Pynblok
Pynblok
Attackers
IP Country Region ASN ISP Observations State Blocked By First Seen Last Seen
US OTHER — Other Countries 396356 Latitude.sh 2 ESCALATED 173.239.240.0/24 2026-09-04 04:04:10 UTC 2026-09-04 04:35:36 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 04:35:36 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
2026-09-04 04:04:10 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
DE SAFE — Europe 24940 Hetzner Online GmbH 1 WATCH - 2026-09-04 04:38:49 UTC 2026-09-04 04:38:49 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 04:38:49 UTC www.madprof.net /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 - -
CA OTHER — Other Countries 577 Bell Canada 2 WATCH - 2026-09-04 04:30:55 UTC 2026-09-04 04:41:38 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 04:41:38 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack/13.0; WordPress/6.4; http://site91923347.com - WordPress
2026-09-04 04:30:55 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack/12.1; WordPress/6.2; http://site59173585.com - WordPress
FR SAFE — Europe 9009 M247 Europe SRL 2 ESCALATED 82.102.18.0/24 2026-09-04 03:00:07 UTC 2026-09-04 04:47:37 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 04:47:37 UTC sainthelenaschurch.com //xmlrpc.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 - WordPress
2026-09-04 03:00:07 UTC sainthelenaschurch.com //xmlrpc.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 - WordPress
US OTHER — Other Countries 396356 Latitude.sh 1 ESCALATED 173.239.240.0/24 2026-09-04 04:48:09 UTC 2026-09-04 04:48:09 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 04:48:09 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 396982 Google LLC 12 BLOCKED 34.73.136.99/32 2026-09-04 04:54:08 UTC 2026-09-04 04:54:08 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 04:54:08 UTC bxi.international /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 04:54:08 UTC bxi.international /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 04:54:08 UTC bxi.international /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 04:54:08 UTC bxi.international /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 04:54:08 UTC bxi.international /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 04:54:08 UTC bxi.international /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 04:54:08 UTC bxi.international /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 04:54:08 UTC bxi.international /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 04:54:08 UTC bxi.international /.env GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 04:54:08 UTC bxi.international /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 04:54:08 UTC bxi.international /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 04:54:08 UTC bxi.international /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
SG OTHER — Other Countries 14061 DigitalOcean, LLC 4 WATCH - 2026-09-02 07:58:23 UTC 2026-09-04 04:54:18 UTC

Attack details

4 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 04:54:18 UTC georgeverwer.com /license.txt GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 - -
2026-09-04 04:53:37 UTC georgeverwer.com /license.txt GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 - -
2026-09-02 07:58:39 UTC www.madprof.net /license.txt GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 - -
2026-09-02 07:58:23 UTC www.madprof.net /license.txt GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 - -
US OTHER — Other Countries 396356 Latitude.sh 2 ESCALATED 173.239.240.0/24 2026-09-04 03:06:17 UTC 2026-09-04 04:54:29 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 04:54:29 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
2026-09-04 03:06:17 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 396356 Latitude.sh 1 ESCALATED 173.239.240.0/24 2026-09-04 05:00:52 UTC 2026-09-04 05:00:52 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:00:52 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 396356 Latitude.sh 2 ESCALATED 173.239.240.0/24 2026-09-04 02:54:46 UTC 2026-09-04 05:07:15 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:07:15 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
2026-09-04 02:54:46 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 396356 Latitude.sh 1 ESCALATED 173.239.240.0/24 2026-09-04 05:13:42 UTC 2026-09-04 05:13:42 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:13:42 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 396356 Latitude.sh 1 ESCALATED 173.239.240.0/24 2026-09-04 05:20:07 UTC 2026-09-04 05:20:07 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:20:07 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 396356 Latitude.sh 1 ESCALATED 173.239.240.0/24 2026-09-04 05:26:28 UTC 2026-09-04 05:26:28 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:26:28 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
BR DANGEROUS — Dangerous Countries 7738 V tal 1 ESCALATED 2804:d47::/32 2026-09-04 05:32:35 UTC 2026-09-04 05:32:35 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:32:35 UTC cyprus-life.info /xmlrpc.php POST - WordPress.com; https://wordpress.com - WordPress
US OTHER — Other Countries 396356 Latitude.sh 2 ESCALATED 173.239.240.0/24 2026-09-04 04:16:40 UTC 2026-09-04 05:32:56 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:32:56 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
2026-09-04 04:16:40 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
IN DANGEROUS — Dangerous Countries 55836 Reliance Jio Infocomm Limited 3 ESCALATED 2405:201::/32 2026-09-04 05:16:27 UTC 2026-09-04 05:36:42 UTC

Attack details

3 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:36:42 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack by WordPress.com - WordPress
2026-09-04 05:26:34 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack/12.1; WordPress/6.3; http://site80880215.com - WordPress
2026-09-04 05:16:27 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.2) - WordPress
IN DANGEROUS — Dangerous Countries 55836 Reliance Jio Infocomm Limited 1 ESCALATED 2409:4070::/32 2026-09-04 05:39:08 UTC 2026-09-04 05:39:08 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:39:08 UTC cyprus-life.info /xmlrpc.php POST - Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.4) - WordPress
TW OTHER — Other Countries 396982 Google LLC 3 BLOCKED 35.234.19.80/32 2026-09-04 02:11:03 UTC 2026-09-04 05:45:25 UTC

Attack details

3 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 05:45:25 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-04 02:13:08 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-04 02:11:03 UTC rsdt.org /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
IN DANGEROUS — Dangerous Countries 55836 Reliance Jio Infocomm Limited 1 ESCALATED 2409:4070::/32 2026-09-04 06:06:28 UTC 2026-09-04 06:06:28 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:06:28 UTC cyprus-life.info /xmlrpc.php POST - Jetpack by WordPress.com - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 1 ESCALATED 23.94.155.0/24 2026-09-04 06:12:44 UTC 2026-09-04 06:12:44 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:12:44 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 06:31:38 UTC 2026-09-04 06:31:38 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:31:38 UTC rsdt.org /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
US OTHER — Other Countries 262287 Latitude.sh LTDA 1 ESCALATED 23.94.155.0/24 2026-09-04 06:32:44 UTC 2026-09-04 06:32:44 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:32:44 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
SG OTHER — Other Countries 396982 Google LLC 2 WATCH - 2026-09-03 21:54:28 UTC 2026-09-04 06:32:50 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:32:50 UTC rusty.group /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-03 21:54:28 UTC rusty.group /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
UA OTHER — Other Countries 9009 M247 Europe SRL 2 BLOCKED 130.195.241.7/32 2026-09-02 09:34:14 UTC 2026-09-04 06:40:58 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:40:58 UTC sainthelenaschurch.com //xmlrpc.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 - WordPress
2026-09-02 09:34:14 UTC home-ed.info //xmlrpc.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36 - WordPress
IN DANGEROUS — Dangerous Countries 24560 Bharti Airtel Ltd., Telemedia Services 1 BLOCKED 122.172.87.147/32 2026-09-04 06:41:10 UTC 2026-09-04 06:41:10 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:41:10 UTC sainthelenaschurch.com /xmlrpc.php POST - Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/12.0.0.0 Safari/537.36 - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 1 ESCALATED 23.94.155.0/24 2026-09-04 06:46:03 UTC 2026-09-04 06:46:03 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:46:03 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 1 ESCALATED 23.94.155.0/24 2026-09-04 06:52:45 UTC 2026-09-04 06:52:45 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:52:45 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 1 ESCALATED 23.94.155.0/24 2026-09-04 06:59:24 UTC 2026-09-04 06:59:24 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 06:59:24 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
IN DANGEROUS — Dangerous Countries 55836 Reliance Jio Infocomm Limited 3 ESCALATED 2409:40e3::/32 2026-09-04 06:40:03 UTC 2026-09-04 07:00:15 UTC

Attack details

3 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:00:15 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack/12.5; WordPress/6.4; http://site99205067.com - WordPress
2026-09-04 06:50:09 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.1) - WordPress
2026-09-04 06:40:03 UTC ansithean.co.uk /xmlrpc.php POST - WordPress.com; https://wordpress.com - WordPress
FR SAFE — Europe 60068 Datacamp Limited 1 ESCALATED 143.244.57.0/24 2026-09-04 07:02:18 UTC 2026-09-04 07:02:18 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-22 04:44:20 UTC bxi.international /cgi-bin/ GET 404 - - CGI / Legacy Server Interfaces
2026-09-04 07:02:18 UTC sainthelenaschurch.com //xmlrpc.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 2 ESCALATED 23.94.155.0/24 2026-09-04 06:06:23 UTC 2026-09-04 07:12:37 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:12:37 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
2026-09-04 06:06:23 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 1 ESCALATED 23.94.155.0/24 2026-09-04 07:19:18 UTC 2026-09-04 07:19:18 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:19:18 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 1 ESCALATED 23.94.155.0/24 2026-09-04 07:32:49 UTC 2026-09-04 07:32:49 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:32:49 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
TW OTHER — Other Countries 396982 Google LLC 1 BLOCKED 34.80.114.37/32 2026-09-04 07:38:24 UTC 2026-09-04 07:38:24 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:38:24 UTC rusty.group /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
US OTHER — Other Countries 262287 Latitude.sh LTDA 2 ESCALATED 23.94.155.0/24 2026-09-04 07:06:00 UTC 2026-09-04 07:39:32 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:39:32 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
2026-09-04 07:06:00 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
ID DANGEROUS — Dangerous Countries 396982 Google LLC 1 BLOCKED 34.50.69.122/32 2026-09-04 07:43:56 UTC 2026-09-04 07:43:56 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:43:56 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
PK OTHER — Other Countries 17557 Pakistan Telecommunication Company Limited 3 WATCH - 2026-09-04 07:24:31 UTC 2026-09-04 07:44:44 UTC

Attack details

3 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:44:44 UTC georgeverwer.com /xmlrpc.php POST - Jetpack by WordPress.com - WordPress
2026-09-04 07:34:33 UTC georgeverwer.com /xmlrpc.php POST - WordPress.com; https://wordpress.com - WordPress
2026-09-04 07:24:31 UTC georgeverwer.com /xmlrpc.php POST - Jetpack by WordPress.com - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 2 ESCALATED 23.94.155.0/24 2026-09-04 06:19:26 UTC 2026-09-04 07:46:14 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:46:14 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
2026-09-04 06:19:26 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 2 ESCALATED 23.94.155.0/24 2026-09-04 06:26:02 UTC 2026-09-04 07:52:52 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:52:52 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
2026-09-04 06:26:02 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 262287 Latitude.sh LTDA 2 ESCALATED 23.94.155.0/24 2026-09-04 07:26:02 UTC 2026-09-04 07:59:34 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 07:59:34 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
2026-09-04 07:26:02 UTC create.associates /wp-login.php POST - Mozilla/5.0 - WordPress
US OTHER — Other Countries 396982 Google LLC 12 BLOCKED 34.94.118.232/32 2026-09-04 08:15:00 UTC 2026-09-04 08:15:00 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:15:00 UTC download.rsdt.org /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:15:00 UTC download.rsdt.org /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:15:00 UTC download.rsdt.org /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 08:15:00 UTC download.rsdt.org /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:15:00 UTC download.rsdt.org /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 08:15:00 UTC download.rsdt.org /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:15:00 UTC download.rsdt.org /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:15:00 UTC download.rsdt.org /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:15:00 UTC download.rsdt.org /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:15:00 UTC download.rsdt.org /.env GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:15:00 UTC download.rsdt.org /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:15:00 UTC download.rsdt.org /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
JP OTHER — Other Countries 396982 Google LLC 11 BLOCKED 35.187.200.103/32 2026-09-04 08:22:05 UTC 2026-09-04 08:22:05 UTC

