Anonymous
2026-11-03 12:21:44
UTC ·
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇬🇧
openstrike.co.uk
2026-11-03 06:17:30
UTC ·
(1 week ago)
210 attacks on VC URLs, env grabbing URLs (type 2), password/key grabbing URLs, PHP URLs, env grabbing URLs, directory traversals, config grabbing URLs (type 2):
GET /.git/HEAD HTTP/1.1
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
GET ...
show more
210 attacks on VC URLs, env grabbing URLs (type 2), password/key grabbing URLs, PHP URLs, env grabbing URLs, directory traversals, config grabbing URLs (type 2):
GET /.git/HEAD HTTP/1.1
GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1
GET /Dockerrun.aws.json HTTP/1.1
GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1
GET /supabase/.env HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /config/settings.local.yml HTTP/1.1
show less
Hacking
Web App Attack
🇭🇺
DumaNet
2026-11-03 05:30:00
UTC ·
(1 week ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Nov 02. 20:45:46
Source IP: 34.80.206.46
Portion of the log(s):
34.80.206.46 - [02/Nov/2026:20:45:46 +0100] "GET /rclone.conf HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Meta-W ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Nov 02. 20:45:46
Source IP: 34.80.206.46
Portion of the log(s):
34.80.206.46 - [02/Nov/2026:20:45:46 +0100] "GET /rclone.conf HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.80.206.46 - [02/Nov/2026:20:45:46 +0100] "GET /manifest.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.80.206.46 - [02/Nov/2026:20:45:46 +0100] "GET /static/manifest.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.80.206.46 - [02/Nov/2026:20:45:46 +0100] "GET /dist/manifest.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.80.206.46 - [02/Nov/2026:20:45:46 +0100] "GET /assets/manifest.json
show less
Web App Attack
🇭🇺
DumaNet
2026-11-03 05:01:00
UTC ·
(1 week ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Nov 02. 17:35:44
Source IP: 34.80.206.46
Portion of the log(s):
34.80.206.46 - [02/Nov/2026:17:35:44 +0100] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Ki ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Nov 02. 17:35:44
Source IP: 34.80.206.46
Portion of the log(s):
34.80.206.46 - [02/Nov/2026:17:35:44 +0100] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.80.206.46 - [02/Nov/2026:17:35:44 +0100] "GET /.env.backup HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.80.206.46 - [02/Nov/2026:17:35:44 +0100] "GET /.env.example HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.80.206.46 - [02/Nov/2026:17:35:44 +0100] "GET /console HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.80.206.46 - [02/Nov/2026:17:35:44 +0100
show less
Web App Attack
Anonymous
2026-11-02 21:32:00
UTC ·
(1 week ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-02 21:22:04
UTC ·
(1 week ago)
Bot / scanning and/or hacking attempts: GET /compose.yaml HTTP/2.0, GET /serviceAccountKey.json HTTP/2.0, GET /.env.dev HTTP/2.0, GET /rush.json HTTP/2.0, GET /fly.toml HTTP/2.0, GET /credentials.json HTTP/2.0, GET /.env.secret HTTP/2.0, GET /firebas ...
show more
Bot / scanning and/or hacking attempts: GET /compose.yaml HTTP/2.0, GET /serviceAccountKey.json HTTP/2.0, GET /.env.dev HTTP/2.0, GET /rush.json HTTP/2.0, GET /fly.toml HTTP/2.0, GET /credentials.json HTTP/2.0, GET /.env.secret HTTP/2.0, GET /firebase-service-account.json HTTP/2.0, GET /nx.json HTTP/2.0, GET /.env.config HTTP/2.0, GET /mhjbm4ldyfegbgnm2yvd HTTP/2.0, GET /docker-compose.yml HTTP/2.0, GET /serverless.yml HTTP/2.0, GET /key.pem HTTP/2.0, GET /core/.env HTTP/2.0, GET /secrets.env HTTP/2.0, GET /.next/.env HTTP/2.0, GET /.env.staging.local HTTP/2.0, GET /.git/HEAD HTTP/2.0, GET /compose.yml HTTP/2.0
show less
Hacking
Web App Attack
🇩🇪
jakidomi
2026-11-02 20:11:01
UTC ·
(1 week ago)
CrowdSec detection: crowdsecurity/http-sensitive-files
Web App Attack
🇳🇱
debestelapp
2026-11-02 19:25:08
UTC ·
(1 week ago)
Web App Attack
🇩🇪
altenglaner
2026-11-02 19:06:21
UTC ·
(1 week ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇧🇪
cmbplf
2026-11-02 18:32:33
UTC ·
(1 week ago)
250 requests with url.path */proc/*
234 requests with url.path *credentials.json
138 requests with url.path *config.json
115 requests with url.path *.aws/*
Brute-Force
Bad Web Bot
🇩🇪
neckaralb-admin.de
2026-11-02 16:41:56
UTC ·
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-11-02 16:21:54
UTC ·
(1 week ago)
34.80.206.46 - - [02/Nov/2026:17:21:41 +0100] "GET /.firebaserc HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0;
Web Spam
Blog Spam
Brute-Force
Web App Attack
Anonymous
2026-11-02 14:03:15
UTC ·
(1 week ago)
IP matched detection query 404 icewarp.
Brute-Force
Hacking
🇳🇱
Savvii
2026-11-02 12:01:57
UTC ·
(1 week ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
madeit
2026-11-02 11:27:58
UTC ·
(1 week ago)
Web App Attack