Server Security Dashboard

Generated at 2026-10-13 02:50:02

Warning: Some paths are not readable:
🛡️ Honeypot Hits (Last 24 Hours)
45
Based on honeypot.log timestamps
👥 Total Honeypot Offenders
192
Distinct IPs in last 500 honeypot lines
🚫 Honeypot Hardkills (Last 24 Hours)
25
Counted by HARDKILL_HIT honeypot events
⚠️ 404 Errors (Last 24 Hours)
0
Based on access log timestamps

Top Honeypot Offenders (by IP)

IPHits
68.183.61.164 38
35.241.239.86 18
45.148.10.59 14
34.53.184.30 13
45.148.10.171 12
34.52.133.111 11
45.148.10.60 11
93.123.109.164 10
195.178.110.104 10
34.156.206.32 10

Top Honeypot URIs

URIHits
/honeypot-trap.php 92
/.env 83
/.git/config 48
/login 23
/.env~ 15
/api/.env 14
/api/graphql 12
/.git/index 12
/developmentserver/metadatauploader 11
/api/phpinfo.php 10

Recent Honeypot Events

Date/Time IP URI Reason Event User Agent Extra
2026-10-12 19:38:52 34.53.212.113 /.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 18:58:34 180.93.234.13 /.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36 METHOD=GET | REF=-
2026-10-12 18:22:43 45.153.34.122 /.env~ GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-12 18:22:28 45.153.34.122 /.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-12 17:40:29 178.16.55.128 /remote/login?lang=en GENERIC_HONEYPOT_HIT HARDKILL_HIT - METHOD=GET | REF=-
2026-10-12 17:40:20 178.16.55.128 /remote/login?lang=en GENERIC_HONEYPOT_HIT HARDKILL_HIT - METHOD=GET | REF=-
2026-10-12 17:16:27 35.240.100.200 /.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 17:08:03 34.38.113.44 /api/.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 17:07:54 34.38.113.44 /api/phpinfo.php GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 17:07:36 34.38.113.44 /.git/logs/refs/heads/main GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 17:07:35 34.38.113.44 /.git/index CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 17:07:34 34.38.113.44 /.git/config CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 17:07:33 34.38.113.44 /.env~ GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 17:07:33 34.38.113.44 /.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 17:07:33 34.38.113.44 /.git/logs/HEAD GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 14:51:55 143.244.57.88 /vendor/ GENERIC_HONEYPOT_HIT HARDKILL_HIT - METHOD=GET | REF=-
2026-10-12 14:51:34 143.244.57.88 /vendor/phpunit/phpunit/src/Util/PHP/ GENERIC_HONEYPOT_HIT HARDKILL_HIT - METHOD=GET | REF=-
2026-10-12 14:51:23 143.244.57.88 /honeypot-trap.php GENERIC_HONEYPOT_HIT HARDKILL_HIT - METHOD=GET | REF=-
2026-10-12 14:30:56 137.184.172.214 /.git/config CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-12 14:30:55 137.184.172.214 /vendor/laravel-filemanager/js/script.js GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-12 14:30:54 137.184.172.214 /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php PHPUNIT_RCE_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 METHOD=POST | REF=-
2026-10-12 14:30:53 137.184.172.214 /.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-12 13:53:37 64.23.178.187 /honeypot-trap.php GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36 METHOD=HEAD | REF=http://www.optimumyouth.com/old/
2026-10-12 13:40:43 45.148.10.60 /login SENSITIVE_ENDPOINT_PROBE SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-12 13:40:39 206.209.210.3 /.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Linux; U; Android 8.1.0; zh-CN; EML-AL00 Build/HUAWEIEML-AL00) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 baidu.sogo.uc.UCBrowser/11.9.4.974 UWS/2.13.1.48 Mobile Safari/537.36 AliApp(DingTalk/4.5.11) com.alibaba.android.rimet/10487439 Channel/227200 language/zh-CN METHOD=GET | REF=-
2026-10-12 13:40:28 45.148.10.60 /honeypot-trap.php GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 METHOD=GET | REF=https://173.249.210.136/admin/
2026-10-12 13:39:58 45.148.10.60 /login SENSITIVE_ENDPOINT_PROBE SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-12 13:39:33 45.148.10.60 /login SENSITIVE_ENDPOINT_PROBE SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-12 12:07:03 34.158.76.165 /%2eenv GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot) METHOD=GET | REF=-
2026-10-12 12:07:02 34.158.76.165 //.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic.com) METHOD=GET | REF=-
2026-10-12 12:07:01 34.158.76.165 /api/.env/public/.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot) METHOD=GET | REF=-
2026-10-12 12:07:01 34.158.76.165 /api/..;/.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler) METHOD=GET | REF=-
2026-10-12 10:15:59 38.248.19.246 /admin/config.php CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 METHOD=GET | REF=-
2026-10-12 08:59:30 195.3.220.7 /wp-content/uploads/elementor/222.php GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36 METHOD=GET | REF=-
2026-10-12 08:30:08 45.148.10.60 /honeypot-trap.php GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 OPR/111.0.0.0 METHOD=GET | REF=http://optimumyouth.com/dev/
2026-10-12 08:29:54 45.148.10.60 /honeypot-trap.php GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 METHOD=GET | REF=https://optimumyouth.com/dev/
2026-10-12 08:29:47 45.148.10.60 /honeypot-trap.php/ GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 OPR/111.0.0.0 METHOD=GET | REF=-
2026-10-12 08:29:37 45.148.10.60 /honeypot-trap.php/wp-login.php SENSITIVE_ENDPOINT_PROBE SOFT_HIT Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15 METHOD=GET | REF=-
2026-10-12 08:29:26 45.148.10.60 /honeypot-trap.php/wp-links-opml.php GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 OPR/111.0.0.0 METHOD=GET | REF=-
2026-10-12 08:29:21 45.148.10.60 /honeypot-trap.php/?feed=rss2 GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (X11; Linux x86_64; rv:128.0) Gecko/20100101 Firefox/128.0 METHOD=GET | REF=-
2026-10-12 08:29:12 45.148.10.60 /honeypot-trap.php GENERIC_HONEYPOT_HIT SOFT_HIT Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1 METHOD=GET | REF=https://optimumyouth.com/staging/
2026-10-12 08:14:04 34.170.96.119 /.//.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot METHOD=GET | REF=-
2026-10-12 07:38:41 20.239.176.5 /1.php?p= GENERIC_HONEYPOT_HIT HARDKILL_HIT - METHOD=GET | REF=-
2026-10-12 07:14:12 50.117.36.209 /.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0 METHOD=GET | REF=-
2026-10-12 05:00:49 94.154.43.74 /.env CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-11 23:41:16 77.90.185.203 /.git/config CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36 METHOD=GET | REF=-
2026-10-11 22:15:56 20.163.35.254 /developmentserver/metadatauploader DEV_METADATA_PROBE HARDKILL_HIT Mozilla/5.0 zgrab/0.x METHOD=GET | REF=-
2026-10-11 20:47:16 132.196.60.168 /config.php? GENERIC_HONEYPOT_HIT HARDKILL_HIT - METHOD=GET | REF=-
2026-10-11 20:19:35 65.49.20.67 /.git/config CONFIG_PROBE HARDKILL_HIT Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0 METHOD=GET | REF=-
2026-10-11 18:12:05 185.177.72.24 /api/config/constants%2ejs GENERIC_HONEYPOT_HIT HARDKILL_HIT curl/8.7.1 METHOD=GET | REF=-

