๐ณ๐ฑ
Site.eu
2026-10-14 05:25:32
(4 days ago)
Excessive multi-domain requests
Brute-Force
๐ฌ๐ง
openstrike.co.uk
2026-10-13 05:15:44
(5 days ago)
226 attacks on directory traversals, env grabbing URLs, config grabbing URLs (type 2), PHP URLs, VC ...
show more
226 attacks on directory traversals, env grabbing URLs, config grabbing URLs (type 2), PHP URLs, VC URLs, shell probes, env grabbing URLs (type 2), password/key grabbing URLs:
GET /..%2f..%2f.env HTTP/1.1
GET /prisma/.env HTTP/1.1
GET /config/environment.json HTTP/1.1
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /.git/HEAD HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
GET /Dockerrun.aws.json HTTP/1.1
show less
Hacking
Web App Attack
๐ง๐ช
taivas.nl
2026-10-13 04:33:28
(5 days ago)
Many_bad_calls
Web App Attack
๐บ๐ธ
jormaster3k
2026-10-12 20:51:43
(5 days ago)
Attack against Apache (too many 404s)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 20:37:31
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.126.67.4 (4.67.126.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.126.67.4 (4.67.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 16:37:24.507556 2026] [security2:error] [pid 21934:tid 21934] [client 34.126.67.4:33986] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pyxelstudios.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pyxelstudios.com"] [uri "/z9x8c7v6b5-debug-trigger-pyxelstudios.com"] [unique_id "as1FBCuNOJyAD0ytRRnEuwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 19:10:46
(5 days ago)
GET /@fs/../.env?raw?? HTTP/1.1
...
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 19:09:24
(5 days ago)
(mod_security) mod_security (id:949110) triggered by 34.126.67.4 (4.67.126.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:949110) triggered by 34.126.67.4 (4.67.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:09:19.720621 2026] [security2:error] [pid 23065:tid 23065] [client 34.126.67.4:41992] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hamiltonbookings.com"] [uri "/z9x8c7v6b5-debug-trigger-hamiltonbookings.com"] [unique_id "as0wXxvdgWZCwOOSsquy5AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
ELYAZ
2026-10-12 18:56:57
(5 days ago)
(y3) Failed access -byebye- from 34.126.67.4 (SG/Singapore/4.67.126.34.bc.googleusercontent.com): ( ...
show more
(y3) Failed access -byebye- from 34.126.67.4 (SG/Singapore/4.67.126.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
๐ฉ๐ช
svr
2026-10-12 18:55:26
(5 days ago)
Abusive Automated Web Scanner
Web App Attack
๐ซ๐ท
masterguru
2026-10-12 18:42:04
(5 days ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
๐ซ๐ท
Omar Martรญnez
2026-10-12 18:33:16
(5 days ago)
[Mon Oct 12 12:33:13.827506 2026] [core:error] [pid 2190221:tid 139843253851712] [remote 34.126.67.4 ...
show more
[Mon Oct 12 12:33:13.827506 2026] [core:error] [pid 2190221:tid 139843253851712] [remote 34.126.67.4:42690] AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env)
[Mon Oct 12 12:33:13.994375 2026] [core:error] [pid 2190221:tid 139843228673600] [remote 34.126.67.4:42690] AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ)
...
show less
Phishing
Email Spam
Blog Spam
Anonymous
2026-10-12 18:32:42
(5 days ago)
34.126.67.4 - - [12/Oct/2026:13:32:36 -0500] "GET /.env.development::$DATA?raw HTTP/1.1" 403 199 "-" ...
show more
34.126.67.4 - - [12/Oct/2026:13:32:36 -0500] "GET /.env.development::$DATA?raw HTTP/1.1" 403 199 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.126.67.4
34.126.67.4 - - [12/Oct/2026:13:32:37 -0500] "GET /.env.production::$DATA?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.126.67.4
34.126.67.4 - - [12/Oct/2026:13:32:37 -0500] "GET /.env.local::$DATA?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 34.126.67.4
34.126.67.4 - - [12/Oct/2026:13:32:40 -0500] "GET /.env.stage HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.126.67.4
34.126.67.4 - - [12/Oct/2026:13:32:40 -0500] "GET /.env.www HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 34.126.67.4
3
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-12 18:26:40
(5 days ago)
excessive HTTP 404 errors
Bad Web Bot
๐ซ๐ท
security.rdmc.fr
2026-10-12 18:14:57
(5 days ago)
Web scan: multiple 4xx responses
Web App Attack
Bad Web Bot
๐ฆ๐บ
electronico
2026-10-12 17:43:53
(5 days ago)
34.126.67.4 - - [13/Oct/2026:04:43:52 +1100] "GET /vfwygx0drr8nusp1jucc HTTP/2.0" 404 1885 "-" "Mozi ...
show more
34.126.67.4 - - [13/Oct/2026:04:43:52 +1100] "GET /vfwygx0drr8nusp1jucc HTTP/2.0" 404 1885 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.126.67.4 - - [13/Oct/2026:04:43:52 +1100] "GET /assets/manifest.json HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.126.67.4 - - [13/Oct/2026:04:43:52 +1100] "GET /asset-manifest.json HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.126.67.4 - - [13/Oct/2026:04:43:52 +1100] "GET /vx4lj6v3rajaof37w5gl HTTP/2.0" 404 1854 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.126.67.4 - - [13/Oct/2026:04:43:52 +1100] "GET /dist/manifest.json HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple
...
show less
Brute-Force
Web App Attack