๐ฉ๐ช
Blexyel
2026-10-25 19:57:14
(2 days ago)
34.154.108.40 - - [25/Oct/2026:20:57:13 +0100] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ...
show more
34.154.108.40 - - [25/Oct/2026:20:57:13 +0100] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
Rocky Mountain Bioengineering Symposium
2026-10-25 19:46:13
(2 days ago)
[Sun Oct 25 13:46:09.057996 2026] [authz_core:error] [pid 2788:tid 140256233772608] [client 34.154.1 ...
show more
[Sun Oct 25 13:46:09.057996 2026] [authz_core:error] [pid 2788:tid 140256233772608] [client 34.154.108.40:47968] AH01630: client denied by server configuration: /var/www/horde/.env.bak
[Sun Oct 25 13:46:12.916145 2026] [authz_core:error] [pid 2788:tid 140256577807936] [client 34.154.108.40:47968] AH01630: client denied by server configuration: /var/www/horde/.env.dist
[Sun Oct 25 13:46:13.035461 2026] [authz_core:error] [pid 2788:tid 140256057525824] [client 34.154.108.40:47968] AH01630: client denied by server configuration: /var/www/horde/.env.swp
...
show less
Bad Web Bot
๐ธ๐ช
nekopavel
2026-10-25 19:45:36
(2 days ago)
34.154.108.40 - - [25/Oct/2026:20:45:34 +0100]"GET /.git/config HTTP/1.1" 404 178"-" autodiscover.pa ...
show more
34.154.108.40 - - [25/Oct/2026:20:45:34 +0100]"GET /.git/config HTTP/1.1" 404 178"-" autodiscover.pavel.gg "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.000""Milan" "IT"
34.154.108.40 - - [25/Oct/2026:20:45:34 +0100]"GET /.env HTTP/1.1" 404 178"-" autodiscover.pavel.gg "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.000""Milan" "IT"
34.154.108.40 - - [25/Oct/2026:20:45:34 +0100]"GET /.env.local HTTP/1.1" 404 178"-" autodiscover.pavel.gg "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.000" "0.001""Milan" "IT"
...
show less
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
DyhnenTv
2026-10-25 19:20:25
(2 days ago)
CrowdSec webserver: crowdsecurity/http-sensitive-files
Web App Attack
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-25 13:42:38
(2 days ago)
[ti-14al] Web exploit scanning: 12 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-14al] Web exploit scanning: 12 suspicious requests detected by fail2ban jail <name>. Example: 34.154.108.40 - - [19/Oct/2026:03:09:11 +0200] "GET /.git/config HTTP/1.1" 301 554 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.108.40 - - [19/Oct/2026:03:09:11 +0200] "GET /.env HTTP/1.1" 301 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.108.40 - - [19/Oct/2026:03:09:11 +0200] "GET /.env.local HTTP/1.1" 301 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.108.40 - - [19/Oct/2026:03:09:11 +0200] "GET /.env.production HTTP/1.1" 301 562 "-" "Mozilla
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 13:32:55
(2 days ago)
34.154.108.40 - - [25/Oct/2026:14:32:51 +0100] "GET /info.php HTTP/1.1" 404 5655
34.154.108.40 - - [ ...
show more
34.154.108.40 - - [25/Oct/2026:14:32:51 +0100] "GET /info.php HTTP/1.1" 404 5655
34.154.108.40 - - [25/Oct/2026:14:32:51 +0100] "GET /php.php HTTP/1.1" 404 618
34.154.108.40 - - [25/Oct/2026:14:32:51 +0100] "GET /i.php HTTP/1.1" 404 618
34.154.108.40 - - [25/Oct/2026:14:32:51 +0100] "GET /pi.php HTTP/1.1" 404 618
34.154.108.40 - - [25/Oct/2026:14:32:52 +0100] "GET /pinfo.php HTTP/1.1" 404 618
34.154.108.40 - - [25/Oct/2026:14:32:52 +0100] "GET /test.php HTTP/1.1" 404 618
34.154.108.40 - - [25/Oct/2026:14:32:52 +0100] "GET /p.php HTTP/1.1" 404 5655
34.154.108.40 - - [25/Oct/2026:14:32:52 +0100] "GET /debug.php HTTP/1.1" 404 618
34.154.108.40 - - [25/Oct/2026:14:32:53 +0100] "GET /php-info.php HTTP/1.1" 404 5655
34.154.108.40 - - [25/Oct/2026:14:32:53 +0100] "GET /phpversion.php HTTP/1.1" 404 618
...
show less
Web Spam
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-25 09:07:45
(3 days ago)
Try to access /.git/config
Web App Attack
๐ฎ๐ฉ
surabi_enhai
2026-10-25 07:33:12
(3 days ago)
Web vulnerability scanning: 3 requests for sensitive files/exploit paths (.env, .git, wp-login, xmlr ...
show more
Web vulnerability scanning: 3 requests for sensitive files/exploit paths (.env, .git, wp-login, xmlrpc, phpunit, path traversal) within 1h. Source blocked by fail2ban.
show less
Web App Attack
Bad Web Bot
๐ฉ๐ช
BlueWire Hosting
2026-10-25 05:11:49
(3 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐ฉ๐ช
tvipper.com
2026-10-25 00:58:54
(3 days ago)
probing for exposed files and admin pages: 55 attempts within 10 minutes, seen by Cloudflare WAF (re ...
show more
probing for exposed files and admin pages: 55 attempts within 10 minutes, seen by Cloudflare WAF (reported by RemotePower)
show less
Web App Attack
๐ซ๐ท
dragonv
2026-10-24 23:11:23
(3 days ago)
fail2ban nginx-botsearch: brute-force
Bad Web Bot
Web App Attack
Anonymous
2026-10-24 22:30:20
(3 days ago)
Fail2ban jail=webexploits banned IP=34.154.108.40 after 1 hits. Reason=web probing.
Brute-Force
Web App Attack
๐ป๐ฎ
Axel
2026-10-24 22:13:33
(3 days ago)
WAF/ModSecurity blocked 209 malicious request(s) (HTTP 403) from this IP. Activity: request_uri: .EN ...
show more
WAF/ModSecurity blocked 209 malicious request(s) (HTTP 403) from this IP. Activity: request_uri: .ENV Files x204; request_uri: .PHP backup files x2; blocked sensitive path x2; request_uri: .git config x1. Latest: 2026-10-24T22:13:33Z.
show less
Hacking
Web App Attack
๐จ๐ญ
beatsnet.com
2026-10-24 21:51:38
(3 days ago)
[Sat Oct 24 23:51:37.193217 2026] [authz_core:error] [pid 7928:tid 56174364424208] [client 34.154.10 ...
show more
[Sat Oct 24 23:51:37.193217 2026] [authz_core:error] [pid 7928:tid 56174364424208] [client 34.154.108.40:55462] AH01630: client denied by server configuration: /usr/local/www/apache24/data/.git
[Sat Oct 24 23:51:37.427142 2026] [authz_core:error] [pid 7928:tid 56174364424208] [client 34.154.108.40:55462] AH01630: client denied by server configuration: /usr/local/www/apache24/data/.env
[Sat Oct 24 23:51:37.559566 2026] [authz_core:error] [pid 7928:tid 56174364424208] [client 34.154.108.40:55462] AH01630: client denied by server configuration: /usr/local/www/apache24/data/.env.local
[Sat Oct 24 23:51:37.651278 2026] [authz_core:error] [pid 7928:tid 56174364424208] [client 34.154.108.40:55462] AH01630: client denied by server configuration: /usr/local/www/apache24/data/.env.production
...
show less
Brute-Force
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-24 21:00:03
(3 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack