Anonymous
2026-11-12 05:08:39
UTC ·
(3 days ago)
34.50.86.114 - - [12/Nov/2026:06:08:38 +0100] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Web App Attack
Anonymous
2026-11-12 03:00:25
UTC ·
(3 days ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇺🇸
wteiken
2026-11-12 02:17:10
UTC ·
(3 days ago)
www.teiken.net:443 34.50.86.114:43436 - - [11/Nov/2026:21:17:06 -0500] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 ...
show more
www.teiken.net:443 34.50.86.114:43436 - - [11/Nov/2026:21:17:06 -0500] "GET /.git/config HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.50.86.114:43436 - - [11/Nov/2026:21:17:07 -0500] "GET /.env HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.50.86.114:43436 - - [11/Nov/2026:21:17:07 -0500] "GET /.env.local HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.50.86.114:43436 - - [11/Nov/2026:21:17:08 -0500] "GET /.env.production HTTP/1.1" 404 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.50.86.114:43436 - - [11/Nov/2026:21:17:08 -0500] "GET /.en
...
show less
Web App Attack
Anonymous
2026-11-11 22:59:46
UTC ·
(3 days ago)
34.50.86.114 - - [11/Nov/2026:22:59:45 +0000] "GET /.git/config HTTP/1.1" 404 6927 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-11 22:59:05
UTC ·
(3 days ago)
Auto-ban: >3000 req/min op 2026-11-11
Web App Attack
SSH
Hacking
🇩🇪
FeG Deutschland
2026-11-11 03:42:16
UTC ·
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
big-cloud.nl
2026-11-11 03:11:27
UTC ·
(4 days ago)
Try to access /.git/config
Web App Attack
🇳🇱
Alt255
2026-11-11 02:34:47
UTC ·
(4 days ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.50.86.114 - - [11/Nov/2026:03:34:43 +0100] "GET /.git/config HTTP/1.1" 301 597 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.50.86.114 - - [11/Nov/2026:03:34:43 +0100] "GET /.git/config HTTP/1.1" 301 597 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇦🇹
René Hickersberger
2026-11-11 02:27:29
UTC ·
(4 days ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
francelink.fr
2026-11-11 00:13:24
UTC ·
(4 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-10T07:22:26.000Z.
Web App Attack
🇫🇷
Murazaki
2026-11-11 00:06:47
UTC ·
(4 days ago)
news.chat.balamb.fr 34.50.86.114 - - [11/Nov/2026:01:06:37 +0100] "GET /mailer/.env HTTP/1.1" 502 13525 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.12:80 : [fc00:db8: ...
show more
news.chat.balamb.fr 34.50.86.114 - - [11/Nov/2026:01:06:37 +0100] "GET /mailer/.env HTTP/1.1" 502 13525 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.12:80 : [fc00:db8:2::17]:9000"
news.chat.balamb.fr 34.50.86.114 - - [11/Nov/2026:01:06:37 +0100] "GET /mail/.env HTTP/1.1" 502 13523 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.12:80 : 172.22.0.24:9000"
news.chat.balamb.fr 34.50.86.114 - - [11/Nov/2026:01:06:38 +0100] "GET /mailing/.env HTTP/1.1" 502 13526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.12:80 : [fc00:db8:2::17]:9000"
news.chat.balamb.fr 34.50.86.114 - - [11/Nov/2026:01:06:40 +0100] "GET /mailgun/.env HTTP/1.1" 502 13512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/53
...
show less
Bad Web Bot
🇳🇱
homeshowdomain.nl
2026-11-10 22:59:46
UTC ·
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-09.
Web App Attack
SSH
Hacking
🇺🇸
epixian
2026-11-10 20:55:33
UTC ·
(4 days ago)
Probe for PHP files that do not exist: 36 requests in 10 min, 19 with attack payloads (404 x22, 444 x8, 200 x5, 403 x1). Detected: sensitive file probe. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome ...
show more
Probe for PHP files that do not exist: 36 requests in 10 min, 19 with attack payloads (404 x22, 444 x8, 200 x5, 403 x1). Detected: sensitive file probe. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Page requests without assets, 36 page requests + 0 asset requests during scan interval.
show less
Hacking
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-10 18:49:29
UTC ·
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-11-10 07:23:23
UTC ·
(5 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-10T07:22:19.000Z.
Web App Attack