🇦🇺
Proxay Fox
2026-11-10 21:11:23
UTC ·
(35 minutes ago)
34.47.14.155 - - [11/Nov/2026:07:11:10 +1000] "GET /.git/config HTTP/2.0" 404 15682 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.47.14.155" 43 16111 TLSv1.3/TLS_AES_256_GCM_SHA384 . f ...
show more
34.47.14.155 - - [11/Nov/2026:07:11:10 +1000] "GET /.git/config HTTP/2.0" 404 15682 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.47.14.155" 43 16111 TLSv1.3/TLS_AES_256_GCM_SHA384 . f57c59160facdd47195ab9a47d487f482f63a5460231730e02572805b99c9893
34.47.14.155 - - [11/Nov/2026:07:11:13 +1000] "GET /.env HTTP/2.0" 404 15671 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.47.14.155" 37 16100 TLSv1.3/TLS_AES_256_GCM_SHA384 . f57c59160facdd47195ab9a47d487f482f63a5460231730e02572805b99c9893
34.47.14.155 - - [11/Nov/2026:07:11:14 +1000] "GET /.env.local HTTP/2.0" 404 15677 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.47.14.155" 41 16106 TLSv1.3/TLS_AES_256_GCM_SHA384 . f57c59160facdd47195ab9a47d487f482f63a5460231730e02572805b99c9893
34.47.14.155 - - [11/Nov/2026:07:11:15 +1000] "GET /.env.produc
...
show less
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-11-10 21:01:01
UTC ·
(45 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-10 20:16:29
UTC ·
(1 hour ago)
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.47.14.155 - - [10/Nov/2026:21:16:26 +0100] "GET /.git/config HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ...
show more
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.47.14.155 - - [10/Nov/2026:21:16:26 +0100] "GET /.git/config HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-11-10 19:52:22
UTC ·
(1 hour ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-10 19:45:07
UTC ·
(2 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-11-10 18:21:49
UTC ·
(3 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
baphomet
2026-11-09 12:58:33
UTC ·
(1 day ago)
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this hos ...
show more
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-11-09T12:58:33Z sensor=fail2ban role=web-canary
src=34.47.14.155
show less
Web App Attack
🇺🇸
magnetosphere-tarpit
2026-11-09 07:03:21
UTC ·
(1 day ago)
Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not exist on this host. Tarpitted, then banned: 10 requests within 24h0m0s
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
DEV-DNS
2026-11-09 05:23:17
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇳🇱
debestelapp
2026-11-09 05:00:10
UTC ·
(1 day ago)
Web App Attack
🇳🇱
e.fierstra
2026-11-08 19:16:58
UTC ·
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-11-08 19:07:03
UTC ·
(2 days ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-11-08 19:06:06.
Web App Attack
🇩🇪
XICTRON
2026-11-08 18:35:04
UTC ·
(2 days ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
2026-11-08 18:34:11
UTC ·
(2 days ago)
34.47.14.155 - - [08/Nov/2026:20:34:08 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.47.14.155 - - [08/Nov/2026:20:34:08 +0200] "POST / ...
show more
34.47.14.155 - - [08/Nov/2026:20:34:08 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.47.14.155 - - [08/Nov/2026:20:34:08 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.47.14.155 - - [08/Nov/2026:20:34:08 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.47.14.155 - - [08/Nov/2026:20:34:09 +0200] "GET /.git/config HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.47.14.155 - - [08/Nov/2026:20:34:09 +0200] "GET /.env HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.47.1
...
show less
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-11-08 17:55:19
UTC ·
(2 days ago)
34.47.14.155 - - [08/Nov/2026:18:55:18 +0100] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Brute-Force
Bad Web Bot
Web App Attack
