๐ฌ๐ง
openstrike.co.uk
2026-10-13 05:16:35
(22 hours ago)
452 attacks on password/key grabbing URLs, shell probes, env grabbing URLs (type 2), VC URLs, PHP UR ...
show more
452 attacks on password/key grabbing URLs, shell probes, env grabbing URLs (type 2), VC URLs, PHP URLs, env grabbing URLs, directory traversals, config grabbing URLs (type 2):
GET /Dockerrun.aws.json HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
GET /.git/config HTTP/1.1
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /config/.env HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /config/gcp-credentials.json HTTP/1.1
show less
Hacking
Web App Attack
๐จ๐ฑ
Fernando Soto
2026-10-13 03:05:25
(1 day ago)
WAF propio vps1 (CL): sensMASx195 score 30 en 1h. sondeo rutas sensibles.
Web App Attack
Anonymous
2026-10-13 00:26:55
(1 day ago)
34.141.75.107 - - [13/Oct/2026:02:26:54 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "DuckAssistBot/ ...
show more
34.141.75.107 - - [13/Oct/2026:02:26:54 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.141.75.107 - - [13/Oct/2026:02:26:55 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.141.75.107 - - [13/Oct/2026:02:26:55 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.141.75.107 - - [13/Oct/2026:02:26:55 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.141.75.107 - - [13/Oct/2026:02:26:55 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Brute-Force
SSH
Anonymous
2026-10-12 21:21:56
(1 day ago)
34.141.75.107 - - [12/Oct/2026:23:21:55 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5 ...
show more
34.141.75.107 - - [12/Oct/2026:23:21:55 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.141.75.107 - - [12/Oct/2026:23:21:55 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.141.75.107 - - [12/Oct/2026:23:21:55 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.141.75.107 - - [12/Oct/2026:23:21:55 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.141.75.107 - - [12/Oct/2026:23:21:55 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
...
show less
Brute-Force
SSH
๐ต๐ฑ
bmino.pl
2026-10-12 21:03:55
(1 day ago)
Autoban IP(2): 34.141.75.107 - Hostname: Google LLC - City: Frankfurt - Country: Germany - Organizat ...
show more
Autoban IP(2): 34.141.75.107 - Hostname: Google LLC - City: Frankfurt - Country: Germany - Organization: Google Cloud (europe-west3) - Reason: GET /.env.supabase HTTP/2.0
show less
Web App Attack
๐บ๐ธ
gamabe
2026-10-12 21:00:23
(1 day ago)
Detected crowdsecurity/http-path-traversal-probing attack pattern. Reported by CrowdSec IDS.
Port Scan
Anonymous
2026-10-12 20:37:43
(1 day ago)
34.141.75.107 - - [12/Oct/2026:22:37:42 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 Ap ...
show more
34.141.75.107 - - [12/Oct/2026:22:37:42 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.141.75.107 - - [12/Oct/2026:22:37:42 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.141.75.107 - - [12/Oct/2026:22:37:42 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.141.75.107 - - [12/Oct/2026:22:37:42 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.141.75.107 - - [12/Oct/2026:22:37:42 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 265 "-" "Mo
...
show less
Brute-Force
SSH
Anonymous
2026-10-12 19:54:18
(1 day ago)
34.141.75.107 - - [12/Oct/2026:21:54:17 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (L ...
show more
34.141.75.107 - - [12/Oct/2026:21:54:17 +0200] "GET /.htpasswd HTTP/2.0" 403 272 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.141.75.107 - - [12/Oct/2026:21:54:17 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.141.75.107 - - [12/Oct/2026:21:54:17 +0200] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.141.75.107 - - [12/Oct/2026:21:54:17 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.141.75.107 - - [12/Oct/2026:21:54:17 +0200] "GET /api/data/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (com
...
show less
Brute-Force
SSH
Anonymous
2026-10-12 18:55:57
(1 day ago)
34.141.75.107 - - [12/Oct/2026:20:55:56 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0 ...
show more
34.141.75.107 - - [12/Oct/2026:20:55:56 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/2.0" 404 265 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.141.75.107 - - [12/Oct/2026:20:55:56 +0200] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.141.75.107 - - [12/Oct/2026:20:55:56 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.141.75.107 - - [12/Oct/2026:20:55:56 +0200] "GET /%2Fapi/config HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.141.75.107 - - [12/Oct/2026:20:55:56 +0200] "GET /%2Fdashboard HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X
...
show less
Brute-Force
SSH
Anonymous
2026-10-12 17:55:29
(1 day ago)
34.141.75.107 - - [12/Oct/2026:19:55:28 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (c ...
show more
34.141.75.107 - - [12/Oct/2026:19:55:28 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.141.75.107 - - [12/Oct/2026:19:55:28 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.141.75.107 - - [12/Oct/2026:19:55:28 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.141.75.107 - - [12/Oct/2026:19:55:28 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.141.75.107 - - [12/Oct/2026:19:55:28 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
...
show less
Brute-Force
SSH
๐บ๐ธ
gamabe
2026-10-12 17:37:13
(1 day ago)
Detected crowdsecurity/http-dos-swithcing-ua attack pattern. Reported by CrowdSec IDS.
Hacking
๐ฉ๐ช
Hazzard
2026-10-12 17:14:02
(1 day ago)
(PERMBLOCK) 34.141.75.107 (DE/Germany/Hesse/Frankfurt am Main/107.75.141.34.bc.googleusercontent.com ...
show more
(PERMBLOCK) 34.141.75.107 (DE/Germany/Hesse/Frankfurt am Main/107.75.141.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
๐ธ๐ฌ
Cloudkul Cloudkul
2026-10-12 14:06:26
(1 day ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
๐ช๐ธ
Adolfo Montaรฑo
2026-10-12 13:41:35
(1 day ago)
CrowdSec blocked IP for crowdsecurity/http-probing on localhost
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-12 13:25:53
(1 day ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack