2026-10-26 23:54:29
(10 hours ago)
Aggressive web scan
Web App Attack
🇩🇪
filstal.org
2026-10-26 22:37:09
(11 hours ago)
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ...
show more
Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths.
show less
Hacking
Brute-Force
Web App Attack
🇸🇪
nekopavel
2026-10-26 22:29:04
(11 hours ago)
34.95.55.107 - - [26/Oct/2026:23:29:03 +0100]"GET /.git/config HTTP/1.1" 404 529"-" uwu.so "Mozilla/ ...
show more
34.95.55.107 - - [26/Oct/2026:23:29:03 +0100]"GET /.git/config HTTP/1.1" 404 529"-" uwu.so "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.006" "0.000""Montreal" "CA"
34.95.55.107 - - [26/Oct/2026:23:29:03 +0100]"GET /.env HTTP/1.1" 404 529"-" uwu.so "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.000""Montreal" "CA"
34.95.55.107 - - [26/Oct/2026:23:29:03 +0100]"GET /.env.local HTTP/1.1" 404 529"-" uwu.so "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.001""Montreal" "CA"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-26 22:25:04
(11 hours ago)
[27/Oct/2026:00:25:04 +0200] -- 34.95.55.107 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/ ...
show more
[27/Oct/2026:00:25:04 +0200] -- 34.95.55.107 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-26 20:37:00
(13 hours ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.95.55.107 - - [26/Oct/2026:21:36:55 +0100] "GET /.git/config HTTP/1.1" 301 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
iwle
2026-10-26 20:13:14
(13 hours ago)
[Mon Oct 26 16:13:12.065018 2026] [:error] [pid 62710:tid 62740] [client 34.95.55.107:0] [client 34. ...
show more
[Mon Oct 26 16:13:12.065018 2026] [:error] [pid 62710:tid 62740] [client 34.95.55.107:0] [client 34.95.55.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "uvscards.com"] [uri "/.env"] [unique_id "at-0WDLXCgzeWR98WBcMwgAAAQI"]
[Mon Oct 26 16:13:12.432934 2026] [:error] [pid 62860:tid 62908] [client 34.95.55.107:0] [client 34.95.55.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\
...
show less
Bad Web Bot
Web App Attack
2026-10-26 19:51:03
(14 hours ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇬🇧
consul.to
2026-10-26 19:33:35
(14 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Site.eu
2026-10-26 18:56:28
(15 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
2026-10-26 18:53:17
(15 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack