wp-admin/js/ HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d5ff369ef70aa71-YYZ 20.220.211.108
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
146.190.117.220
|
|
146.190.117.220 - - [02/Mar/2026:09:29:31 +0000] "GET /wp-login.php HTTP/2.0" 404 5474 "-" "Mozilla/ ...
show more
146.190.117.220 - - [02/Mar/2026:09:29:31 +0000] "GET /wp-login.php HTTP/2.0" 404 5474 "-" "Mozilla/5.0 (WordPress CMS Scanner)" 9d5f609f2f158775-SJC 146.190.117.220
146.190.117.220 - - [02/Mar/2026:09:29:31 +0000] "GET /wp-admin/ HTTP/2.0" 308 9 "-" "Mozilla/5.0 (WordPress CMS Scanner)" 9d5f60a2fc678775-SJC 146.190.117.220
...
show less
|
Brute-Force
Web App Attack
|
|
🇱🇹
91.224.92.142
|
|
91.224.92.142 - - [02/Mar/2026:08:11:51 +0000] "GET /wp-login.php HTTP/2.0" 404 5474 "https://t.co/" ...
show more
91.224.92.142 - - [02/Mar/2026:08:11:51 +0000] "GET /wp-login.php HTTP/2.0" 404 5474 "https://t.co/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" 9d5eeedf0d15ef8f-WAW 91.224.92.142
91.224.92.142 - - [02/Mar/2026:08:11:51 +0000] "GET /wp-login.php HTTP/2.0" 404 5474 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" 9d5eeee0c82eef8f-WAW 91.224.92.142
...
show less
|
Brute-Force
Web App Attack
|
|
🇩🇪
130.12.180.34
|
|
2026/03/02 03:12:16 [error] 2355#2355: *5148 access forbidden by rule, client: 130.12.180.34, server ...
show more
2026/03/02 03:12:16 [error] 2355#2355: *5148 access forbidden by rule, client: 130.12.180.34, server: api.rares-andrei.me, request: "GET /.env HTTP/1.1", host: "92.82.37.130:443"
2026/03/02 03:12:16 [error] 2355#2355: *5148 access forbidden by rule, client: 130.12.180.34, server: api.rares-andrei.me, request: "GET /public/.env HTTP/1.1", host: "92.82.37.130:443"
2026/03/02 03:12:16 [error] 2355#2355: *5148 access forbidden by rule, client: 130.12.180.34, server: api.rares-andrei.me, request: "GET /public/.env HTTP/1.1", host: "92.82.37.130:443"
2026/03/02 03:12:16 [error] 2355#2355: *5148 access forbidden by rule, client: 130.12.180.34, server: api.rares-andrei.me, request: "GET /dev/.env HTTP/1.1", host: "92.82.37.130:443"
2026/03/02 03:12:24 [error] 2355#2355: *5148 access forbidden by rule, client: 130.12.180.34, server: api.rares-andrei.me, request: "GET /dev/.env HTTP/1.1", host: "92.82.37.130:443"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇸🇬
20.205.227.70
|
|
20.205.227.70 - - [01/Mar/2026:23:27:09 +0000] "GET /cgi-bin/xmrlpc.php HTTP/2.0" 200 5628 "-" "Mozi ...
show more
20.205.227.70 - - [01/Mar/2026:23:27:09 +0000] "GET /cgi-bin/xmrlpc.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d5bee43b8b86047-SIN 20.205.227.70
20.205.227.70 - - [01/Mar/2026:23:27:09 +0000] "GET /cgi-bin/file.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d5bee44f9606047-SIN 20.205.227.70
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
159.203.121.189
|
|
159.203.121.189 - - [01/Mar/2026:16:11:27 +0000] "GET /wp-login.php HTTP/2.0" 404 5474 "-" "Mozilla/ ...
show more
159.203.121.189 - - [01/Mar/2026:16:11:27 +0000] "GET /wp-login.php HTTP/2.0" 404 5474 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 9d597009afae7285-EWR 159.203.121.189
159.203.121.189 - - [01/Mar/2026:16:11:28 +0000] "GET /wp-login.php HTTP/2.0" 404 5474 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 9d59700c796a7285-EWR 159.203.121.189
...
show less
|
Brute-Force
Web App Attack
|
|
🇰🇷
20.214.137.177
|
|
20.214.137.177 - - [01/Mar/2026:14:22:19 +0000] "GET /xmlrpc.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 ...
show more
20.214.137.177 - - [01/Mar/2026:14:22:19 +0000] "GET /xmlrpc.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d58d028cc4bea12-ICN 20.214.137.177
20.214.137.177 - - [01/Mar/2026:14:22:24 +0000] "GET /cgi-bin/ HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d58d046f91bea12-ICN 20.214.137.177
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
20.63.44.70
|
|
20.63.44.70 - - [01/Mar/2026:13:41:33 +0000] "GET /wp-admin/user/index.php HTTP/2.0" 200 5628 "-" "M ...
show more
20.63.44.70 - - [01/Mar/2026:13:41:33 +0000] "GET /wp-admin/user/index.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d589473dd32299a-YYZ 20.63.44.70
20.63.44.70 - - [01/Mar/2026:13:41:33 +0000] "GET /wp-login.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d589476abe7299a-YYZ 20.63.44.70
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
40.85.219.62
|
|
40.85.219.62 - - [01/Mar/2026:12:40:35 +0000] "GET /wp-admin/css/colors/index.php HTTP/2.0" 200 5628 ...
show more
40.85.219.62 - - [01/Mar/2026:12:40:35 +0000] "GET /wp-admin/css/colors/index.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d583b227b35713b-YYZ 40.85.219.62
40.85.219.62 - - [01/Mar/2026:12:40:35 +0000] "GET /wp-admin/themes.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 9d583b274be9713b-YYZ 40.85.219.62
...
show less
|
Brute-Force
Web App Attack
|
|
🇺🇸
104.248.222.238
|
|
104.248.222.238 - - [01/Mar/2026:07:38:04 +0000] "GET /wp-login.php HTTP/2.0" 200 5628 "-" "Mozilla/ ...
show more
104.248.222.238 - - [01/Mar/2026:07:38:04 +0000] "GET /wp-login.php HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36" 9d5680020c9aeb1e-SJC 104.248.222.238
104.248.222.238 - - [01/Mar/2026:07:38:05 +0000] "GET /wp-admin/ HTTP/2.0" 200 5628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" 9d568005d8baeb1e-SJC 104.248.222.238
...
show less
|
Brute-Force
Web App Attack
|
|
🇨🇦
20.151.11.236
|
|
20.151.11.236 - - [01/Mar/2026:02:12:03 +0000] "GET //wp-admin/images/wp-conflg.php?p= HTTP/2.0" 308 ...
show more
20.151.11.236 - - [01/Mar/2026:02:12:03 +0000] "GET //wp-admin/images/wp-conflg.php?p= HTTP/2.0" 308 33 "-" "-" 9d54a2727b47c8b2-YYZ 20.151.11.236
20.151.11.236 - - [01/Mar/2026:02:12:03 +0000] "GET /wp-admin/images/wp-conflg.php?p= HTTP/2.0" 404 5474 "-" "-" 9d54a2737e14c8b2-YYZ 20.151.11.236
...
show less
|
Brute-Force
Web App Attack
|