🇬🇧
openstrike.co.uk
2026-10-07 05:14:36
(2 weeks ago)
2306 attacks on config grabbing URLs (type 2), PHP URLs, shell probes, directory traversals, passwor ...
show more
2306 attacks on config grabbing URLs (type 2), PHP URLs, shell probes, directory traversals, password/key grabbing URLs, env grabbing URLs, env grabbing URLs (type 2), VC URLs:
GET /secrets.yml HTTP/1.1
GET /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/1.1
GET /.env.production?import&raw HTTP/1.1
GET /__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc HTTP/1.1
GET /.git/HEAD HTTP/1.1
show less
Hacking
Web App Attack
🇬🇧
rakkor
2026-10-07 04:53:59
(2 weeks ago)
2026-10-07T05:53:59+01:00 NAS [Wed Oct 07 05:53:59.301854 2026] [proxy_fcgi:error] [pid 1306:tid 132 ...
show more
2026-10-07T05:53:59+01:00 NAS [Wed Oct 07 05:53:59.301854 2026] [proxy_fcgi:error] [pid 1306:tid 1326] [client 35.227.113.71:40810] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Hacking
🇬🇧
thetomtaylor.co.uk
2026-10-06 20:02:02
(2 weeks ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01,wa02]
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-10-06 19:10:56
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.227.113.71 (71.113.227.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.227.113.71 (71.113.227.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 15:10:48.590133 2026] [security2:error] [pid 5445:tid 5445] [client 35.227.113.71:46950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skipport.co.uk"] [uri "/.htpasswd"] [unique_id "asVHuE1wIGkQQOMR54xoDAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
rakkor
2026-10-06 18:29:25
(2 weeks ago)
2026-10-06T19:29:24+01:00 NAS [Tue Oct 06 19:29:24.884232 2026] [proxy_fcgi:error] [pid 1306:tid 131 ...
show more
2026-10-06T19:29:24+01:00 NAS [Tue Oct 06 19:29:24.884232 2026] [proxy_fcgi:error] [pid 1306:tid 1318] [client 35.227.113.71:38990] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Hacking
🇧🇪
voormedia
2026-10-06 17:42:47
(2 weeks ago)
Accessed trap at '/.env'
Web App Attack
🇳🇱
Savvii
2026-10-06 17:29:41
(2 weeks ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-10-06 17:10:41
(2 weeks ago)
(mod_security) mod_security (id:930130) triggered by 35.227.113.71 (US/United States/71.113.227.35.b ...
show more
(mod_security) mod_security (id:930130) triggered by 35.227.113.71 (US/United States/71.113.227.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
SSH
Web App Attack
🇬🇧
Mendip_Defender
2026-10-06 16:23:10
(2 weeks ago)
[06/Oct/2026:17:23:09.920051 +0100] asUgbanMHhQTtc5-HhP5bQAAAE0 35.227.113.71 53556 188.246.206.60 7 ...
show more
[06/Oct/2026:17:23:09.920051 +0100] asUgbanMHhQTtc5-HhP5bQAAAE0 35.227.113.71 53556 188.246.206.60 7081
[06/Oct/2026:17:23:10.082007 +0100] asUgbqnMHhQTtc5-HhP5bwAAAEs 35.227.113.71 53570 188.246.206.60 7081
...
show less
Brute-Force
🇬🇧
KTSTechnology
2026-10-06 16:00:22
(2 weeks ago)
Web vulnerability scanning detected by our ISP firewall
Web App Attack
🇬🇧
Apache
2026-10-06 15:58:09
(2 weeks ago)
(mod_security) mod_security (id:218420) triggered by 35.227.113.71 (US/United States/71.113.227.35.b ...
show more
(mod_security) mod_security (id:218420) triggered by 35.227.113.71 (US/United States/71.113.227.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇬🇧
gws-hostmaster
2026-10-06 15:54:00
(2 weeks ago)
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subreq ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shell Code Found;Restricted File Access Attempt;The Application Returned a 500-Level Status Code;URL file extension is restricted by policy;
show less
Web App Attack
🇳🇱
Savvii
2026-10-06 15:42:51
(2 weeks ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
threewalls.co.uk
2026-10-06 15:41:21
(2 weeks ago)
Triggered bot honeypot on gclproducts.co.uk
Fraud Orders
FTP Brute-Force
Brute-Force
Exploited Host
🇩🇪
33three
2026-10-06 14:14:47
(2 weeks ago)
Fail2Ban jail WebAttack triggered
Brute-Force