🇬🇧
openstrike.co.uk
2026-10-22 05:15:43
(2 hours ago)
446 attacks on config grabbing URLs (type 2), VC URLs, directory traversals, PHP URLs, env grabbing ...
show more
446 attacks on config grabbing URLs (type 2), VC URLs, directory traversals, PHP URLs, env grabbing URLs, password/key grabbing URLs, env grabbing URLs (type 2):
GET /secrets.json HTTP/1.1
GET /.git/config HTTP/1.1
GET /..%2f.env HTTP/1.1
POST /icecoder/lib/file-control.php HTTP/1.1
GET /app/..;/.env HTTP/1.1
GET /.aws/credentials HTTP/1.1
GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
iwle
2026-10-21 17:49:41
(13 hours ago)
[Wed Oct 21 13:49:38.909596 2026] [:error] [pid 208206:tid 208369] [client 34.169.75.162:0] [client ...
show more
[Wed Oct 21 13:49:38.909596 2026] [:error] [pid 208206:tid 208369] [client 34.169.75.162:0] [client 34.169.75.162] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "uvscards.com"] [uri "/.gitlab-ci.yml"] [unique_id "atj7MnNjDpnwkaXqGCmxFwAAAJY"]
[Wed Oct 21 13:49:38.938743 2026] [:error] [pid 640458:tid 640504] [client 34.169.75.162:0] [client 34.169.75.162] ModSecurity: Warning. Matched phrase "Dockerfile" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-AP
...
show less
Web App Attack
Brute-Force
🇨🇭
zynex
2026-10-21 17:45:27
(13 hours ago)
URL Probing: /web/.env
Web App Attack
🇫🇮
toolbit.online
2026-10-21 17:35:06
(13 hours ago)
Bad web bot activity detected - 46 abusive requests observed within 3 seconds. Auto-banned by CrowdS ...
show more
Bad web bot activity detected - 46 abusive requests observed within 3 seconds. Auto-banned by CrowdSec.
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-21 17:31:12
(13 hours ago)
20 attempts against mh_ha-misbehave-ban on pf221116
Brute-Force
Bad Web Bot
Web App Attack
2026-10-21 17:20:09
(14 hours ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇳🇱
Alt255
2026-10-21 17:18:04
(14 hours ago)
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.169.75.162 - - [21/Oct/2026:19:17:43 +0200] "GET /@fs/root/.env?raw?? HTTP/2.0" 301 492 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-10-21 16:41:10
(14 hours ago)
34.169.75.162 - - [21/Oct/2026:16:40:29 +0000] "GET /robots.txt HTTP/2.0" 403 126 "https://miquelalb ...
show more
34.169.75.162 - - [21/Oct/2026:16:40:29 +0000] "GET /robots.txt HTTP/2.0" 403 126 "https://miquelalbertsoler.cat/robots.txt" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-" edge="34.169.75.162"
34.169.75.162 - - [21/Oct/2026:16:40:30 +0000] "GET /wp-content/plugins/stop-user-enumeration/frontend/js/frontend.js?ver=1.7.9 HTTP/2.0" 403 12901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.169.75.162"
34.169.75.162 - - [21/Oct/2026:16:40:30 +0000] "GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/2.0" 403 12942 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.169.75.162"
34.169.75.162 - - [21/Oct/2026:16:40:30 +0000] "GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/2.0" 403 12901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr
...
show less
Web App Attack
🇳🇱
Alt255
2026-10-21 16:40:08
(14 hours ago)
[ti-12al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.169.75.162 - - \[21/Oct/2026:18:39:54 +0200\] "GET /.env.supabase HTTP/2.0" 301 392 "-" "Mozilla/5.0 \(compatible\; Meta-WebIndexer/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)"
34.169.75.162 - - \[21/Oct/2026:18:39:54 +0200\] "GET /static../.env HTTP/2.0" 301 392 "-" "CCBot/2.0 \(https://commoncrawl.org/faq/\)"
34.169.75.162 - - \[21/Oct/2026:18:39:54 +0200\] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 301 394 "-" "Mozilla/5.0 \(compatible\; Baiduspider/2.0\; +http://www.baidu.com/search/spider.html\)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-21 16:32:13
(14 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-21 16:07:25
(15 hours ago)
Excessive 404/403 errors
Brute-Force
🇫🇷
security.rdmc.fr
2026-10-21 16:02:25
(15 hours ago)
Sensitive File Scan
Web App Attack
2026-10-21 15:17:46
(16 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
2026-10-21 15:09:52
(16 hours ago)
Web application attack: http sensitive files; Web application attack: http path traversal probing; W ...
show more
Web application attack: http sensitive files; Web application attack: http path traversal probing; Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Probing for exposed secret / credential files
show less
Hacking
Web App Attack
2026-10-21 15:07:51
(16 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack