🇮🇩
IndoAbuse
2026-11-11 10:39:50
UTC ·
(4 hours ago)
Malicious web scanning for sensitive/hidden files (.env, .git, config) blocked by HTTP 403 Forbidden.
Web App Attack
Bad Web Bot
🇩🇪
marten_o
2026-11-11 08:05:36
UTC ·
(7 hours ago)
34.19.190.15 - - [11/Nov/2026:09:05:36 +0100] "GET /tmp/phpinfo.php HTTP/1.1" 503 1415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 1885 7085
...
Web App Attack
Anonymous
2026-11-11 06:20:29
UTC ·
(9 hours ago)
Aggressive web scan
Web App Attack
🇫🇷
Zundapper
2026-11-11 05:24:58
UTC ·
(10 hours ago)
34.19.190.15 - - [11/Nov/2026:06:24:52 +0100] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [11/Nov/2026:06:24:54 +0100] "GET /in ...
show more
34.19.190.15 - - [11/Nov/2026:06:24:52 +0100] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [11/Nov/2026:06:24:54 +0100] "GET /info HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [11/Nov/2026:06:24:57 +0100] "GET /_profiler/phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [11/Nov/2026:06:24:57 +0100] "GET /_environment HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [11/Nov/2026:06:24:57 +0100] "GET /webroot/index.php/_environment HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0
...
show less
Web App Attack
Port Scan
🇳🇱
e.fierstra
2026-11-11 04:59:01
UTC ·
(10 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-11 01:45:05
UTC ·
(13 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-10 22:13:12
UTC ·
(17 hours ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.19.190.15 - - [10/Nov/2026:23:12:57 +0100] "GET /.git/config HTTP/1.1" 403 2174 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.19.190.15 - - [10/Nov/2026:23:12:57 +0100] "GET /.git/config HTTP/1.1" 403 2174 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-11-10 02:48:12
UTC ·
(1 day ago)
2026/11/10 02:48:03 [error] 3084#3084: *2455811 access forbidden by rule, client: 34.19.190.15, server: centroestudostibetanos.org, request: "GET /.env HTTP/1.1", host: "nalanda.centroestudostibetanos.org"
34.19.190.15 - - [10/Nov/2026:02:48:03 +0000 ...
show more
2026/11/10 02:48:03 [error] 3084#3084: *2455811 access forbidden by rule, client: 34.19.190.15, server: centroestudostibetanos.org, request: "GET /.env HTTP/1.1", host: "nalanda.centroestudostibetanos.org"
34.19.190.15 - - [10/Nov/2026:02:48:03 +0000] "GET /.env HTTP/1.1" 403 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/11/10 02:48:10 [error] 3084#3084: *2455811 access forbidden by rule, client: 34.19.190.15, server: centroestudostibetanos.org, request: "GET /app/.env HTTP/1.1", host: "nalanda.centroestudostibetanos.org"
show less
Brute-Force
Web App Attack
🇧🇷
ICS Labs
2026-11-09 20:09:26
UTC ·
(1 day ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-09 UTC.
Brute-Force
🇺🇸
dot.mg
2026-11-09 16:56:08
UTC ·
(1 day ago)
Scan of vulnerable files
Web App Attack
🇩🇪
paissangroup
2026-11-09 16:48:11
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
🇩🇪
ghostwarriors
2026-11-09 15:50:06
UTC ·
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
Anonymous
2026-11-09 14:10:27
UTC ·
(2 days ago)
34.19.190.15 - - [09/Nov/2026:15:10:01 +0100] "GET /.git/config HTTP/1.1" 403 614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [09/Nov/2026:15:10:02 +0100] "GET ...
show more
34.19.190.15 - - [09/Nov/2026:15:10:01 +0100] "GET /.git/config HTTP/1.1" 403 614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [09/Nov/2026:15:10:02 +0100] "GET /.env HTTP/1.1" 403 614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [09/Nov/2026:15:10:02 +0100] "GET /.env.local HTTP/1.1" 403 614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [09/Nov/2026:15:10:02 +0100] "GET /.env.production HTTP/1.1" 403 614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.190.15 - - [09/Nov/2026:15:10:02 +0100] "GET /.env.staging HTTP/1.1" 403 614 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.
...
show less
DDoS Attack
Anonymous
2026-11-09 14:09:15
UTC ·
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
middelkoopcc
2026-11-09 14:08:00
UTC ·
(2 days ago)
2026-11-09 15:06:01 GET /.git/config [301] && 2026-11-09 15:06:02 GET /.env [301] && 2026-11-09 15:06:04 GET /.env.bak [301] && 153 more within 20 minutes
Web App Attack