🇬🇧
openstrike.co.uk
2026-10-13 05:16:47
(1 day ago)
226 attacks on env grabbing URLs, directory traversals, config grabbing URLs (type 2), env grabbing ...
show more
226 attacks on env grabbing URLs, directory traversals, config grabbing URLs (type 2), env grabbing URLs (type 2), shell probes, password/key grabbing URLs, VC URLs, PHP URLs:
GET /static../.env HTTP/1.1
GET /..%2f.env HTTP/1.1
GET /config/settings.local.yml HTTP/1.1
GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /Dockerrun.aws.json HTTP/1.1
GET /.git/config HTTP/1.1
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
show less
Hacking
Web App Attack
🇩🇪
XICTRON
2026-10-13 01:15:07
(2 days ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-10-12 21:05:17
(2 days ago)
2026/10/12 22:05:15 [error] 4060693#4060693: *2615129 access forbidden by rule, client: 34.24.161.11 ...
show more
2026/10/12 22:05:15 [error] 4060693#4060693: *2615129 access forbidden by rule, client: 34.24.161.117, server: api.betatechnologies.info, request: "GET /media../.env HTTP/2.0", host: "api.betatechnologies.info"
2026/10/12 22:05:15 [error] 4060693#4060693: *2615129 access forbidden by rule, client: 34.24.161.117, server: api.betatechnologies.info, request: "GET /images../.env HTTP/2.0", host: "api.betatechnologies.info"
2026/10/12 22:05:15 [error] 4060693#4060693: *2615129 access forbidden by rule, client: 34.24.161.117, server: api.betatechnologies.info, request: "GET /dist../.env HTTP/2.0", host: "api.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇦🇹
SchiWaGoA
2026-10-12 18:24:15
(2 days ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
2026-10-12 17:26:29
(2 days ago)
34.24.161.117 detected on srv01
Brute-Force
🇳🇱
Savvii
2026-10-12 17:26:06
(2 days ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
2026-10-12 17:21:12
(2 days ago)
Bot / seems abusive / Apache connections: 26
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 17:16:58
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.24.161.117 (117.161.24.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.24.161.117 (117.161.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 13:16:54.742566 2026] [security2:error] [pid 15113:tid 15113] [client 34.24.161.117:37744] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||unified-dispatch.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "unified-dispatch.com"] [uri "/z9x8c7v6b5-debug-trigger-unified-dispatch.com"] [unique_id "as0WBh7Y_uVxSsJFbiQlNQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ismailk
2026-10-12 17:14:04
(2 days ago)
WordPress attack on tuncayozkan.com (auto-detected): tur=imza ulke=US puan=100 nginx=13 wf=8 cf=0 hi ...
show more
WordPress attack on tuncayozkan.com (auto-detected): tur=imza ulke=US puan=100 nginx=13 wf=8 cf=0 hiz=130 404cesit=109 gizliyol=18. Blocked by adaptive firewall.
show less
Web App Attack
Bad Web Bot
🇬🇧
consul.to
2026-10-12 17:12:45
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
e.fierstra
2026-10-12 16:54:47
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
Marc
2026-10-12 16:51:59
(2 days ago)
34.24.161.117 - - [12/Oct/2026:18:51:59 +0200] "GET /panel HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Macin ...
show more
34.24.161.117 - - [12/Oct/2026:18:51:59 +0200] "GET /panel HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.24.161.117 - - [12/Oct/2026:18:51:59 +0200] "GET /users/login HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.24.161.117 - - [12/Oct/2026:18:51:59 +0200] "GET /signup HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
show less
Brute-Force
🇩🇪
FD-IX
2026-10-12 16:28:22
(2 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
jormaster3k
2026-10-12 16:18:28
(2 days ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇰
HostingGroup
2026-10-12 16:11:54
(2 days ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 12. First blocked: 2026-10-12.
show less
Bad Web Bot
Web App Attack