Attack details

11 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:22:05 UTC bxi.international /htdocs/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /public/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /html/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /backend/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /site/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /www/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /wordpress/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /app/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /api/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /src/.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
2026-09-04 08:22:05 UTC bxi.international /.git/config GET 404 crusader-worker/1.0 - Source Control / CI/CD
KR OTHER — Other Countries 396982 Google LLC 12 BLOCKED 34.47.110.182/32 2026-09-04 08:32:38 UTC 2026-09-04 08:32:38 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:32:38 UTC rsdt.org /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /.env GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 08:32:38 UTC rsdt.org /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:32:38 UTC rsdt.org /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
BE SAFE — Europe 396982 Google LLC 12 BLOCKED 207.175.170.170/32 2026-09-04 08:38:44 UTC 2026-09-04 08:38:44 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:38:44 UTC rusty.group /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:38:44 UTC rusty.group /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 08:38:44 UTC rusty.group /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:38:44 UTC rusty.group /.env GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:38:44 UTC rusty.group /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:38:44 UTC rusty.group /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:38:44 UTC rusty.group /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:38:44 UTC rusty.group /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 08:38:44 UTC rusty.group /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:38:44 UTC rusty.group /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:38:44 UTC rusty.group /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 08:38:44 UTC rusty.group /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
TW OTHER — Other Countries 396982 Google LLC 1 BLOCKED 34.80.114.179/32 2026-09-04 08:51:25 UTC 2026-09-04 08:51:25 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:51:25 UTC rsdt.org /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
RU DANGEROUS — Dangerous Countries 12389 Rostelecom 1 WATCH - 2026-09-04 08:58:34 UTC 2026-09-04 08:58:34 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:58:34 UTC create.associates /wp-login.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 - WordPress
VE OTHER — Other Countries 8048 CANTV Servicios, Venezuela 1 WATCH - 2026-09-04 08:58:39 UTC 2026-09-04 08:58:39 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:58:39 UTC create.associates /wp-login.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 - WordPress
CA OTHER — Other Countries 7992 Cogeco Connexion Inc. 1 WATCH - 2026-09-04 08:58:44 UTC 2026-09-04 08:58:44 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:58:44 UTC create.associates /wp-login.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 - WordPress
TR OTHER — Other Countries 16135 Turkcell Iletisim Hizmetleri A.s. 1 WATCH - 2026-09-04 08:59:09 UTC 2026-09-04 08:59:09 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:59:09 UTC create.associates /xmlrpc.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0 - WordPress
IN DANGEROUS — Dangerous Countries 9829 National Internet Backbone 1 BLOCKED 117.221.132.108/32 2026-09-04 08:59:37 UTC 2026-09-04 08:59:37 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 08:59:37 UTC create.associates /xmlrpc.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0 - WordPress
VE OTHER — Other Countries 8048 CANTV Servicios, Venezuela 1 WATCH - 2026-09-04 09:00:28 UTC 2026-09-04 09:00:28 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 09:00:28 UTC create.associates /xmlrpc.php POST - Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:141.0) Gecko/20100101 Firefox/141.0 - WordPress
IE SAFE — Europe 13335 Cloudflare, Inc. 6 BLOCKED 104.28.200.36/32 2026-09-03 19:22:42 UTC 2026-09-04 09:23:46 UTC

Attack details

6 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 09:23:46 UTC rsdt.org /.env.save HEAD 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 - Environment / Secrets
2026-09-04 09:23:46 UTC rsdt.org /.env.dist HEAD 404 Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36 - Environment / Secrets
2026-09-04 09:23:46 UTC rsdt.org /.env.test HEAD 404 Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36 - Environment / Secrets
2026-09-04 09:23:46 UTC rsdt.org /.env.old HEAD 404 Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36 - Environment / Secrets
2026-09-03 19:22:42 UTC www.madprof.net /.env HEAD 404 Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) - Environment / Secrets
2026-09-03 19:22:42 UTC www.madprof.net /.aws/credentials HEAD 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 - Cloud / Service Credentials
SG OTHER — Other Countries 14061 DigitalOcean, LLC 2 WATCH - 2026-09-04 09:28:58 UTC 2026-09-04 09:28:59 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 09:28:59 UTC home-ed.info /license.txt GET 404 python-requests/2.27.1 - -
2026-09-04 09:28:58 UTC home-ed.info /license.txt GET 404 python-requests/2.27.1 - -
US OTHER — Other Countries 14618 Amazon.com, Inc. 1 WATCH - 2026-09-04 09:34:00 UTC 2026-09-04 09:34:00 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 09:34:00 UTC cyprus-life.info /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 - -
TW OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 10:02:14 UTC 2026-09-04 10:02:14 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 10:02:14 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
US OTHER — Other Countries 14618 Amazon.com, Inc. 2 WATCH - 2026-09-04 09:51:17 UTC 2026-09-04 10:04:52 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 10:04:52 UTC cyprus-life.info /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 - -
2026-09-04 09:51:17 UTC bxi.international /readme.html GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 - -
US OTHER — Other Countries 14618 Amazon.com, Inc. 1 WATCH - 2026-09-04 10:31:24 UTC 2026-09-04 10:31:24 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 10:31:24 UTC bxi.international /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 - -
HK OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 10:36:30 UTC 2026-09-04 10:36:30 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 10:36:30 UTC rsdt.org /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
ID DANGEROUS — Dangerous Countries 396982 Google LLC 2 BLOCKED 34.101.124.123/32 2026-09-04 08:53:39 UTC 2026-09-04 10:37:11 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 10:37:11 UTC rusty.group /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-04 08:53:39 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
TW OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 10:38:16 UTC 2026-09-04 10:38:16 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 10:38:16 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
CH SAFE — Europe 396982 Google LLC 12 BLOCKED 34.65.176.227/32 2026-09-04 10:40:06 UTC 2026-09-04 10:40:06 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 10:40:06 UTC ansithean.co.uk /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:40:06 UTC ansithean.co.uk /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:40:06 UTC ansithean.co.uk /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:40:06 UTC ansithean.co.uk /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:40:06 UTC ansithean.co.uk /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:40:06 UTC ansithean.co.uk /.env GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:40:06 UTC ansithean.co.uk /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 10:40:06 UTC ansithean.co.uk /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:40:06 UTC ansithean.co.uk /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:40:06 UTC ansithean.co.uk /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 10:40:06 UTC ansithean.co.uk /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:40:06 UTC ansithean.co.uk /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
JP OTHER — Other Countries 396982 Google LLC 12 BLOCKED 34.153.194.150/32 2026-09-04 10:52:04 UTC 2026-09-04 10:52:04 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:52:04 UTC nagios.rsdt.org /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:52:04 UTC nagios.rsdt.org /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 10:52:04 UTC nagios.rsdt.org /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
GB SAFE — Europe 396982 Google LLC 12 BLOCKED 35.189.76.25/32 2026-09-04 11:05:04 UTC 2026-09-04 11:05:04 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 11:05:04 UTC home-ed.info /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:05:04 UTC home-ed.info /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:05:04 UTC home-ed.info /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:05:04 UTC home-ed.info /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:05:04 UTC home-ed.info /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 11:05:04 UTC home-ed.info /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:05:04 UTC home-ed.info /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:05:04 UTC home-ed.info /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:05:04 UTC home-ed.info /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:05:04 UTC home-ed.info /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 11:05:04 UTC home-ed.info /.env GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:05:04 UTC home-ed.info /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
SG OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 11:09:25 UTC 2026-09-04 11:09:25 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 11:09:25 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
US OTHER — Other Countries 174 Cogent Communications, LLC 1 WATCH - 2026-09-04 11:12:08 UTC 2026-09-04 11:12:08 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 11:12:08 UTC sainthelenaschurch.com /.env GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 - Environment / Secrets
SG OTHER — Other Countries 396982 Google LLC 12 BLOCKED 34.126.126.133/32 2026-09-04 11:25:34 UTC 2026-09-04 11:25:34 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 11:25:34 UTC signal.rsdt.org /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:25:34 UTC signal.rsdt.org /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 11:25:34 UTC signal.rsdt.org /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:25:34 UTC signal.rsdt.org /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:25:34 UTC signal.rsdt.org /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:25:34 UTC signal.rsdt.org /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:25:34 UTC signal.rsdt.org /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:25:34 UTC signal.rsdt.org /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 11:25:34 UTC signal.rsdt.org /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:25:34 UTC signal.rsdt.org /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:25:34 UTC signal.rsdt.org /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 11:25:34 UTC signal.rsdt.org /.env GET 404 crusader-worker/1.0 - Environment / Secrets
US OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 11:38:01 UTC 2026-09-04 11:38:01 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 11:38:01 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
NL SAFE — Europe 396982 Google LLC 122 BLOCKED 34.34.77.123/32 2026-09-04 11:43:13 UTC 2026-09-04 11:44:34 UTC

Attack details

122 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 11:44:34 UTC sainthelenaschurch.com /web.config GET 404 Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot) - Configuration / Credentials
2026-09-04 11:44:34 UTC sainthelenaschurch.com /secrets.yaml GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) - -
2026-09-04 11:44:34 UTC sainthelenaschurch.com /secrets.yml GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1) - Environment / Secrets
2026-09-04 11:44:34 UTC sainthelenaschurch.com /config.toml GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0 - Configuration / Credentials
2026-09-04 11:44:34 UTC sainthelenaschurch.com /config.yml GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Chrome/118.0.5992.75 Safari/537.36 - Configuration / Credentials
2026-09-04 11:44:34 UTC sainthelenaschurch.com /config.yaml GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) - Configuration / Credentials
2026-09-04 11:44:28 UTC sainthelenaschurch.com /firebase.json GET 404 Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; LinkedInBot/1.0; +http://www.linkedin.com) Chrome/134.0.4709.188 Safari/537.36 Edg/134.0.4709.188 - Cloud / Service Credentials
2026-09-04 11:44:28 UTC sainthelenaschurch.com /service-account-key.json GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.8729.212 Safari/537.36; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot - Cloud / Service Credentials
2026-09-04 11:44:28 UTC sainthelenaschurch.com /secrets/aws.json GET 404 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.5) Gecko/20100101 Firefox/105.5; compatible; Twitterbot/1.0 - -
2026-09-04 11:44:28 UTC sainthelenaschurch.com /google-service-account.json GET 404 Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) - Cloud / Service Credentials
2026-09-04 11:44:28 UTC sainthelenaschurch.com /firebase-admin.json GET 404 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.15) Gecko/20100101 Firefox/121.15; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php - Cloud / Service Credentials
2026-09-04 11:44:28 UTC sainthelenaschurch.com /firebase-service-account.json GET 404 Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) - Cloud / Service Credentials
2026-09-04 11:44:28 UTC sainthelenaschurch.com /secrets/gcp.json GET 404 Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/124.0.8314.245 Safari/537.36 - -
2026-09-04 11:44:28 UTC sainthelenaschurch.com /client_secret.json GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected]) - Cloud / Service Credentials
2026-09-04 11:44:28 UTC sainthelenaschurch.com /aws-credentials.json GET 404 Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) - Cloud / Service Credentials
2026-09-04 11:44:21 UTC sainthelenaschurch.com /.azure/accessTokens.json GET 404 Mozilla/5.0 (X11; Linux x86_64; rv:149.8) Gecko/20100101 Firefox/149.8; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user - Cloud / Service Credentials
2026-09-04 11:44:21 UTC sainthelenaschurch.com /.azure/azureProfile.json GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) - Cloud / Service Credentials
2026-09-04 11:44:21 UTC sainthelenaschurch.com /staging/.env GET 404 Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot) Chrome/148.0.4688.160 Mobile Safari/537.36 - Environment / Secrets
2026-09-04 11:44:20 UTC sainthelenaschurch.com /.env.docker GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.1761.188 Safari/537.36; compatible; TelegramBot/1.0 - Environment / Secrets
2026-09-04 11:44:20 UTC sainthelenaschurch.com /production/.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot - Environment / Secrets
2026-09-04 11:44:20 UTC sainthelenaschurch.com /backup/.env GET 404 Mozilla/5.0 (iPhone; CPU iPhone OS 16_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Version/17.1 Mobile/15E148 Safari/604.1 - Environment / Secrets
2026-09-04 11:44:20 UTC sainthelenaschurch.com /dev/.env GET 404 Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) - Environment / Secrets
2026-09-04 11:44:20 UTC sainthelenaschurch.com /client/.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; TelegramBot/1.0 - Environment / Secrets
2026-09-04 11:44:20 UTC sainthelenaschurch.com /app/.env.local GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1) - Environment / Secrets
2026-09-04 11:44:20 UTC sainthelenaschurch.com /app/.env.production GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) - Environment / Secrets
2026-09-04 11:44:20 UTC sainthelenaschurch.com /secrets.env GET 404 Mozilla/5.0 (X11; Linux x86_64; rv:150.7) Gecko/20100101 Firefox/150.7; compatible; Google-Extended/1.0; +http://www.google.com/bot.html - Environment / Secrets
2026-09-04 11:44:14 UTC sainthelenaschurch.com /.env.openai GET 404 Mozilla/5.0 (Windows NT 10.0; rv:132.5) Gecko/20100101 Firefox/132.5; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot - Environment / Secrets
2026-09-04 11:44:13 UTC sainthelenaschurch.com /.env.vault GET 404 Mozilla/5.0 (compatible; ClaudeBot/1.0; [email protected]) - Environment / Secrets
2026-09-04 11:44:13 UTC sainthelenaschurch.com /.env.anthropic GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) - Environment / Secrets
2026-09-04 11:44:13 UTC sainthelenaschurch.com /gcp-service-account.json GET 404 Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot) - Cloud / Service Credentials
2026-09-04 11:44:13 UTC sainthelenaschurch.com /_next/.env GET 404 Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.5031.43 Mobile Safari/537.36; compatible; GPTBot/1.2; +https://openai.com/gptbot - Environment / Secrets
2026-09-04 11:44:13 UTC sainthelenaschurch.com /.azure/config GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) - Cloud / Service Credentials
2026-09-04 11:44:13 UTC sainthelenaschurch.com /config.env GET 404 Mozilla/5.0 (compatible; Twitterbot/1.0) - Configuration / Credentials
2026-09-04 11:44:13 UTC sainthelenaschurch.com /.azure/credentials GET 404 Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot) - Cloud / Service Credentials
2026-09-04 11:44:07 UTC sainthelenaschurch.com /.env GET 404 Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.6749.35 Mobile Safari/537.36; compatible; LinkedInBot/1.0; +http://www.linkedin.com - Environment / Secrets
2026-09-04 11:44:07 UTC sainthelenaschurch.com /.env~ GET 404 Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) - Environment / Secrets
2026-09-04 11:44:07 UTC sainthelenaschurch.com /.env.prod GET 404 Mozilla/5.0 (compatible; GPTBot/1.2; +https://openai.com/gptbot) - Environment / Secrets
2026-09-04 11:44:07 UTC sainthelenaschurch.com /gradle.properties GET 404 Mozilla/5.0 (compatible; ClaudeBot/1.0; [email protected]) - Deployment / Container / Infrastructure
2026-09-04 11:44:07 UTC sainthelenaschurch.com /gcp-service.json GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler) - Cloud / Service Credentials
2026-09-04 11:44:07 UTC sainthelenaschurch.com /Dockerfile GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) - Deployment / Container / Infrastructure
2026-09-04 11:44:01 UTC sainthelenaschurch.com /.env.js GET 404 Mozilla/5.0 (Linux; Android 12; Pixel 6) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/109.0.1421.237 Mobile Safari/537.36 - Environment / Secrets
2026-09-04 11:44:01 UTC sainthelenaschurch.com /awsConfig.js GET 404 Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/) - Cloud / Service Credentials
2026-09-04 11:44:01 UTC sainthelenaschurch.com /actuator/mappings GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.5111.216 Safari/537.36 Edg/151.0.5111.216; compatible; TelegramBot/1.0 - Debug / Framework Diagnostics
2026-09-04 11:44:01 UTC sainthelenaschurch.com /actuator/env GET 404 Mozilla/5.0 (compatible; WhatsApp/10.0.2.1) - Debug / Framework Diagnostics
2026-09-04 11:44:01 UTC sainthelenaschurch.com /.openclaw/.env GET 404 Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Discordbot/2.0; +https://discordapp.com) Chrome/91.0.2913.208 Safari/537.36 - Environment / Secrets
2026-09-04 11:44:01 UTC sainthelenaschurch.com /actuator/configprops GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.2) Gecko/20100101 Firefox/78.2; compatible; ChatGPT-User/1.0; +https://openai.com/bot - Debug / Framework Diagnostics
2026-09-04 11:44:01 UTC sainthelenaschurch.com /.hermes/.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) - Environment / Secrets
2026-09-04 11:44:01 UTC sainthelenaschurch.com /graphql/console GET 404 Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.3595.43 Safari/537.36 Edg/128.0.3595.43; compatible; WhatsApp/10.0.2.1 - Debug / Framework Diagnostics
2026-09-04 11:44:01 UTC sainthelenaschurch.com /docker-compose.yml GET 404 Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) - Deployment / Container / Infrastructure
2026-09-04 11:44:01 UTC sainthelenaschurch.com /docker-compose.yaml GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot - Deployment / Container / Infrastructure
2026-09-04 11:43:54 UTC sainthelenaschurch.com /config.php.bak GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) - Configuration / Credentials
2026-09-04 11:43:54 UTC sainthelenaschurch.com /config.php GET 404 Mozilla/5.0 (compatible; TelegramBot/1.0) - Configuration / Credentials
2026-09-04 11:43:54 UTC sainthelenaschurch.com /private-key GET 404 Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) - Cloud / Service Credentials
2026-09-04 11:43:54 UTC sainthelenaschurch.com /privatekey.key GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) - Cloud / Service Credentials
2026-09-04 11:43:54 UTC sainthelenaschurch.com /id_ed25519 GET 404 Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.6578.125 Safari/537.36; compatible; ChatGPT-User/1.0; +https://openai.com/bot - SSH / Private Keys
