🇬🇧
D3monite
2026-07-22 08:30:37
(2 days ago)
Attempted (Hacking) Attack
Hacking
🇬🇧
openstrike.co.uk
2026-07-22 05:13:52
(2 days ago)
670 attacks on PHP URLs, env grabbing URLs, VC URLs, config grabbing URLs (type 2), password grabbin ...
show more
670 attacks on PHP URLs, env grabbing URLs, VC URLs, config grabbing URLs (type 2), password grabbing URLs:
GET /.env.php.bak HTTP/1.1
GET /core/.env HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /appsettings.json HTTP/1.1
GET /.aws/credentials HTTP/1.1
show less
Web App Attack
Hacking
🇳🇱
Site.eu
2026-07-22 00:57:52
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇨🇦
polycoda
2026-07-21 22:25:58
(2 days ago)
🔥 VERY AGGRESSIVE SCANNER probed over 300 inexistent files and PHP scripts in less than an hour.
Hacking
Web App Attack
🇺🇸
deskpass.com
2026-07-21 19:01:31
(2 days ago)
GET /phpinfo.php
Web App Attack
2026-07-21 16:06:18
(2 days ago)
Web attack
Bad Web Bot
Web App Attack
🇫🇷
bazter.pro
2026-07-21 15:44:49
(2 days ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-07-21 15:36:18
(2 days ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
2026-07-21 14:40:19
(2 days ago)
34.146.102.6 - - [21/Jul/2026:16:40:12 +0200] "GET /webpack-stats.json HTTP/1.1" 404 29860
34.146.10 ...
show more
34.146.102.6 - - [21/Jul/2026:16:40:12 +0200] "GET /webpack-stats.json HTTP/1.1" 404 29860
34.146.102.6 - - [21/Jul/2026:16:40:12 +0200] "GET /manifest.json HTTP/1.1" 404 29860
34.146.102.6 - - [21/Jul/2026:16:40:12 +0200] "GET /build-manifest.json HTTP/1.1" 404 29860
34.146.102.6 - - [21/Jul/2026:16:40:12 +0200] "GET /asset-manifest.json HTTP/1.1" 404 29860
34.146.102.6 - - [21/Jul/2026:16:40:12 +0200] "GET /_next/static/buildManifest.js HTTP/1.1" 404 29860
34.146.102.6 - - [21/Jul/2026:16:40:13 +0200] "GET /z9x8c7v6b5-debug-trigger-crypcool.com HTTP/1.1" 404 29860
34.146.102.6 - - [21/Jul/2026:16:40:13 +0200] "GET /_next/build-manifest.json HTTP/1.1" 404 29860
34.146.102.6 - - [21/Jul/2026:16:40:13 +0200] "GET /secrets.json HTTP/1.1" 404 29860
34.146.102.6 - - [21/Jul/2026:16:40:13 +0200] "GET /secrets.yml HTTP/1.1" 404 28320
34.146.102.6 - - [21/Jul/2026:16:40:13 +0200] "GET /service-account.json HTTP/1.1" 404 29860
...
show less
Web Spam
Web App Attack
🇩🇪
macrob
2026-07-21 14:33:35
(2 days ago)
2026/07/21 14:33:34 [error] 2535539#2535539: *396380769 access forbidden by rule, client: 34.146.102 ...
show more
2026/07/21 14:33:34 [error] 2535539#2535539: *396380769 access forbidden by rule, client: 34.146.102.6, server: fn.binixo.es, request: "GET /.gitlab-ci.yml HTTP/2.0", host: "oauth.fastcredit.net.ua"
2026/07/21 14:33:34 [error] 2535542#2535542: *396380770 access forbidden by rule, client: 34.146.102.6, server: fn.binixo.es, request: "GET /.env.example HTTP/2.0", host: "oauth.fastcredit.net.ua"
2026/07/21 14:33:34 [error] 2535539#2535539: *396380771 access forbidden by rule, client: 34.146.102.6, server: fn.binixo.es, request: "GET /.gitconfig HTTP/2.0", host: "oauth.fastcredit.net.ua"
...
show less
Web App Attack
🇨🇦
polycoda
2026-07-21 13:52:23
(2 days ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇰
HostingGroup
2026-07-21 13:36:52
(2 days ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 9. First blocked: 2026-07-21.
show less
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-07-21 13:20:10
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from JP.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (GET ...
show more
Triggered Cloudflare WAF (firewallCustom) from JP.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (GET) | Endpoint: /pi.php | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-07-21 13:17:05
(2 days ago)
Multiple pen test attempts.
Web App Attack
🇺🇸
TPI-Abuse
2026-07-21 13:10:52
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.102.6 (6.102.146.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.102.6 (6.102.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 09:10:48.384629 2026] [security2:error] [pid 6441:tid 6441] [client 34.146.102.6:41956] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dashboard.alitcogroup.com"] [uri "/config/.env"] [unique_id "al9v2F_EDILKTVp9dW2JSgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack