🇬🇧
openstrike.co.uk
2026-11-04 06:17:40
UTC ·
(5 days ago)
210 attacks on env grabbing URLs, env grabbing URLs (type 2), PHP URLs, config grabbing URLs (type 2), VC URLs, directory traversals, password/key grabbing URLs:
GET /files../.env HTTP/1.1
GET /proc/self/cmdline HTTP/1.1
GET /document.php?modulepart= ...
show more
210 attacks on env grabbing URLs, env grabbing URLs (type 2), PHP URLs, config grabbing URLs (type 2), VC URLs, directory traversals, password/key grabbing URLs:
GET /files../.env HTTP/1.1
GET /proc/self/cmdline HTTP/1.1
GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1
GET /config/settings.local.yml HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /Dockerrun.aws.json HTTP/1.1
show less
Hacking
Web App Attack
🇦🇺
nzhost.co.nz
2026-11-03 17:22:31
UTC ·
(5 days ago)
$f2bV_matches
Hacking
Brute-Force
🇧🇷
radardatelecom
2026-11-03 16:53:04
UTC ·
(5 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-11-03 16:51:36
UTC ·
(5 days ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 35.185.137.142 (TW/Taiwan/142.137.185.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.185.137.142 - - [03/Nov/2026:17:51:30 +0100] "GET /.doc ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 35.185.137.142 (TW/Taiwan/142.137.185.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.185.137.142 - - [03/Nov/2026:17:51:30 +0100] "GET /.docker/config.json HTTP/2.0" 500 711 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "172.21.212.235,35.185.137.142" host=digiampaolosrl.it
show less
Port Scan
🇳🇱
e.fierstra
2026-11-03 15:26:45
UTC ·
(5 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇦🇹
penguin-solutions.at
2026-11-03 14:46:56
UTC ·
(5 days ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇩🇪
webanyone
2026-11-03 14:37:42
UTC ·
(5 days ago)
Wordlist path sweep | method: GET | path: /assets/manifest.json, /static/manifest.json, /asset-manifest.json (+3 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 ...
show more
Wordlist path sweep | method: GET | path: /assets/manifest.json, /static/manifest.json, /asset-manifest.json (+3 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
show less
Port Scan
Web App Attack
🇩🇪
Manuel Braeuer
2026-11-03 14:06:07
UTC ·
(5 days ago)
35.185.137.142 - - [03/Nov/2026:15:06:03 +0100] "GET //.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.185.137.142 - - [03/Nov/2026:15:06:05 +0100] "GET /public/.env HTTP/2.0" 403 10 ...
show more
35.185.137.142 - - [03/Nov/2026:15:06:03 +0100] "GET //.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.185.137.142 - - [03/Nov/2026:15:06:05 +0100] "GET /public/.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.185.137.142 - - [03/Nov/2026:15:06:05 +0100] "GET /serverless.yml HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
35.185.137.142 - - [03/Nov/2026:15:06:06 +0100] "GET /.htpasswd HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
35.185.137.142 - - [03/Nov/2026:15:06:06 +0100] "GET /wp-config.php.old HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
...
show less
Web App Attack
2026-11-03 13:33:23
UTC ·
(5 days ago)
[ns1.skdns.gr] httpd-suspicious-path: iis-w3c
Hacking
Web App Attack
🇩🇪
LRob
2026-11-03 13:19:15
UTC ·
(5 days ago)
Vulnerability scanning | method: GET | path: /sitemap.xml, /sitemap_index.xml, /assets/manifest.json (+8 more) | ua: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (Linu ...
show more
Vulnerability scanning | method: GET | path: /sitemap.xml, /sitemap_index.xml, /assets/manifest.json (+8 more) | ua: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 (+3 more) | src_port: 56654
show less
Port Scan
Web App Attack
🇬🇧
consul.to
2026-11-03 12:40:29
UTC ·
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
2026-11-03 12:04:10
UTC ·
(5 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-11-03 11:40:04
UTC ·
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-11-03 10:55:35
UTC ·
(5 days ago)
Aggressive web scan
Web App Attack
🇩🇪
Hazzard
2026-11-03 10:47:46
UTC ·
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