2026-09-04 11:43:54 UTC sainthelenaschurch.com /id_dsa GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.9030.179 Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user - SSH / Private Keys
2026-09-04 11:43:54 UTC sainthelenaschurch.com /id_ecdsa GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15; compatible; GrokBot/1.0; +https://x.ai/grokbot - SSH / Private Keys
2026-09-04 11:43:53 UTC sainthelenaschurch.com /id_rsa GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot - SSH / Private Keys
2026-09-04 11:43:46 UTC sainthelenaschurch.com /gcp-key.json GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /firebase-config.json GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Version/19.2 Safari/605.1.15 - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /config.json GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) - Configuration / Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /.docker/config.json GET 404 Mozilla/5.0 (compatible; TelegramBot/1.0) - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /google-credentials.json GET 404 Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /gcp-credentials.json GET 404 Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) Chrome/131.0.5130.188 Mobile Safari/537.36 - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /firebase-credentials.json GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot) - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /credentials.json GET 404 Mozilla/5.0 (compatible; WhatsApp/10.0.2.1) - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /service-account.json GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots) Chrome/131.0.7033.239 Safari/537.36 - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /.kube/config GET 404 Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.4695.141 Mobile Safari/537.36; compatible; Google-Extended/1.0; +http://www.google.com/bot.html - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /firebase-adminsdk.json GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0) Chrome/130.0.7164.43 Safari/537.36 Edg/130.0.7164.43 - Cloud / Service Credentials
2026-09-04 11:43:46 UTC sainthelenaschurch.com /secrets.json GET 404 Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/19.6 Mobile/15E148 Safari/604.1; compatible; Google-Extended/1.0; +http://www.google.com/bot.html - Environment / Secrets
2026-09-04 11:43:41 UTC sainthelenaschurch.com /.azure/credentials GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:121.18) Gecko/20100101 Firefox/121.18; compatible; LinkedInBot/1.0; +http://www.linkedin.com - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /.gcloud/credentials.json GET 404 Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /aws-credentials GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Applebot/0.1; +http://www.apple.com/go/applebot) - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /aws_credentials GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /.gcloud/credentials GET 404 Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/148.0.5963.55 Safari/537.36 - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /aws.env GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 14.5; rv:132.0) Gecko/20100101 Firefox/132.0; compatible; LinkedInBot/1.0; +http://www.linkedin.com - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /.aws/credentials GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/124.0.8841.60 Safari/537.36 - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /root/.aws/credentials GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Version/17.0 Safari/605.1.15 - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /.aws/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.13) Gecko/20100101 Firefox/121.13; compatible; Google-Extended/1.0; +http://www.google.com/bot.html - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /root/.aws/config GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.5963.192 Safari/537.36; compatible; WhatsApp/10.0.2.1 - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /aws.json GET 404 Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.5198.88 Safari/537.36 Edg/120.0.5198.88; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user - Cloud / Service Credentials
2026-09-04 11:43:41 UTC sainthelenaschurch.com /.github/.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot - Environment / Secrets
2026-09-04 11:43:41 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) Chrome/130.0.7730.77 Safari/537.36 Edg/130.0.7730.77 - Source Control / CI/CD
2026-09-04 11:43:41 UTC sainthelenaschurch.com /.git-credentials GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Applebot/0.1; +http://www.apple.com/go/applebot - Source Control / CI/CD
2026-09-04 11:43:41 UTC sainthelenaschurch.com /.git/HEAD GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) - Source Control / CI/CD
2026-09-04 11:43:41 UTC sainthelenaschurch.com /public/.env GET 404 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:105.9) Gecko/20100101 Firefox/105.9; compatible; GPTBot/1.4; +https://openai.com/gptbot - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /web/.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /core/.env GET 404 Mozilla/5.0 (compatible; LinkedInBot/1.0; +http://www.linkedin.com) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /docker/.env GET 404 Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env.backup GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /images../.env GET 404 Mozilla/5.0 (compatible; TelegramBot/1.0) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /config/.env GET 404 Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /backend/.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env.old GET 404 Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.3174.102 Mobile Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /laravel/.env GET 404 Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /app/.env GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.2454.161 Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env.bak GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env.swp GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env.staging GET 404 Mozilla/5.0 (compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /v2/.env GET 404 Mozilla/5.0 (compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /frontend/.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; WhatsApp/10.0.2.1) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.docker/.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /server/.env GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:132.17) Gecko/20100101 Firefox/132.17; compatible; Discordbot/2.0; +https://discordapp.com - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env GET 404 Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/91.0.6926.213 Safari/537.36 - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /uploads../.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /src/.env GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.8750.182 Safari/537.36; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /v1/.env GET 404 Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.8702.139 Mobile Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env GET 404 Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env.development GET 404 Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php) Chrome/148.0.1552.101 Mobile Safari/537.36 - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env.local GET 404 Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /img../.env GET 404 Mozilla/5.0 (compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env.production GET 404 Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /.env.example GET 404 Mozilla/5.0 (compatible; ChatGPT-User/1.0; +https://openai.com/bot) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /admin/.env GET 404 Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.2201.79 Mobile Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /api/.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0) - Environment / Secrets
2026-09-04 11:43:36 UTC sainthelenaschurch.com /assets../.env GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GrokBot/1.0; +https://x.ai/grokbot - Environment / Secrets
2026-09-04 11:43:13 UTC sainthelenaschurch.com /@fs/.env.development?raw?? GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; [email protected] - Environment / Secrets
2026-09-04 11:43:13 UTC sainthelenaschurch.com /.env?raw?? GET 404 Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.8556.204 Mobile Safari/537.36; compatible; TelegramBot/1.0 - Environment / Secrets
2026-09-04 11:43:13 UTC sainthelenaschurch.com /@fs/.env.local?raw?? GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected]) - Environment / Secrets
2026-09-04 11:43:13 UTC sainthelenaschurch.com /@fs/.env?raw?? GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/136.0.6213.6 Safari/537.36 - Environment / Secrets
2026-09-04 11:43:13 UTC sainthelenaschurch.com /@fs/.env.production?raw?? GET 404 Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/148.0.6998.196 Safari/537.36 - Environment / Secrets
2026-09-04 11:43:13 UTC sainthelenaschurch.com /@fs/.env.staging?raw?? GET 404 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Discordbot/2.0; +https://discordapp.com - Environment / Secrets
US OTHER — Other Countries 14618 Amazon.com, Inc. 3 WATCH - 2026-09-03 15:51:34 UTC 2026-09-04 11:47:39 UTC

