Anonymous
2026-11-07 14:45:08
UTC ·
(47 minutes ago)
Observed scanned 72 known-sensitive endpoint(s), e.g.: /.//.env, /.env%3F.css, /.env.bak, /.env.prod.local, /.env.production, /.env.production.bak
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-06 20:22:04
UTC ·
(19 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇳🇱
Alt255
2026-11-06 19:07:52
UTC ·
(20 hours ago)
[cb17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.95.197.132 - - [06/Nov/2026:20:07:32 +0100] "GET /css../.env HTTP/2.0" 403 250 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-06 19:01:44
UTC ·
(20 hours ago)
Accessed trap at '/.env'
Web App Attack
Anonymous
2026-11-06 18:28:14
UTC ·
(21 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.95.197.132 (BR/Brazil/132.197.95.34.bc.googleusercontent.com): (CF_ENABLE)
SQL Injection
🇩🇪
gadix
2026-11-06 17:47:27
UTC ·
(21 hours ago)
[06/Nov/2026:18:47:24.563929 +0100] au4SrPwNHEKfH1r_lcI6NwAAAAs 34.95.197.132 37976 127.0.0.1 7081
[06/Nov/2026:18:47:24.564260 +0100] au4SrAiuqVWdeNCD8VRzWQAAAFI 34.95.197.132 37984 127.0.0.1 7081
[06/Nov/2026:18:47:24.566879 +0100] au4SrAiuqVWdeNCD ...
show more
[06/Nov/2026:18:47:24.563929 +0100] au4SrPwNHEKfH1r_lcI6NwAAAAs 34.95.197.132 37976 127.0.0.1 7081
[06/Nov/2026:18:47:24.564260 +0100] au4SrAiuqVWdeNCD8VRzWQAAAFI 34.95.197.132 37984 127.0.0.1 7081
[06/Nov/2026:18:47:24.566879 +0100] au4SrAiuqVWdeNCD8VRzWgAAAEA 34.95.197.132 38008 127.0.0.1 7081
...
show less
Web App Attack
🇳🇱
Site.eu
2026-11-06 17:43:46
UTC ·
(21 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-11-06 17:07:09
UTC ·
(22 hours ago)
34.95.197.132 - - [06/Nov/2026:19:07:08 +0200] "GET /.env.prod.bak HTTP/2.0" 403 34 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.95.197.132 - - [06/Nov/2026:19:07:08 +0200] "GET /.env.production.bak HTTP/2.0" 403 34 "-" "M ...
show more
34.95.197.132 - - [06/Nov/2026:19:07:08 +0200] "GET /.env.prod.bak HTTP/2.0" 403 34 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.95.197.132 - - [06/Nov/2026:19:07:08 +0200] "GET /.env.production.bak HTTP/2.0" 403 34 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Web App Attack
🇩🇰
floyd_dk
2026-11-06 16:54:38
UTC ·
(22 hours ago)
34.95.197.132 - - [06/Nov/2026:16:54:37 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.95.197.132 - - [06/Nov/2026:16:54:37 +0000] "GET /s ...
show more
34.95.197.132 - - [06/Nov/2026:16:54:37 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.95.197.132 - - [06/Nov/2026:16:54:37 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.95.197.132 - - [06/Nov/2026:16:54:38 +0000] "GET /somz5v9x3boj7cclpp37 HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.95.197.132 - - [06/Nov/2026:16:54:38 +0000] "GET /z9x8c7v6b5-debug-trigger-old.triplestepstudios.com HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.95.197.132 - - [06/Nov/2026:16:54:38 +0000] "GET /assets/manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.95.197.132 - - [06/Nov/2026:16:54:38 +0000] "GET /static/manifest.json HTTP/2.0" 404 555 "-"
...
show less
Web App Attack
Anonymous
2026-11-06 16:38:38
UTC ·
(22 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Savvii
2026-11-06 16:03:08
UTC ·
(23 hours ago)
35 attempts against mh_ha-misbehave-ban on sedna
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-11-06 15:30:32
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Savvii
2026-11-06 15:24:23
UTC ·
(1 day ago)
20 attempts against mh_ha-misbehave-ban on sedna
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hary74656
2026-11-06 15:13:49
UTC ·
(1 day ago)
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
stmi.at] "GET /login HTTP/2.0" 404 331 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[c ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
stmi.at] "GET /login HTTP/2.0" 404 331 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[client 34.95.197.132] [realclient 34.95.197.132] - - [06/Nov/2026:16:13:47 +0100] [vhost schani.hostmi.at] "GET /settings/billing HTTP/2.0" 404 331 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[client 34.95.197.132] [realclient 34.95.197.132] - - [06/Nov/2026:16:13:47 +0100] [vhost schani.hostmi.at] "GET /billing HTTP/2.0" 404 331 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[client 34.95.197.132] [realclient 34.95.197.132] - - [06/Nov/2026:16:13:48 +0100] [vhost schani.hostmi.at] "GET /lopw8r4e0g0uwuryg7jz HTTP/2.0" 404 354 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
show less
Web App Attack
Anonymous
2026-11-06 14:54:35
UTC ·
(1 day ago)
Aggressive web scan
Web App Attack