Honeypot Reason Legend

PHPUNIT_RCE_PROBE Probes for phpunit eval-stdin RCE to execute arbitrary PHP code.
THINKPHP_RCE_PROBE ThinkPHP invokefunction-based RCE scanning.
AUTO_PREPEND_RCE Attempts to use auto_prepend_file=php://input or similar to run injected PHP.
DOCKER_API_PROBE Tries to access Docker Engine API endpoints like /containers/json.
BACKDOOR_PROBE Classic webshells and backdoor files (wso, r57, c99, upl.php, etc.).
CONFIG_PROBE Attempts to read config/secret files like wp-config.php, .git/config, .env.
PATH_TRAVERSAL Directory traversal patterns (../../) aiming to escape the webroot.
DEV_METADATA_PROBE Dev-only endpoints like /developmentserver/metadatauploader.
SMTP_PROBE Probes for mail config files (smtp_config.json, smtp.php, mail_config.php).
SENSITIVE_ENDPOINT_PROBE Scanning login/XML-RPC/wp-admin and similar access points.
SCANNER_PROBE Fingerprinting URIs such as /geoip/ or /wsman.
GENERIC_HONEYPOT_HIT Caught by honeypot, but not mapped to a specific exploit type.

Sensitive Endpoint Traffic (Recent Log Sample)

Monitoring hits to wp-login.php, xmlrpc.php, wp-admin, wp-json, and other high-value URLs from the last 20000 log lines.

IP Address Hits Endpoints First Seen Last Seen UA Samples
217.60.196.191 4 /wp-login.php 2026-10-12 13:02:48 2026-10-13 02:31:19
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0
143.244.57.88 17 /admin/uploads/, /admin/, /admin/editor/, /wp-admin/css/, /wp-admin/maint/ … 2026-10-12 21:51:14 2026-10-12 21:54:10
-
111.88.118.59 2 /wp-login.php 2026-10-12 18:03:05 2026-10-12 20:10:35
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36
5.253.84.92 1 /wp-admin/ 2026-10-12 19:00:10 2026-10-12 19:00:10
Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36

Top 404 Offenders (by IP)

IP404 Count

Top 404 URLs

URL404 Count

Recent 404 "Page Not Found" Errors

Date/Time IP Method Reason URL Referrer User Agent

Copy 404 Data for ChatGPT Analysis

Select all (Ctrl+A / Cmd+A) inside this box, copy, and paste into ChatGPT.