Attack details

3 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 11:47:39 UTC cyprus-life.info /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 - -
2026-09-04 11:42:13 UTC bxi.international /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 - -
2026-09-03 15:51:34 UTC bxi.international /readme.html GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 - -
SG OTHER — Other Countries 396982 Google LLC 3 BLOCKED 136.110.30.194/32 2026-08-31 04:05:02 UTC 2026-09-04 11:58:51 UTC

Attack details

3 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 11:58:51 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-04 11:36:41 UTC rsdt.org /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-08-31 04:05:02 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 - Source Control / CI/CD
IN DANGEROUS — Dangerous Countries 55836 Reliance Jio Infocomm Limited 1 ESCALATED 2405:201::/32 2026-09-04 12:02:52 UTC 2026-09-04 12:02:52 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 12:02:52 UTC cyprus-life.info /xmlrpc.php POST - WordPress.com; https://wordpress.com - WordPress
US OTHER — Other Countries 396982 Google LLC 3 BLOCKED 34.16.127.79/32 2026-08-30 21:03:24 UTC 2026-09-04 12:18:14 UTC

Attack details

3 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 12:18:14 UTC create.associates /.env GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - Environment / Secrets
2026-09-01 09:01:31 UTC nagios.rsdt.org /.env GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - Environment / Secrets
2026-08-30 21:03:24 UTC ansithean.co.uk /.env GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - Environment / Secrets
TW OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 12:30:06 UTC 2026-09-04 12:30:06 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 12:30:06 UTC rsdt.org /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
TW OTHER — Other Countries 396982 Google LLC 2 BLOCKED 35.234.35.32/32 2026-09-03 21:55:56 UTC 2026-09-04 12:30:31 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 12:30:31 UTC rusty.group /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-03 21:55:56 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
UG OTHER — Other Countries 20294 MTN Uganda 1 WATCH - 2026-09-04 12:35:27 UTC 2026-09-04 12:35:27 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 12:35:27 UTC ansithean.co.uk /xmlrpc.php POST - Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/81.0.0.0 Safari/537.36 - WordPress
NL SAFE — Europe 197170 TechTies Inc. 7 BLOCKED 85.11.167.136/32 2026-08-28 12:29:32 UTC 2026-09-04 12:40:38 UTC

