🇳🇱
Mr. Sky
2026-11-06 19:47:46
UTC ·
(3 days ago)
WordPress exploitation attempts detected against a public web server.
46 suspicious requests
39 critical requests
Observed requests:
GET /wp-login.php?redirect_to=https%3A%2F%2Fwp.mrsky.nl%2Fwp-admin%2F&reauth=1
GET /wp-admin/
GET /.env
POST /graph ...
show more
WordPress exploitation attempts detected against a public web server.
46 suspicious requests
39 critical requests
Observed requests:
GET /wp-login.php?redirect_to=https%3A%2F%2Fwp.mrsky.nl%2Fwp-admin%2F&reauth=1
GET /wp-admin/
GET /.env
POST /graphql
POST /api/graphql
Risk level: CRITICAL
Reference: STI-20261106-204746-34-87-57-65
show less
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-06 18:32:12
UTC ·
(4 days ago)
[ti-12al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.87.57.65 - - \[06/Nov/2026:19:31:54 +0100\] "GET /prisma/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(compatible\; MoonshotBot/1.0\; +https://kimi.ai/\) ...
show more
[ti-12al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.87.57.65 - - \[06/Nov/2026:19:31:54 +0100\] "GET /prisma/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(compatible\; MoonshotBot/1.0\; +https://kimi.ai/\)"
34.87.57.65 - - \[06/Nov/2026:19:31:54 +0100\] "GET /.env.shared HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(compatible\; Hunyuan/1.0\; +https://hunyuan.tencent.com/\)"
34.87.57.65 - - \[06/Nov/2026:19:31:54 +0100\] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 1850 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-SearchBot/1.0\; +https://openai.com/searchbot"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-06 18:10:44
UTC ·
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
technojoe99
2026-11-06 17:37:48
UTC ·
(4 days ago)
Exploit scan from 34.87.57.65. GET /sitemap.xml HTTP/2.0.
Web App Attack
🇳🇱
Site.eu
2026-11-06 16:59:20
UTC ·
(4 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇬🇧
oja
2026-11-06 16:56:51
UTC ·
(4 days ago)
Aggressive web scanner
Web App Attack
Anonymous
2026-11-06 16:54:44
UTC ·
(4 days ago)
Aggressive web scan
Web App Attack
🇧🇷
radardatelecom
2026-11-06 16:54:02
UTC ·
(4 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-06 16:16:46
UTC ·
(4 days ago)
[ti-24al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.87.57.65 - - [06/Nov/2026:17:16:28 +0100] "GET /site/.env HTTP/2.0" 403 542 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatibl ...
show more
[ti-24al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.87.57.65 - - [06/Nov/2026:17:16:28 +0100] "GET /site/.env HTTP/2.0" 403 542 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.87.57.65 - - [06/Nov/2026:17:16:28 +0100] "GET /portal/.env HTTP/2.0" 403 542 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Bad Web Bot
Web App Attack
🇨🇭
Masterpiece
2026-11-06 16:07:02
UTC ·
(4 days ago)
Abusive web bot (http-crawl-non_statics), 50 requests.
Bad Web Bot
🇩🇪
Hazzard
2026-11-06 16:03:45
UTC ·
(4 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)
Bad Web Bot
🇩🇪
rh24
2026-11-06 16:00:46
UTC ·
(4 days ago)
(badbots) Bad bot user-agent [redacted] from 34.87.57.65 (SG/Singapore/65.57.87.34.bc.googleusercontent.com)
Hacking
Anonymous
2026-11-06 15:50:18
UTC ·
(4 days ago)
| [Dangerous/Singapore] Aggressive IP 34.87.57.65 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇩🇪
FD-IX
2026-11-06 15:31:26
UTC ·
(4 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 15:21:34
UTC ·
(4 days ago)
34.87.57.65 - - [06/Nov/2026:09:21:31 -0600] "GET /.env.supabase HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.87.57.65
34.87.57.65 - - [06/Nov/2026:09:21:32 -0600] "GET /.env%3Ffoo=bar HTTP/1.1" 403 199 " ...
show more
34.87.57.65 - - [06/Nov/2026:09:21:31 -0600] "GET /.env.supabase HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.87.57.65
34.87.57.65 - - [06/Nov/2026:09:21:32 -0600] "GET /.env%3Ffoo=bar HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 34.87.57.65
34.87.57.65 - - [06/Nov/2026:09:21:32 -0600] "GET /.env%3F.css HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.87.57.65
34.87.57.65 - - [06/Nov/2026:09:21:33 -0600] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 34.87.57.65
34.87.57.65 - - [06/Nov/2026:09:21:33 -0600] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.87.57.65
34.87.57.65 - - [06/Nov/2026:09:21:33 -0600] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://
...
show less
Brute-Force
Bad Web Bot
Web App Attack