🇳🇱
homeshowdomain.nl
2026-11-06 22:59:38
UTC ·
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-05.
Web App Attack
SSH
Hacking
🇬🇧
openstrike.co.uk
2026-11-06 06:15:52
UTC ·
(5 days ago)
397 attacks on directory traversals, env grabbing URLs (type 2), VC URLs, env grabbing URLs, config grabbing URLs (type 2), password/key grabbing URLs, PHP URLs:
GET /..%2f.env HTTP/1.1
GET /proc/self/cmdline HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /cor ...
show more
397 attacks on directory traversals, env grabbing URLs (type 2), VC URLs, env grabbing URLs, config grabbing URLs (type 2), password/key grabbing URLs, PHP URLs:
GET /..%2f.env HTTP/1.1
GET /proc/self/cmdline HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /core/.env HTTP/1.1
GET /secrets.json HTTP/1.1
GET /.aws/credentials HTTP/1.1
GET /laravel../config/database.php HTTP/1.1
show less
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-11-05 12:55:17
UTC ·
(5 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇨🇦
zXero
2026-11-05 12:53:52
UTC ·
(5 days ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
🇧🇾
lns.bz
2026-11-05 09:45:12
UTC ·
(6 days ago)
.env scanning [BY]
Web App Attack
🇪🇸
offensivesentinel
2026-11-05 09:31:09
UTC ·
(6 days ago)
ModSecurity rule violation on iesmonterroso.org
Web App Attack
🇪🇸
tutaim.com
2026-11-05 09:00:01
UTC ·
(6 days ago)
⛔ [05/11/26] This IP has been detected performing multiple attacks on websites (670 attempts blocked). Potential malicious activity.
Brute-Force
SSH
Web App Attack
FTP Brute-Force
🇳🇱
ConsulHosting
2026-11-05 06:30:39
UTC ·
(6 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
Epimetheus
2026-11-05 05:54:20
UTC ·
(6 days ago)
Zombie network / Bot scanner detected:
[GET] /.git-credentials
[GET] /.env.keys
[GET] /.env.staging.local
[GET] /supabase/config.toml
[GET] /rush.json
[GET] /key.json
[GET] /.turbo/config.json
[GET] /compose.yml
[GET] /.dev.vars
[GET] /.env.preprod
...
show more
Zombie network / Bot scanner detected:
[GET] /.git-credentials
[GET] /.env.keys
[GET] /.env.staging.local
[GET] /supabase/config.toml
[GET] /rush.json
[GET] /key.json
[GET] /.turbo/config.json
[GET] /compose.yml
[GET] /.dev.vars
[GET] /.env.preprod
[GET] /railway.json
[GET] /.env.prod.local
[GET] /static//app/.env
[GET] /public/admin.json
[GET] /frontend/.env
[GET] /.env.backup
[GET] /.env.save
[GET] /firebase-admin.json
[GET] /....//....//....//..../proc/self/environ
[GET] /google-credentials.json
[GET] /web/.env
[GET] /assets../.env
[GET] /.env.production
[GET] /core/.env
[GET] /.env%3F.css
[GET] /gcp-key.json
[GET] /admin%2F.env
[GET] /static//.env
[GET] /docker/.env
[GET] /laravel../.env
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )
show less
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
Epimetheus
2026-11-05 05:26:20
UTC ·
(6 days ago)
Zombie network / Bot scanner detected:
[GET] /site/.env
[GET] /config/.env.php
[GET] /wp-config.php.bak
[GET] /api/system/fileView
[GET] /wp-config.php.old
[GET] /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
[GET] /auth.json
[GET] ...
show more
Zombie network / Bot scanner detected:
[GET] /site/.env
[GET] /config/.env.php
[GET] /wp-config.php.bak
[GET] /api/system/fileView
[GET] /wp-config.php.old
[GET] /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
[GET] /auth.json
[GET] /env.bak
[GET] /api/system/fileView
[GET] /config/default.json
[GET] /api/console/api_server
[GET] /.terraform.rc
[GET] /v2/.env
[GET] /old/.env
[GET] /production/.env
[GET] /.env.shared
[GET] /prisma/.env
[GET] /prisma/schema.prisma
[GET] /ses.env
[GET] /dev/.env
[GET] /.next/routes-manifest.json
[GET] /.firebaserc
[GET] /packages/database/.env
[GET] /.env%3F.css
[GET] /apps/web/.env
[GET] /.env.staging.local
[GET] /dashboard/_payload.json
[GET] /__nuxt_config.json
[GET] /packages/config/.env
[GET] /account/_payload.json
UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
show less
Bad Web Bot
Exploited Host
Web App Attack
🇧🇪
cmbplf
2026-11-05 02:36:48
UTC ·
(6 days ago)
170 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
🇦🇺
artful
2026-11-05 02:33:00
UTC ·
(6 days ago)
Excessive errors, high load and multiple hits per second
Web App Attack
🇬🇧
rakkor
2026-11-05 00:47:54
UTC ·
(6 days ago)
2026/11/05 00:47:53 [error] 10806#10806: *1077230 open() "/usr/syno/synoman/assets/manifest.json" failed (2: No such file or directory), client: 34.179.140.54, server: drive.rakkor.uk, request: "GET /assets/manifest.json HTTP/2.0", host: "drive.rakko ...
show more
2026/11/05 00:47:53 [error] 10806#10806: *1077230 open() "/usr/syno/synoman/assets/manifest.json" failed (2: No such file or directory), client: 34.179.140.54, server: drive.rakkor.uk, request: "GET /assets/manifest.json HTTP/2.0", host: "drive.rakkor.uk"
2026/11/05 00:47:53 [error] 10806#10806: *1077230 open() "/usr/syno/synoman/z9x8c7v6b5-debug-trigger-drive.rakkor.uk" failed (2: No such file or directory), client: 34.179.140.54, server: drive.rakkor.uk, request: "GET /z9x8c7v6b5-debug-trigger-drive.rakkor.uk HTTP/2.0", host: "drive.rakkor.uk"
...
show less
Brute-Force
Hacking
Web App Attack
🇫🇷
dynamix
2026-11-04 23:01:35
UTC ·
(6 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
oralunal
2026-11-04 22:46:28
UTC ·
(6 days ago)
Banned by Fail2Ban - access.log - mavifinds
Web App Attack
Bad Web Bot