2026-11-03 12:01:54
UTC ·
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇬🇧
openstrike.co.uk
2026-11-03 06:17:56
UTC ·
(1 week ago)
210 attacks on env grabbing URLs (type 2), VC URLs, directory traversals, config grabbing URLs (type 2), PHP URLs, password/key grabbing URLs, env grabbing URLs:
GET /proc/self/cmdline HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /..%2f.env HTTP/1.1
GET /aut ...
show more
210 attacks on env grabbing URLs (type 2), VC URLs, directory traversals, config grabbing URLs (type 2), PHP URLs, password/key grabbing URLs, env grabbing URLs:
GET /proc/self/cmdline HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /..%2f.env HTTP/1.1
GET /auth.json HTTP/1.1
GET /laravel../config/database.php HTTP/1.1
GET /.aws/credentials%3F.txt HTTP/1.1
GET /.env.testing HTTP/1.1
show less
Hacking
Web App Attack
2026-11-02 13:32:28
UTC ·
(1 week ago)
IP matched detection query 404 icewarp.
Brute-Force
Hacking
🇪🇸
bohl-aiG5aef
2026-11-02 13:32:11
UTC ·
(1 week ago)
Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound
Hacking
🇹🇷
Jova
2026-11-02 13:12:50
UTC ·
(1 week ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇸🇪
vaia.cloud
2026-11-02 12:45:02
UTC ·
(1 week ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
🇩🇪
kkw
2026-11-02 12:43:32
UTC ·
(1 week ago)
[REDACTED] 34.47.30.124 - - [02/Nov/2026:13:43:31 +0100] "GET /dev/.env HTTP/2.0" 404 347 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
... (mode: searching http-sensitive-files)
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-02 11:45:13
UTC ·
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇲🇾
Rizzy
2026-11-02 11:35:50
UTC ·
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇫🇮
diego021
2026-11-02 11:02:48
UTC ·
(1 week ago)
34.47.30.124 pythonpirate.tech - [02/Nov/2026:06:02:46 -0500] "GET /sitemap_index.xml HTTP/2.0" 404 158 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.47.30.124 pythonpira ...
show more
34.47.30.124 pythonpirate.tech - [02/Nov/2026:06:02:46 -0500] "GET /sitemap_index.xml HTTP/2.0" 404 158 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.47.30.124 pythonpirate.tech - [02/Nov/2026:06:02:46 -0500] "GET /manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.47.30.124 pythonpirate.tech - [02/Nov/2026:06:02:46 -0500] "GET /static/manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.47.30.124 pythonpirate.tech - [02/Nov/2026:06:02:46 -0500] "GET /assets/manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
...
show less
Web App Attack
🇩🇪
updown.io
2026-11-02 10:48:04
UTC ·
(1 week ago)
{"level":"info","ts":1793616483.262777,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.47.30.124","remote_port":"37652","client_ip":"34.47.30.124","proto":"HTTP/2.0","method":"GET","host":"status.websushi.org","uri" ...
show more
{"level":"info","ts":1793616483.262777,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.47.30.124","remote_port":"37652","client_ip":"34.47.30.124","proto":"HTTP/2.0","method":"GET","host":"status.websushi.org","uri":"/build../.env","headers":{"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.websushi.org","ech":false}},"bytes_read":0,"user_id":"","duration":0.000176346,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1793616483.264977,"logger":"http.log.access.log
...
show less
DDoS Attack
Web App Attack
🇩🇪
Hazzard
2026-11-02 10:44:35
UTC ·
(1 week ago)
(PERMBLOCK) 34.47.30.124 (CA/Canada/Quebec/Montreal/124.30.47.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
Hacking
🇺🇸
masterguru
2026-11-02 10:33:01
UTC ·
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:user-agent. (1100000-169)
Bad Web Bot
🇩🇪
Alpiskris
2026-11-02 10:24:37
UTC ·
(1 week ago)
34.47.30.124 - - [02/Nov/2026:10:24:36 +0000] "POST /graphql HTTP/1.1" 405 552 "https://unaventa.es" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.47.30.124 - - [02/Nov/2026 ...
show more
34.47.30.124 - - [02/Nov/2026:10:24:36 +0000] "POST /graphql HTTP/1.1" 405 552 "https://unaventa.es" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.47.30.124 - - [02/Nov/2026:10:24:36 +0000] "GET /.env.supabase HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.47.30.124 - - [02/Nov/2026:10:24:36 +0000] "POST /v1/graphql HTTP/1.1" 405 552 "https://unaventa.es" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.47.30.124 - - [02/Nov/2026:10:24:36 +0000] "GET /.env.php.bak HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.47.30.124 - - [02/Nov/2026:10:24:36 +0000] "GET /laravel/.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.47.30.124
...
show less
Bad Web Bot
Web App Attack
2026-11-02 09:04:41
UTC ·
(1 week ago)
IP matched detection query many 3xx errors.
Brute-Force
