🇳🇱
94.154.46.249
30 minutes ago
94.154.46.249 - - [06/Sep/2026:00:58:30 +0000] "GET /.git/HEAD HTTP/1.1" 404 153 "-" "Mozilla/5.0 (c ...
show more
94.154.46.249 - - [06/Sep/2026:00:58:30 +0000] "GET /.git/HEAD HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
94.154.46.249 - - [06/Sep/2026:00:58:30 +0000] "GET /.git/index HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
94.154.46.249 - - [06/Sep/2026:00:58:30 +0000] "GET /.git/config HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
94.154.46.249 - - [06/Sep/2026:00:58:30 +0000] "GET /.env.2 HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
94.154.46.249 - - [06/Sep/2026:00:58:30 +0000] "GET /.env.prev HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
94.154.46.249 - - [06/Sep/2026:00:58:30 +0000] "GET /.env_old HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
94.154.46.249
...
show less
Web App Attack
🇺🇸
35.238.130.138
50 minutes ago
35.238.130.138 - - [06/Sep/2026:00:39:01 +0000] "GET /public/.git/config HTTP/1.1" 404 153 "-" "crus ...
show more
35.238.130.138 - - [06/Sep/2026:00:39:01 +0000] "GET /public/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
35.238.130.138 - - [06/Sep/2026:00:39:01 +0000] "GET /wordpress/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
35.238.130.138 - - [06/Sep/2026:00:39:01 +0000] "GET /var/www/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
35.238.130.138 - - [06/Sep/2026:00:39:01 +0000] "GET /htdocs/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
35.238.130.138 - - [06/Sep/2026:00:39:01 +0000] "GET /.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
35.238.130.138 - - [06/Sep/2026:00:39:01 +0000] "GET /www/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
35.238.130.138 - - [06/Sep/2026:00:39:01 +0000] "GET /site/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
35.238.130.138 - - [06/Sep/2026:00:39:01 +0000] "GET /api/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
...
show less
Web App Attack
🇺🇸
35.231.140.93
2 hours ago
35.231.140.93 - - [05/Sep/2026:23:19:35 +0000] "GET /media/system/js/core.min.js.map HTTP/1.1" 404 3 ...
show more
35.231.140.93 - - [05/Sep/2026:23:19:35 +0000] "GET /media/system/js/core.min.js.map HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
35.231.140.93 - - [05/Sep/2026:23:19:35 +0000] "GET /media/vendor/bootstrap/js/collapse.min.js.map HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
35.231.140.93 - - [05/Sep/2026:23:19:35 +0000] "GET /components/com_sppagebuilder/assets/js/jquery.parallax.js.map HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
35.231.140.93 - - [05/Sep/2026:23:19:35 +0000] "GET /templates/shaper_helix3/js/jquery.sticky.js.map HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
35.231.140.93 - - [05/Sep/2026:23:19:35 +0000] "GET /media/vendor/jquery/js/jquery-noconflic
...
show less
Web App Attack
🇮🇳
52.140.127.70
2 hours ago
52.140.127.70 - - [05/Sep/2026:23:12:43 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3431 "-" "M ...
show more
52.140.127.70 - - [05/Sep/2026:23:12:43 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
52.140.127.70 - - [05/Sep/2026:23:12:43 +0000] "GET /post.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
52.140.127.70 - - [05/Sep/2026:23:12:43 +0000] "GET /1.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
52.140.127.70 - - [05/Sep/2026:23:12:43 +0000] "GET /flower.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
52.140.127.70 - - [05/Sep/2026:23:12:43 +0000] "GET /admin.php HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1
...
show less
Web App Attack
🇳🇱
94.154.46.249
2 hours ago
wight.blacknell.co.uk:443 94.154.46.249 - - [06/Sep/2026:00:08:52 +0100] "GET /.git/HEAD HTTP/1.1" 4 ...
show more
wight.blacknell.co.uk:443 94.154.46.249 - - [06/Sep/2026:00:08:52 +0100] "GET /.git/HEAD HTTP/1.1" 404 5032 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
wight.blacknell.co.uk:443 94.154.46.249 - - [06/Sep/2026:00:08:52 +0100] "GET /config.py HTTP/1.1" 404 5032 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
wight.blacknell.co.uk:443 94.154.46.249 - - [06/Sep/2026:00:08:52 +0100] "GET /wp-config.php~ HTTP/1.1" 404 262 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
wight.blacknell.co.uk:443 94.154.46.249 - - [06/Sep/2026:00:08:52 +0100] "GET /config/database.php HTTP/1.1" 200 2800 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
wight.blacknell.co.uk:443 94.154.46.249 - - [06/Sep/2026:00:08:52 +0100] "GET /wp-config.php.old HTTP/1.1" 404 262 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
🇳🇱
94.154.46.245
2 hours ago
wight.blacknell.co.uk:443 94.154.46.245 - - [05/Sep/2026:23:57:59 +0100] "GET /config/database.php H ...
show more
wight.blacknell.co.uk:443 94.154.46.245 - - [05/Sep/2026:23:57:59 +0100] "GET /config/database.php HTTP/1.1" 200 7570 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
wight.blacknell.co.uk:443 94.154.46.245 - - [05/Sep/2026:23:57:59 +0100] "GET /wp-config.php.bak HTTP/1.1" 404 5032 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
wight.blacknell.co.uk:443 94.154.46.245 - - [05/Sep/2026:23:57:59 +0100] "GET /configuration.php HTTP/1.1" 404 5032 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
wight.blacknell.co.uk:443 94.154.46.245 - - [05/Sep/2026:23:57:59 +0100] "GET /wp-config.php.save HTTP/1.1" 404 262 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
wight.blacknell.co.uk:443 94.154.46.245 - - [05/Sep/2026:23:57:59 +0100] "GET /.git/HEAD HTTP/1.1" 404 5032 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
🇱🇺
64.89.160.73
2 hours ago
64.89.160.73 - - [05/Sep/2026:22:55:06 +0000] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows ...
show more
64.89.160.73 - - [05/Sep/2026:22:55:06 +0000] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36" "-"
64.89.160.73 - - [05/Sep/2026:22:55:06 +0000] "GET /.env HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36" "-"
64.89.160.73 - - [05/Sep/2026:22:55:06 +0000] "GET /.env.local HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36" "-"
64.89.160.73 - - [05/Sep/2026:22:55:06 +0000] "GET /.env.production HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36" "-"
64.89.160.73 - - [05/Sep/2026:22:55:07 +0000] "GET /.env.prod HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36" "-"
64.89.160.73 - - [05/Sep/2026:22:55:07 +0000] "GET /.env.staging HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows
...
show less
Web App Attack
🇺🇸
35.231.106.244
2 hours ago
vm20.blacknell.co.uk:443 35.231.106.244 - - [05/Sep/2026:23:46:50 +0100] "GET /_ignition/health-chec ...
show more
vm20.blacknell.co.uk:443 35.231.106.244 - - [05/Sep/2026:23:46:50 +0100] "GET /_ignition/health-check HTTP/1.1" 404 5310 "-" "crusader-worker/1.0"
vm20.blacknell.co.uk:443 35.231.106.244 - - [05/Sep/2026:23:46:50 +0100] "GET /wp-config.php.bak HTTP/1.1" 404 5310 "-" "crusader-worker/1.0"
vm20.blacknell.co.uk:443 35.231.106.244 - - [05/Sep/2026:23:46:50 +0100] "GET /.env.old HTTP/1.1" 404 5310 "-" "crusader-worker/1.0"
vm20.blacknell.co.uk:443 35.231.106.244 - - [05/Sep/2026:23:46:50 +0100] "GET /.env HTTP/1.1" 404 5310 "-" "crusader-worker/1.0"
vm20.blacknell.co.uk:443 35.231.106.244 - - [05/Sep/2026:23:46:50 +0100] "GET /crusader-404-probe HTTP/1.1" 404 5310 "-" "crusader-worker/1.0"
vm20.blacknell.co.uk:443 35.231.106.244 - - [05/Sep/2026:23:46:50 +0100] "GET /actuator/env HTTP/1.1" 404 5310 "-" "crusader-worker/1.0"
vm20.blacknell.co.uk:443 35.231.106.244 - - [05/Sep/2026:23:46:50 +0100] "GET /.env.save HTTP/1.1" 404 5310 "-" "crusader-worker/1.0"
vm20.blacknell.co.uk:443 35.231.106
...
show less
Web App Attack
🇺🇸
144.172.99.12
2 hours ago
144.172.99.12 - - [05/Sep/2026:22:37:55 +0000] "GET /.env HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windo ...
show more
144.172.99.12 - - [05/Sep/2026:22:37:55 +0000] "GET /.env HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"
144.172.99.12 - - [05/Sep/2026:22:37:55 +0000] "GET /.env.local HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"
144.172.99.12 - - [05/Sep/2026:22:37:55 +0000] "GET /.env.prod HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"
144.172.99.12 - - [05/Sep/2026:22:37:55 +0000] "GET /.env.production HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"
144.172.99.12 - - [05/Sep/2026:22:37:56 +0000] "GET /.env.production.local HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch
...
show less
Web App Attack
🇮🇳
3.7.46.100
3 hours ago
3.7.46.100 - - [05/Sep/2026:22:14:35 +0000] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatibl ...
show more
3.7.46.100 - - [05/Sep/2026:22:14:35 +0000] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse)" "-"
3.7.46.100 - - [05/Sep/2026:22:14:35 +0000] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse)" "-"
3.7.46.100 - - [05/Sep/2026:22:14:36 +0000] "GET /.git/HEAD HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse)" "-"
3.7.46.100 - - [05/Sep/2026:22:14:37 +0000] "GET /.env HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse)" "-"
3.7.46.100 - - [05/Sep/2026:22:14:37 +0000] "GET /phpinfo.php HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse)" "-"
3.7.46.100 - - [05/Sep/2026:22:14:38 +0000] "GET /backup.sql HTTP/1.1" 301 169 "-" "Mozilla/5.0 (compatible; ArgusScanner/0.1; +http://example/abuse)" "-"
3.7.46.100 - - [05/Sep/2026:22:14:38 +0000] "GET /.git/config HTTP/1.1" 404 153
...
show less
Web App Attack
🇺🇸
34.26.224.77
3 hours ago
34.26.224.77 - - [05/Sep/2026:21:39:58 +0000] "GET /dump.sql HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X1 ...
show more
34.26.224.77 - - [05/Sep/2026:21:39:58 +0000] "GET /dump.sql HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
34.26.224.77 - - [05/Sep/2026:21:39:58 +0000] "GET /db.sql HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
34.26.224.77 - - [05/Sep/2026:21:39:58 +0000] "GET /backup.tar.gz HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
34.26.224.77 - - [05/Sep/2026:21:39:58 +0000] "GET /backup.zip HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
34.26.224.77 - - [05/Sep/2026:21:39:58 +0000] "GET /backup.sql HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
34.26.224.77 - - [05/Sep/2026:21:39:58 +0000] "GET /d
...
show less
Web App Attack
🇩🇿
154.241.21.54
3 hours ago
2026-09-05T22:29:33.468610+01:00 vm22 sshd-session[487316]: Connection from 154.241.21.54 port 58887 ...
show more
2026-09-05T22:29:33.468610+01:00 vm22 sshd-session[487316]: Connection from 154.241.21.54 port 58887 on 139.59.189.208 port 22 rdomain ""
2026-09-05T22:29:33.671262+01:00 vm22 sshd-session[487316]: Invalid user user from 154.241.21.54 port 58887
...
show less
Brute-Force
SSH
🇺🇸
8.228.243.215
4 hours ago
8.228.243.215 - - [05/Sep/2026:21:10:40 +0000] "GET /htdocs/.git/config HTTP/1.1" 404 153 "-" "crusa ...
show more
8.228.243.215 - - [05/Sep/2026:21:10:40 +0000] "GET /htdocs/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
8.228.243.215 - - [05/Sep/2026:21:10:40 +0000] "GET /html/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
8.228.243.215 - - [05/Sep/2026:21:10:40 +0000] "GET /.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
8.228.243.215 - - [05/Sep/2026:21:10:40 +0000] "GET /api/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
8.228.243.215 - - [05/Sep/2026:21:10:40 +0000] "GET /public/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
8.228.243.215 - - [05/Sep/2026:21:10:40 +0000] "GET /backend/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
8.228.243.215 - - [05/Sep/2026:21:10:40 +0000] "GET /wordpress/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
8.228.243.215 - - [05/Sep/2026:21:10:40 +0000] "GET /site/.git/config HTTP/1.1" 404 153 "-" "crusader-worker/1.0" "-"
...
