🇩🇪
Holger
2026-11-07 16:03:59
UTC ·
(1 day ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇬🇧
openstrike.co.uk
2026-11-07 06:16:19
UTC ·
(1 day ago)
210 attacks on env grabbing URLs, env grabbing URLs (type 2), config grabbing URLs (type 2), directory traversals, password/key grabbing URLs, PHP URLs, VC URLs:
GET /packages/database/.env HTTP/1.1
GET /appearance/../../proc/self/environ HTTP/1.1
GE ...
show more
210 attacks on env grabbing URLs, env grabbing URLs (type 2), config grabbing URLs (type 2), directory traversals, password/key grabbing URLs, PHP URLs, VC URLs:
GET /packages/database/.env HTTP/1.1
GET /appearance/../../proc/self/environ HTTP/1.1
GET /settings/_payload.json HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /.git-credentials HTTP/1.1
GET /laravel../config/database.php HTTP/1.1
GET /.git/HEAD HTTP/1.1
show less
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-06 17:57:11
UTC ·
(2 days ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.52.215.222 - - [06/Nov/2026:18:57:00 +0100] "GET /.env%3Ffoo=bar HTTP/2.0" 403 17 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.52.215.222 - - [06/Nov/2026:18:57:00 +0100] "GET /.env%3Ffoo=bar HTTP/2.0" 403 17 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-06 16:43:00
UTC ·
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.52.215.222 (BE/Belgium/222.215.52.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇩🇰
floyd_dk
2026-11-06 15:58:47
UTC ·
(2 days ago)
34.52.215.222 - - [06/Nov/2026:15:58:46 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.52.215.222 - - [06/Nov/2026:15:58:46 +0000] " ...
show more
34.52.215.222 - - [06/Nov/2026:15:58:46 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.52.215.222 - - [06/Nov/2026:15:58:46 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.52.215.222 - - [06/Nov/2026:15:58:47 +0000] "GET /static/manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.52.215.222 - - [06/Nov/2026:15:58:47 +0000] "GET /4pv13r8mtgavplwcx9z5 HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.52.215.222 - - [06/Nov/2026:15:58:47 +0000] "GET /z9x8c7v6b5-debug-trigger-fldosxserver.floyd.dk HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spide
...
show less
Web App Attack
🇳🇱
Alt255
2026-11-06 15:11:54
UTC ·
(2 days ago)
[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.52.215.222 - - [06/Nov/2026:16:11:34 +0100] "GET /auth HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 ...
show more
[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.52.215.222 - - [06/Nov/2026:16:11:34 +0100] "GET /auth HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.52.215.222 - - [06/Nov/2026:16:11:34 +0100] "GET /webhooks HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.52.215.222 - - [06/Nov/2026:16:11:34 +0100] "GET /graphql HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.52.215.222 - - [06/Nov/2026:16:11:34 +0100] "GET /organization HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, l
...
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-06 14:53:12
UTC ·
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-11-06 14:45:15
UTC ·
(2 days ago)
Observed scanned 133 known-sensitive endpoint(s), e.g.: /*.auto.tfvars, /.//.env, /.amplifyrc, /.aws/config, /.aws/credentials%3F.txt, /.bashrc
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-11-06 14:26:14
UTC ·
(2 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
EvilTurkey
2026-11-06 13:20:59
UTC ·
(2 days ago)
Web app attack against financial institution website.
Web App Attack
Hacking
🇩🇰
floyd_dk
2026-11-06 13:14:28
UTC ·
(2 days ago)
34.52.215.222 - - [06/Nov/2026:13:14:27 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.52.215.222 - - [06/Nov/2026:13:14:27 +0000] "GE ...
show more
34.52.215.222 - - [06/Nov/2026:13:14:27 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.52.215.222 - - [06/Nov/2026:13:14:27 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.52.215.222 - - [06/Nov/2026:13:14:27 +0000] "GET /webpack-stats.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.52.215.222 - - [06/Nov/2026:13:14:27 +0000] "GET /lbmtij1xnrk46vffmvue HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.52.215.222 - - [06/Nov/2026:13:14:27 +0000] "GET /asset-manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit
...
show less
Web App Attack
🇺🇸
jormaster3k
2026-11-06 11:47:34
UTC ·
(2 days ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
FD-IX
2026-11-06 11:31:57
UTC ·
(2 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-06 11:24:07
UTC ·
(2 days ago)
Try to access /public../.env
Web App Attack
🇩🇪
rh24
2026-11-06 10:11:11
UTC ·
(2 days ago)
(badbots) Bad bot user-agent [redacted] from 34.52.215.222 (BE/Belgium/222.215.52.34.bc.googleusercontent.com)
Hacking