Attack details

7 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 12:40:38 UTC easyedit.rsdt.org /git/config GET 404 Mozilla/5.0 (iPhone; CPU iPhone OS 16_6 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148 - Source Control / CI/CD
2026-09-04 12:40:36 UTC easyedit.rsdt.org /.git-credentials GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/15.1 Safari/605.1.15 - Source Control / CI/CD
2026-09-04 12:40:33 UTC easyedit.rsdt.org /.env GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 Version/15.1 Safari/605.1.15 - Environment / Secrets
2026-09-04 12:40:22 UTC easyedit.rsdt.org /config.php GET 404 Mozilla/5.0 (iPhone; CPU iPhone OS 16_6 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148 - Configuration / Credentials
2026-08-31 17:37:18 UTC editor.sainthelenaschurch.com /config.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36 - Configuration / Credentials
2026-08-31 17:37:17 UTC editor.sainthelenaschurch.com /wp-config.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/114.0.5735.110 Safari/537.36 - WordPress
2026-08-28 12:29:32 UTC www.madprof.net /config.php GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/113.0.0.0 Safari/537.36 - Configuration / Credentials
ID DANGEROUS — Dangerous Countries 7713 PT Telekomunikasi Indonesia 4 BLOCKED 180.243.191.171/32 2026-09-04 12:41:44 UTC 2026-09-04 12:41:59 UTC

Attack details

4 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 12:41:59 UTC create.associates /.aws/credentials GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 - Cloud / Service Credentials
2026-09-04 12:41:51 UTC create.associates /.env/.env.bak GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 - Environment / Secrets
2026-09-04 12:41:50 UTC create.associates /_profiler/phpinfo GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 - Debug / Framework Diagnostics
2026-09-04 12:41:44 UTC create.associates /phpinfo.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3 - Server Information / Diagnostics
US OTHER — Other Countries 14618 Amazon.com, Inc. 1 BLOCKED 34.227.80.105/32 2026-09-04 12:58:52 UTC 2026-09-04 12:58:52 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 12:58:52 UTC signal.rsdt.org /.git/config GET 404 Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.108 Safari/537.36 UCBrowser/12.13.0.1207 - Source Control / CI/CD
US OTHER — Other Countries 396982 Google LLC 12 BLOCKED 35.255.158.231/32 2026-09-04 13:07:29 UTC 2026-09-04 13:07:30 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 13:07:30 UTC sainthelenaschurch.com /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:30 UTC sainthelenaschurch.com /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:30 UTC sainthelenaschurch.com /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:30 UTC sainthelenaschurch.com /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:30 UTC sainthelenaschurch.com /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:30 UTC sainthelenaschurch.com /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:30 UTC sainthelenaschurch.com /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:30 UTC sainthelenaschurch.com /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:29 UTC sainthelenaschurch.com /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 13:07:29 UTC sainthelenaschurch.com /.env GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:29 UTC sainthelenaschurch.com /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 13:07:29 UTC sainthelenaschurch.com /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
US OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 13:08:24 UTC 2026-09-04 13:08:24 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 13:08:24 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
TW OTHER — Other Countries 396982 Google LLC 2 BLOCKED 104.155.231.26/32 2026-09-03 17:38:21 UTC 2026-09-04 13:32:19 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 13:32:19 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-03 17:38:21 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
TW OTHER — Other Countries 150756 Floppy Ltd. 1 WATCH - 2026-09-04 13:47:55 UTC 2026-09-04 13:47:55 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 13:47:55 UTC www.madprof.net /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 - -
TW OTHER — Other Countries 396982 Google LLC 2 BLOCKED 34.81.210.188/32 2026-09-03 20:03:30 UTC 2026-09-04 13:51:36 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 13:51:36 UTC rusty.group /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-03 20:03:30 UTC rusty.group /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
HK OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 13:52:02 UTC 2026-09-04 13:52:02 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 13:52:02 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
IR DANGEROUS — Dangerous Countries 215930 Cipher Operations Doo Beograd - Novi Beograd 5 ESCALATED 62.60.130.0/24 2026-08-28 04:00:34 UTC 2026-09-04 14:16:23 UTC

Attack details

5 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 14:16:23 UTC create.associates //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 - PHP / Web Application Probing
2026-09-04 11:04:38 UTC bxi.international //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 - PHP / Web Application Probing
2026-09-03 19:25:34 UTC georgeverwer.com //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 - PHP / Web Application Probing
2026-09-01 19:47:50 UTC cyprus-life.info //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 - PHP / Web Application Probing
2026-08-28 04:00:34 UTC cyprus-life.info //cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 - PHP / Web Application Probing
UA OTHER — Other Countries 204684 Wireless network and communications PE 1 WATCH - 2026-09-04 14:19:22 UTC 2026-09-04 14:19:22 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 14:19:22 UTC cyprus-life.info /xmlrpc.php POST - Jetpack/12.5; WordPress/6.1; http://site47573732.com - WordPress
DE SAFE — Europe 197170 TechTies Inc. 24 BLOCKED 94.26.106.175/32 2026-08-29 17:20:55 UTC 2026-09-04 14:23:40 UTC

Attack details

45 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-24 16:06:39 UTC signal.rsdt.org /config/.env GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-24 16:06:39 UTC signal.rsdt.org /.env.backup GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-24 16:06:39 UTC signal.rsdt.org /.env.local GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-24 16:06:39 UTC signal.rsdt.org /.env.example GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-24 16:06:39 UTC signal.rsdt.org /.env GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-24 16:06:39 UTC signal.rsdt.org /.aws/credentials GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Cloud / Service Credentials
2026-09-24 16:06:39 UTC signal.rsdt.org /old/phpinfo.php GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:39 UTC signal.rsdt.org /site/phpinfo.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:39 UTC signal.rsdt.org /cgi-bin/phpinfo.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:39 UTC signal.rsdt.org /phpmyadmin/phpinfo.php GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Database Administration
2026-09-24 16:06:39 UTC signal.rsdt.org /backend/info.php GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:39 UTC signal.rsdt.org /backend/phpinfo.php GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:39 UTC signal.rsdt.org /admin/info.php GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:39 UTC signal.rsdt.org /debug/phpinfo.php GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:39 UTC signal.rsdt.org /php/info.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:39 UTC signal.rsdt.org /admin/phpinfo.php GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:38 UTC signal.rsdt.org /php.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:38 UTC signal.rsdt.org /info.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:38 UTC signal.rsdt.org /_profiler/phpinfo GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Debug / Framework Diagnostics
2026-09-24 16:06:38 UTC signal.rsdt.org /phpinfo.php GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-24 16:06:38 UTC signal.rsdt.org /phpinfo GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /config/.env GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /.env.backup GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /.env.local GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /.env.example GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /.env GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /.aws/credentials GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Cloud / Service Credentials
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /admin/phpinfo.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /php.php GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /info.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /_profiler/phpinfo GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Debug / Framework Diagnostics
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /phpinfo.php GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-09-04 14:23:40 UTC editor.sainthelenaschurch.com /phpinfo GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-08-29 17:20:55 UTC easyedit.rsdt.org /config/.env GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-08-29 17:20:55 UTC easyedit.rsdt.org /.env.backup GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-08-29 17:20:55 UTC easyedit.rsdt.org /.env.local GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-08-29 17:20:55 UTC easyedit.rsdt.org /.env.example GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-08-29 17:20:55 UTC easyedit.rsdt.org /.env GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Environment / Secrets
2026-08-29 17:20:55 UTC easyedit.rsdt.org /.aws/credentials GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Cloud / Service Credentials
2026-08-29 17:20:55 UTC easyedit.rsdt.org /admin/phpinfo.php GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-08-29 17:20:55 UTC easyedit.rsdt.org /php.php GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-08-29 17:20:55 UTC easyedit.rsdt.org /info.php GET 404 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-08-29 17:20:55 UTC easyedit.rsdt.org /_profiler/phpinfo GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Debug / Framework Diagnostics
2026-08-29 17:20:55 UTC easyedit.rsdt.org /phpinfo.php GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
2026-08-29 17:20:55 UTC easyedit.rsdt.org /phpinfo GET 404 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36 - Server Information / Diagnostics
TW OTHER — Other Countries 396982 Google LLC 2 BLOCKED 35.221.166.86/32 2026-09-04 14:14:01 UTC 2026-09-04 14:36:14 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 14:36:14 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-04 14:14:01 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
VN DANGEROUS — Dangerous Countries 18403 FPT Telecom Company 3 ESCALATED 2405:4803::/32 2026-09-04 14:17:48 UTC 2026-09-04 14:37:57 UTC

Attack details

3 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 14:37:57 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack/12.5; WordPress/6.4; http://site31252262.com - WordPress
2026-09-04 14:27:52 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack/12.5; WordPress/6.2; http://site53996445.com - WordPress
2026-09-04 14:17:48 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack/12.1; WordPress/6.3; http://site24230464.com - WordPress
HK OTHER — Other Countries 396982 Google LLC 2 BLOCKED 35.220.183.213/32 2026-09-04 12:31:06 UTC 2026-09-04 14:58:00 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 14:58:00 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-04 12:31:06 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
US OTHER — Other Countries 14618 Amazon.com, Inc. 2 WATCH - 2026-09-04 12:07:08 UTC 2026-09-04 15:09:24 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 15:09:24 UTC bxi.international /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 - -
2026-09-04 12:07:08 UTC bxi.international /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 - -
TW OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 15:15:17 UTC 2026-09-04 15:15:17 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 15:15:17 UTC rsdt.org /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
TW OTHER — Other Countries 396982 Google LLC 2 BLOCKED 35.236.140.24/32 2026-09-04 01:25:36 UTC 2026-09-04 15:16:11 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 15:16:11 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-04 01:25:36 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
US OTHER — Other Countries 396982 Google LLC 12 BLOCKED 35.252.238.4/32 2026-09-04 15:20:14 UTC 2026-09-04 15:20:14 UTC

Attack details

12 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 15:20:14 UTC create.associates /.env.save GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /.env.production GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /.env.local GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /actuator/configprops GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
2026-09-04 15:20:14 UTC create.associates /.env GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /.env.backup GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /.env.example GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /.env.old GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /.env.prod GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /.env.dev GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /.env.bak GET 404 crusader-worker/1.0 - Environment / Secrets
2026-09-04 15:20:14 UTC create.associates /actuator/env GET 404 crusader-worker/1.0 - Debug / Framework Diagnostics
NP OTHER — Other Countries 23752 Nepal Telecommunications Corporation, Internet Services, 1 WATCH - 2026-09-04 15:23:40 UTC 2026-09-04 15:23:40 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 15:23:40 UTC create.associates /xmlrpc.php POST - Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/85.0.0.0 Safari/537.36 - WordPress
TW OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 15:41:38 UTC 2026-09-04 15:41:38 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 15:41:38 UTC home-ed.info /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
PK OTHER — Other Countries 142063 Grand Tel Private Limited 2 WATCH - 2026-09-04 15:40:14 UTC 2026-09-04 15:50:25 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 15:50:25 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack/13.0; WordPress/6.4; http://site87234098.com - WordPress
2026-09-04 15:40:14 UTC ansithean.co.uk /xmlrpc.php POST - Jetpack/13.0; WordPress/6.4; http://site31734894.com - WordPress
DE SAFE — Europe 24940 Hetzner Online GmbH 1 WATCH - 2026-09-04 16:05:59 UTC 2026-09-04 16:05:59 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 16:05:59 UTC www.madprof.net /readme.html GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 - -
TW OTHER — Other Countries 396982 Google LLC 1 WATCH - 2026-09-04 16:07:33 UTC 2026-09-04 16:07:33 UTC

Attack details

1 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 16:07:33 UTC rsdt.org /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
US OTHER — Other Countries 396982 Google LLC 2 BLOCKED 34.26.20.141/32 2026-09-04 06:34:22 UTC 2026-09-04 16:09:26 UTC

Attack details

2 retained observation(s)

Time Host URI Method Status User-Agent Crawler ID Attack class
2026-09-04 16:09:26 UTC rusty.group /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD
2026-09-04 06:34:22 UTC sainthelenaschurch.com /.git/config GET 404 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 - Source Control / CI/CD