🇸🇪
Per-Erik Runebert
2026-10-15 08:39:27
(2 days ago)
Excessive unauthorized requests
Hacking
🇬🇧
openstrike.co.uk
2026-10-14 05:14:31
(3 days ago)
226 attacks on PHP URLs, password/key grabbing URLs, env grabbing URLs, directory traversals, config ...
show more
226 attacks on PHP URLs, password/key grabbing URLs, env grabbing URLs, directory traversals, config grabbing URLs (type 2), VC URLs, env grabbing URLs (type 2), shell probes:
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /id_rsa HTTP/1.1
GET /.env.supabase HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /config/settings.local.yml HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
show less
Web App Attack
Hacking
🇩🇪
Philister11
2026-10-14 02:11:56
(4 days ago)
CrowdSec: crowdsecurity/http-probing (SG/AS396982)
Web App Attack
Hacking
🇳🇱
Alt255
2026-10-14 01:43:53
(4 days ago)
[ti-17al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.126.91.165 - - [14/Oct/2026:03:43:46 +0200] "GET /.env.dev.local HTTP/2.0" 301 587 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.126.91.165 - - [14/Oct/2026:03:43:46 +0200] "GET /.env.secret HTTP/2.0" 301 581 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.126.91.165 - - [14/Oct/2026:03:43:46 +0200] "GET /.env.keys HTTP/2.0" 301 577 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.126.91.165 - - [14/Oct/2026:03:43:46 +0200] "GET /.env.credentials HTTP/2.0" 301 591 "-" "DuckAssistBot
...
show less
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-10-14 01:03:13
(4 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-10-14 00:44:00
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
🇧🇷
Sabrina Soto
2026-10-14 00:09:16
(4 days ago)
Probe for vulnerabilities. Path attempted: /@fs/home/ubuntu/.aws/credentials
Web App Attack
🇧🇪
Saec
2026-10-13 21:46:01
(4 days ago)
Jarvis auto-ban: CF top attacker on saec.me (88 hits, SG)
Port Scan
Web App Attack
🇷🇴
iulianh
2026-10-13 21:21:22
(4 days ago)
80,443
Brute-Force
SSH
🇩🇰
SaltySoftworks
2026-10-13 21:09:11
(4 days ago)
User agent spoofing
Page: /lib/terminal-xhr.php
Spoofing
Hacking
Web App Attack
🇧🇪
cmbplf
2026-10-13 19:28:50
(4 days ago)
430 requests with url.path */@fs/*
223 requests with url.path */proc/*
132 requests with url.path ...
show more
430 requests with url.path */@fs/*
223 requests with url.path */proc/*
132 requests with url.path *credentials.json
127 requests with url.path *.ssh/*
show less
Brute-Force
Bad Web Bot
🇨🇿
sajmon0011
2026-10-13 19:28:44
(4 days ago)
34.126.91.165 - - [13/Oct/2026:21:28:44 +0200] "GET /robots.txt HTTP/2.0" 404 196 "-" "Mozilla/5.0 ( ...
show more
34.126.91.165 - - [13/Oct/2026:21:28:44 +0200] "GET /robots.txt HTTP/2.0" 404 196 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Web App Attack
🇬🇧
consul.to
2026-10-13 18:23:39
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
konseptit
2026-10-13 17:32:55
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.126.91.165 (SG/Singapore/165.91.126. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.126.91.165 (SG/Singapore/165.91.126.34.bc.googleusercontent.com)
show less
SQL Injection
🇧🇷
dominioz
2026-10-13 15:54:33
(4 days ago)
2026-10-13 11:39:19 GET /media../.env - - 34.126.91.165 HTTP/2 Mozilla/5.0+(compatible;+MoonshotBot/ ...
show more
2026-10-13 11:39:19 GET /media../.env - - 34.126.91.165 HTTP/2 Mozilla/5.0+(compatible;+MoonshotBot/1.0;++https://kimi.ai/) - 301 642
2026-10-13 12:03:58 GET /app/..;/.env - - 34.126.91.165 HTTP/2 Mozilla/5.0+(compatible;+Bytespider;[email protected] )+AppleWebKit/537.36 - 301 630
2026-10-13 12:47:21 GET /js../.env - - 34.126.91.165 HTTP/2 Mozilla/5.0+(compatible;+KimiBot/1.0;++https://kimi.ai/) - 301 644
2026-10-13 14:30:17 GET /app/..;/.env - - 34.126.91.165 HTTP/2 Mozilla/5.0+(compatible;+Hunyuan/1.0;++https://hunyuan.tencent.com/) - 301 642
2026-10-13 15:54:19 GET /media../.env - - 34.126.91.165 HTTP/2 Mozilla/5.0+(compatible;+ChatGLM-Spider/1.0;++https://zhipuai.cn/) - 301 638
...
show less
Bad Web Bot
Web App Attack