show less
Web App Attack
🇧🇩
103.134.26.229
4 hours ago
2026-09-05T21:49:47.513926+01:00 vm22 sshd-session[485155]: Connection from 103.134.26.229 port 4081 ...
show more
2026-09-05T21:49:47.513926+01:00 vm22 sshd-session[485155]: Connection from 103.134.26.229 port 40816 on 139.59.189.208 port 22 rdomain ""
2026-09-05T21:49:48.091554+01:00 vm22 sshd-session[485155]: Invalid user pi from 103.134.26.229 port 40816
...
show less
Brute-Force
SSH
🇯🇵
34.97.46.167
4 hours ago
34.97.46.167 - - [05/Sep/2026:20:41:34 +0000] "GET /media/system/js/core.min.js.map HTTP/1.1" 404 34 ...
show more
34.97.46.167 - - [05/Sep/2026:20:41:34 +0000] "GET /media/system/js/core.min.js.map HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
34.97.46.167 - - [05/Sep/2026:20:41:34 +0000] "GET /media/vendor/jquery/js/jquery-noconflict.min.js.map HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
34.97.46.167 - - [05/Sep/2026:20:41:34 +0000] "GET /components/com_sppagebuilder/assets/js/jquery.parallax.js.map HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
34.97.46.167 - - [05/Sep/2026:20:41:34 +0000] "GET /media/vendor/bootstrap/js/collapse.min.js.map HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" "-"
34.97.46.167 - - [05/Sep/2026:20:41:34 +0000] "GET /components/com_sppagebuilder/assets/js/a
...
show less
Web App Attack
🇹🇼
104.199.232.142
4 hours ago
104.199.232.142 - - [05/Sep/2026:20:29:34 +0000] "GET /.env.backup HTTP/1.1" 404 3431 "-" "crusader- ...
show more
104.199.232.142 - - [05/Sep/2026:20:29:34 +0000] "GET /.env.backup HTTP/1.1" 404 3431 "-" "crusader-worker/1.0" "-"
104.199.232.142 - - [05/Sep/2026:20:29:34 +0000] "GET /.env HTTP/1.1" 404 3431 "-" "crusader-worker/1.0" "-"
104.199.232.142 - - [05/Sep/2026:20:29:34 +0000] "GET /actuator/env HTTP/1.1" 404 3431 "-" "crusader-worker/1.0" "-"
104.199.232.142 - - [05/Sep/2026:20:29:34 +0000] "GET /wp-config.php~ HTTP/1.1" 404 3431 "-" "crusader-worker/1.0" "-"
104.199.232.142 - - [05/Sep/2026:20:29:34 +0000] "GET /.env.example HTTP/1.1" 404 3431 "-" "crusader-worker/1.0" "-"
104.199.232.142 - - [05/Sep/2026:20:29:34 +0000] "GET /.env.dev HTTP/1.1" 404 3431 "-" "crusader-worker/1.0" "-"
104.199.232.142 - - [05/Sep/2026:20:29:34 +0000] "GET /.env.local HTTP/1.1" 404 3431 "-" "crusader-worker/1.0" "-"
104.199.232.142 - - [05/Sep/2026:20:29:34 +0000] "GET /crusader-404-probe HTTP/1.1" 404 3431 "-" "crusader-worker/1.0" "-"
...
show less
Web App Attack
🇩🇪
94.26.106.73
5 hours ago
94.26.106.73 - - [05/Sep/2026:20:26:13 +0000] "GET /.env.backup HTTP/1.1" 404 3431 "https://www.goog ...
show more
94.26.106.73 - - [05/Sep/2026:20:26:13 +0000] "GET /.env.backup HTTP/1.1" 404 3431 "https://www.google.com/" "curl/8.5.0" "127.0.0.1"
94.26.106.73 - - [05/Sep/2026:20:26:13 +0000] "GET /.env.bak HTTP/1.1" 404 3431 "https://www.google.com/" "Go-http-client/1.1" "127.0.0.1"
94.26.106.73 - - [05/Sep/2026:20:26:13 +0000] "GET /wp-config.php HTTP/1.1" 404 3431 "https://www.google.com/" "curl/8.5.0" "127.0.0.1"
94.26.106.73 - - [05/Sep/2026:20:26:13 +0000] "GET /.git/HEAD HTTP/1.1" 404 555 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "127.0.0.1"
94.26.106.73 - - [05/Sep/2026:20:26:13 +0000] "GET /.git/config HTTP/1.1" 404 555 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "127.0.0.1"
94.26.106.73 - - [05/Sep/2026:20:26:13 +0000] "GET /.env.staging HTTP/1.1" 404 3431 "https://www.google.com/" "Go
...
show less
Web App Attack
🇺🇸
198.20.67.197
5 hours ago
198.20.67.197 - - [05/Sep/2026:20:13:19 +0000] "GET /th1s_1s_a_4o4.html HTTP/1.1" 404 3431 "http://w ...
show more
198.20.67.197 - - [05/Sep/2026:20:13:19 +0000] "GET /th1s_1s_a_4o4.html HTTP/1.1" 404 3431 "http://www.google.com/url?url=www.solentyachtcharter.com&yahoo.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)" "-"
198.20.67.197 - - [05/Sep/2026:20:13:33 +0000] "GET /bareboat-charter/beneteau-oceanis-31 HTTP/1.1" 404 3431 "http://www.google.com/url?url=www.solentyachtcharter.com&yahoo.com" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/6.0)" "-"
198.20.67.197 - - [05/Sep/2026:20:14:31 +0000] "GET /?view=category%27kcpfjV%3C%27%22%3EnEMUCr&id=9&format=feed&type=atom HTTP/1.1" 404 164 "-" "SiteLockSpider" "-"
198.20.67.197 - - [05/Sep/2026:20:14:32 +0000] "GET /?view=category%27%29%20AND%207975%3D1990%20AND%20%28%27NJMu%27%3D%27NJMu&id=9&format=feed&type=atom HTTP/1.1" 404 174 "-" "SiteLockSpider" "-"
198.20.67.197 - - [05/Sep/2026:20:14:32 +0000] "GET /?view=category%27%29%20AND%206017%3D6017%20AND%20%28%27XimW%27%3D%27XimW&id=9&format=feed&type
...
show less
Web App Attack
🇺🇸
172.184.210.33
5 hours ago
2026-09-05T20:35:49.451867+01:00 vm23 sshd-session[3590632]: Connection from 172.184.210.33 port 389 ...
show more
2026-09-05T20:35:49.451867+01:00 vm23 sshd-session[3590632]: Connection from 172.184.210.33 port 38914 on 206.189.22.241 port 22 rdomain ""
2026-09-05T20:35:50.241454+01:00 vm23 sshd-session[3590632]: Invalid user ubuntu from 172.184.210.33 port 38914
...
show less
Brute-Force
SSH
🇸🇬
213.163.203.152
7 hours ago
213.163.203.152 - - [05/Sep/2026:18:23:24 +0000] "GET /bareboat-charter/bavaria-39c-summer-breeze/sf ...
show more
213.163.203.152 - - [05/Sep/2026:18:23:24 +0000] "GET /bareboat-charter/bavaria-39c-summer-breeze/sftp-config.json HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "-"
213.163.203.152 - - [05/Sep/2026:18:23:25 +0000] "GET /bareboat-charter/bavaria-39c-summer-breeze/.vscode/sftp.json HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "-"
213.163.203.152 - - [05/Sep/2026:18:23:26 +0000] "GET /bareboat-charter/bavaria-39c-summer-breeze/.vscode/ftp-config.json HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "-"
213.163.203.152 - - [05/Sep/2026:18:23:26 +0000] "GET /bareboat-charter/bavaria-39c-summer-breeze/.vscode/ftp-sync.json HTTP/1.1" 404 3431 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "-"
213.163.203.152 - - [05/Sep/2026:18:23:27 +0000] "GET /bareboat-charter/bavaria
...
show less
Web App Attack
🇨🇦
4.204.224.164
7 hours ago
4.204.224.164 - - [05/Sep/2026:18:00:12 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.ph ...
show more
4.204.224.164 - - [05/Sep/2026:18:00:12 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 3431 "-" "-" "-"
4.204.224.164 - - [05/Sep/2026:18:00:12 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 3431 "-" "-" "-"
4.204.224.164 - - [05/Sep/2026:18:00:12 +0000] "GET /f35.update.php HTTP/1.1" 404 3431 "-" "-" "-"
4.204.224.164 - - [05/Sep/2026:18:00:13 +0000] "GET //adminfuns.php HTTP/1.1" 404 3431 "-" "-" "-"
4.204.224.164 - - [05/Sep/2026:18:00:13 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 3431 "-" "-" "-"
4.204.224.164 - - [05/Sep/2026:18:00:13 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 3431 "-" "-" "-"
4.204.224.164 - - [05/Sep/2026:18:00:13 +0000] "GET //av.php HTTP/1.1" 404 3431 "-" "-" "-"
4.204.224.164 - - [05/Sep/2026:18:00:14 +0000] "GET /dex.php HTTP/1.1" 404 3431 "-" "-" "-"
...
show less
Web App Attack
🇺🇸
104.37.185.38
7 hours ago
blog.blacknellsatsea.co.uk:443 104.37.185.38 - - [05/Sep/2026:18:46:40 +0100] "GET /wp-json/batch/v1 ...
show more
blog.blacknellsatsea.co.uk:443 104.37.185.38 - - [05/Sep/2026:18:46:40 +0100] "GET /wp-json/batch/v1 HTTP/1.0" 404 1117 "https://blog.blacknellsatsea.co.uk/wp-json/" "Mozilla/5.0 (compatible; heritrix/3.14.2-SNAPSHOT-2026-04-13T06:21:22Z +https://www.image-meta.com)"
blog.blacknellsatsea.co.uk:443 104.37.185.38 - - [05/Sep/2026:18:46:49 +0100] "GET /wp-json/yoast/v1/alerts/dismiss HTTP/1.0" 404 1117 "https://blog.blacknellsatsea.co.uk/wp-json/" "Mozilla/5.0 (compatible; heritrix/3.14.2-SNAPSHOT-2026-04-13T06:21:22Z +https://www.image-meta.com)"
blog.blacknellsatsea.co.uk:443 104.37.185.38 - - [05/Sep/2026:18:46:51 +0100] "GET /wp-json/yoast/v1/indexing/posts HTTP/1.0" 404 1117 "https://blog.blacknellsatsea.co.uk/wp-json/" "Mozilla/5.0 (compatible; heritrix/3.14.2-SNAPSHOT-2026-04-13T06:21:22Z +https://www.image-meta.com)"
blog.blacknellsatsea.co.uk:443 104.37.185.38 - - [05/Sep/2026:18:46:52 +0100] "GET /wp-json/yoast/v1/indexing/terms HTTP/1.0" 404 1117 "https://blog.blacknellsatsea.c
...
show less
Brute-Force
🇰🇷
84.233.167.49
7 hours ago
84.233.167.49 - - [05/Sep/2026:17:30:57 +0000] "POST /index.php?option=com_sppagebuilder&task=asset. ...
show more
84.233.167.49 - - [05/Sep/2026:17:30:57 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 403 119 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) SADBOY/1.0" "-"
...
show less
Web App Attack
🇺🇸
70.122.49.67
8 hours ago
Sep 5 17:39:48 vm20 sshd[2784158]: Invalid user admin from 70.122.49.67 port 54428
Sep 5 17:39:48 ...
show more
Sep 5 17:39:48 vm20 sshd[2784158]: Invalid user admin from 70.122.49.67 port 54428
Sep 5 17:39:48 vm20 sshd[2784159]: Invalid user demo from 70.122.49.67 port 54429
...
show less
Brute-Force
SSH
🇷🇺
95.79.86.104
8 hours ago
95.79.86.104 - - [05/Sep/2026:16:29:58 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.u ...
show more
95.79.86.104 - - [05/Sep/2026:16:29:58 +0000] "POST /index.php?option=com_sppagebuilder&task=asset.uploadCustomIcon HTTP/1.1" 403 119 "-" "python-requests/2.23.0" "-"
...
show less
Web App Attack