π¬π§
openstrike.co.uk
2026-08-22 05:15:21
(1 week ago)
221 attacks on VC URLs, PHP URLs, password grabbing URLs, env grabbing URLs, config grabbing URLs (t ...
show more
221 attacks on VC URLs, PHP URLs, password grabbing URLs, env grabbing URLs, config grabbing URLs (type 2):
GET /.git/HEAD HTTP/1.1
GET /app_dev.php HTTP/1.1
GET /.aws/credentials HTTP/1.1
GET /.env.js HTTP/1.1
GET /app-config.json HTTP/1.1
show less
Hacking
Web App Attack
Anonymous
2026-08-21 15:35:16
(1 week ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
π¦πΉ
penguin-solutions.at
2026-08-21 14:40:07
(1 week ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
π©πͺ
big-cloud.nl
2026-08-21 12:18:09
(1 week ago)
Try to access /.git/config
Web App Attack
π©πͺ
netclix.gr
2026-08-21 10:27:53
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.31.238.74 (US/United States/74.238.3 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.31.238.74 (US/United States/74.238.31.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
π©πͺ
LRob
2026-08-21 09:42:07
(1 week ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show more
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /asset-manifest.json (+1 more)
show less
Hacking
Web App Attack
πͺπΈ
alferez
2026-08-21 06:47:56
(1 week ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
π¬π§
Apache
2026-08-21 06:44:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.31.238.74 (US/United States/74.238.31.34.bc. ...
show more
(mod_security) mod_security (id:210492) triggered by 34.31.238.74 (US/United States/74.238.31.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
π«π·
Delta-shop
2026-08-21 06:11:36
(1 week ago)
PrestaShop Security Module: Calls WordPress paths probing known vulnerabilities
Web App Attack
πͺπΈ
el-brujo
2026-08-21 05:44:40
(1 week ago)
[Fri Aug 21 07:44:40.147427 2026] [proxy_fcgi:error] [pid 1390189:tid 1390215] [remote 34.31.238.74: ...
show more
[Fri Aug 21 07:44:40.147427 2026] [proxy_fcgi:error] [pid 1390189:tid 1390215] [remote 34.31.238.74:0] AH01071: Got error 'Primary script unknown\n'
[Fri Aug 21 07:44:40.148066 2026] [proxy_fcgi:error] [pid 1390189:tid 1390275] [remote 34.31.238.74:0] AH01071: Got error 'Primary script unknown\n'
...
show less
Hacking
Web App Attack
πͺπΈ
librebit
2026-08-21 05:21:52
(1 week ago)
Brute force
Brute-Force
π¬π§
openstrike.co.uk
2026-08-21 05:15:16
(1 week ago)
563 attacks on password grabbing URLs, VC URLs, PHP URLs, env grabbing URLs, config grabbing URLs (t ...
show more
563 attacks on password grabbing URLs, VC URLs, PHP URLs, env grabbing URLs, config grabbing URLs (type 2):
GET /.aws/credentials HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /configuration.php.bak HTTP/1.1
GET /@fs/root/.env?raw?? HTTP/1.1
GET /app-config.json HTTP/1.1
show less
Hacking
Web App Attack
Anonymous
2026-08-21 04:15:27
(1 week ago)
34.31.238.74 - - [21/Aug/2026:06:15:27 +0200] "GET /dist/ HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Window ...
show more
34.31.238.74 - - [21/Aug/2026:06:15:27 +0200] "GET /dist/ HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
show less
Web App Attack
π«π·
largo-it.net
2026-08-21 03:37:23
(1 week ago)
Aug 21 05:37:22 vps-9f3cdc33 haproxy[2975930]: 34.31.238.74:36296 [21/Aug/2026:05:37:22.082] www_fro ...
show more
Aug 21 05:37:22 vps-9f3cdc33 haproxy[2975930]: 34.31.238.74:36296 [21/Aug/2026:05:37:22.082] www_frontend~ blog_largo_cluster/blog_largo 0/0/1/125/127 404 45191 - - ---- 53/8/8/8/0 0/0 "GET https://blog.largo.fr/z9x8c7v6b5-debug-trigger-blog.largo.fr HTTP/2.0"
Aug 21 05:37:22 vps-9f3cdc33 haproxy[2975930]: 34.31.238.74:36296 [21/Aug/2026:05:37:22.168] www_frontend~ blog_largo_cluster/blog_largo 0/0/1/178/405 404 45191 - - ---- 53/8/8/8/0 0/0 "GET https://blog.largo.fr/dist/manifest.json HTTP/2.0"
Aug 21 05:37:22 vps-9f3cdc33 haproxy[2975930]: 34.31.238.74:36296 [21/Aug/2026:05:37:22.169] www_frontend~ blog_largo_cluster/blog_largo 0/0/0/200/404 404 45191 - - ---- 53/8/7/7/0 0/0 "GET https://blog.largo.fr/rclone.conf HTTP/2.0"
Aug 21 05:37:22 vps-9f3cdc33 haproxy[2975930]: 34.31.238.74:36296 [21/Aug/2026:05:37:22.169] www_frontend~ blog_largo_cluster/blog_largo 0/0/0/302/422 404 45191 - - ---- 53/8/7/7/0 0/0 "GET https://blog.largo.fr/.vite/manifest.json HTTP/2.0"
Aug 21 05:37:22 vps-9f
...
show less
Hacking
Bad Web Bot
Web App Attack
π»πͺ
LUISE
2026-08-21 02:00:22
(1 week ago)
Vulnerability scanning for Web files on server 5-9VE.
Hacking
Bad Web Bot