๐บ๐ธ
Execoop
2026-08-24 12:28:52
(5 hours ago)
HTTP secret_harvesting (observed): 552 HTTP, 13s
Brute-Force
๐บ๐ธ
Rip
2026-08-24 12:25:19
(5 hours ago)
Automated reconnaissance against web infrastructure.
Web App Attack
๐บ๐ธ
kadour
2026-08-24 11:34:46
(6 hours ago)
[Mon Aug 24 06:34:40.546774 2026] [proxy_fcgi:error] [pid 2853128:tid 2853287] [client 34.87.18.81:4 ...
show more
[Mon Aug 24 06:34:40.546774 2026] [proxy_fcgi:error] [pid 2853128:tid 2853287] [client 34.87.18.81:40022] AH01071: Got error 'Primary script unknown', referer: http://172.233.212.194:80/.env.php
[Mon Aug 24 06:34:40.555010 2026] [proxy_fcgi:error] [pid 2853128:tid 2853257] [client 34.87.18.81:40012] AH01071: Got error 'Primary script unknown', referer: http://172.233.212.194:80/.env.local.php
[Mon Aug 24 06:34:43.800750 2026] [proxy_fcgi:error] [pid 2853128:tid 2853265] [client 34.87.18.81:39990] AH01071: Got error 'Primary script unknown', referer: http://172.233.212.194:80/phpinfo.php
[Mon Aug 24 06:34:44.314671 2026] [proxy_fcgi:error] [pid 2942123:tid 2942158] [client 34.87.18.81:40030] AH01071: Got error 'Primary script unknown', referer: http://172.233.212.194:80/app_dev.php/_profiler/.env
[Mon Aug 24 06:34:45.036676 2026] [proxy_fcgi:error] [pid 2853128:tid 2853305] [client 34.87.18.81:49678] AH01071: Got error 'Primary script unknown', referer: http://172.233.212.194:80/app_dev
...
show less
Web App Attack
Anonymous
2026-08-24 01:07:37
(16 hours ago)
GET /@fs/etc/passwd?import&raw?? HTTP/1.1
GET /media../.env HTTP/1.1
GET /@fs/proc/self/environ HTTP ...
show more
GET /@fs/etc/passwd?import&raw?? HTTP/1.1
GET /media../.env HTTP/1.1
GET /@fs/proc/self/environ HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐น๐ท
Threat.live
2026-08-24 00:20:02
(17 hours ago)
Threat.live: Web Scan
Web App Attack
๐ฉ๐ช
JLKnoch Software GmbH
2026-08-23 23:51:48
(18 hours ago)
CrowdSec crowdsecurity/http-path-traversal-probing
Brute-Force
Web App Attack
๐ซ๐ฎ
oh.mg
2026-08-23 21:21:19
(20 hours ago)
34.87.18.81 - - [23/Aug/2026:23:21:19 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 403 479 "-" "Mozil ...
show more
34.87.18.81 - - [23/Aug/2026:23:21:19 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 403 479 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.87.18.81 - - [23/Aug/2026:23:21:19 +0200] "GET /@fs/proc/1/environ?raw?? HTTP/1.1" 403 479 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
34.87.18.81 - - [23/Aug/2026:23:21:19 +0200] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 403 479 "-" "Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)"
34.87.18.81 - - [23/Aug/2026:23:21:19 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 479 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.87.18.81 - - [23/Aug/2026:23:21:19 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 403 479 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
๐จ๐ญ
GAS
2026-08-23 19:35:58
(22 hours ago)
Direct IP access.
34.87.18.81 - - [23/Aug/2026:21:35:57 +0200] "GET /@fs/home/ec2-user/.aws/credenti ...
show more
Direct IP access.
34.87.18.81 - - [23/Aug/2026:21:35:57 +0200] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 402 2759 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" "REDACTED:80" ""
34.87.18.81 - - [23/Aug/2026:21:35:57 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 402 2747 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" "REDACTED:80" ""
...
show less
Port Scan
Web App Attack
๐บ๐ธ
ArturShelby
2026-08-23 05:59:07
(1 day ago)
Critical file access: /proc/self/environ
Web App Attack
Anonymous
2026-08-23 03:18:20
(1 day ago)
[Sun Aug 23 05:18:14.114972 2026] [proxy_fcgi:error] [pid 176178:tid 176278] [client 34.87.18.81:392 ...
show more
[Sun Aug 23 05:18:14.114972 2026] [proxy_fcgi:error] [pid 176178:tid 176278] [client 34.87.18.81:39218] AH01071: Got error 'Primary script unknown'
[Sun Aug 23 05:18:14.115023 2026] [proxy_fcgi:error] [pid 176179:tid 176249] [client 34.87.18.81:39238] AH01071: Got error 'Primary script unknown'
[Sun Aug 23 05:18:18.994194 2026] [proxy_fcgi:error] [pid 176362:tid 176391] [client 34.87.18.81:23022] AH01071: Got error 'Primary script unknown'
[Sun Aug 23 05:18:19.815291 2026] [proxy_fcgi:error] [pid 176178:tid 176278] [client 34.87.18.81:39218] AH01071: Got error 'Primary script unknown'
[Sun Aug 23 05:18:19.822246 2026] [proxy_fcgi:error] [pid 176179:tid 176262] [client 34.87.18.81:22996] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
zwebvigil
2026-08-23 02:30:19
(1 day ago)
34.87.18.81 [22/Aug/2026:19:30:19 -0700] "GET /media../etc/passwd HTTP/1.1" 404 2701 "-" port=62956 ...
show more
34.87.18.81 [22/Aug/2026:19:30:19 -0700] "GET /media../etc/passwd HTTP/1.1" 404 2701 "-" port=62956 "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "-" "-" "<host>" 1035
34.87.18.81 [22/Aug/2026:19:30:19 -0700] "GET /api/config HTTP/1.1" 404 2685 "-" port=63078 "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "-" "-" "<host>" 946
34.87.18.81 [22/Aug/2026:19:30:19 -0700] "GET /@fs/proc/self/environ HTTP/1.1" 404 2707 "-" port=62884 "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "-" "-" "<host>" 4262
34.87.18.81 [22/Aug/2026:19:30:19 -0700] "GET /static../.aws/credentials HTTP/1.1" 404 2715 "-" port=62944 "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" "-" "-" "<host>" 1140
34.87.18.81 [22/Aug/2026:19:30:19 -0700] "GET /static../.env HTTP/1.1" 404 269
show less
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-08-22 20:05:14
(1 day ago)
High-confidence malicious configuration/VCS probe
Web App Attack
Anonymous
2026-08-22 20:05:06
(1 day ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-22 17:37:10
(2 days ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-08-22 16:49:00
(2 days ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack