🇺🇸
dot.mg
2026-11-06 22:42:16
UTC ·
(12 minutes ago)
Bad behaviour
Web Spam
🇵🇱
lns.bz
2026-11-06 20:51:22
UTC ·
(2 hours ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇩🇪
Séfora Srl
2026-11-06 20:08:24
UTC ·
(2 hours ago)
crowdsecurity/http-sensitive-files detected by CrowdSec
Web App Attack
🇳🇱
Alt255
2026-11-06 20:01:52
UTC ·
(2 hours ago)
[ti-03ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.241.119.83 - - [06/Nov/2026:21:01:32 +0100] "GET /.git/config HTTP/1.1" 503 7312 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[ti-03ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.241.119.83 - - [06/Nov/2026:21:01:32 +0100] "GET /.git/config HTTP/1.1" 503 7312 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
sibahota
2026-11-06 19:34:22
UTC ·
(3 hours ago)
35.241.119.83 - - [06/Nov/2026:19:34:15 +0000] www.stockworld.co "GET /phpinfo.php HTTP/1.1" 404 1134 0.002 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.17.0.1:8003 40 ...
show more
35.241.119.83 - - [06/Nov/2026:19:34:15 +0000] www.stockworld.co "GET /phpinfo.php HTTP/1.1" 404 1134 0.002 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.17.0.1:8003 404 0.003 "http://www.stockworld.co/phpinfo.php"
35.241.119.83 - - [06/Nov/2026:19:34:16 +0000] www.stockworld.co "GET /info.php HTTP/1.1" 404 1134 0.003 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.17.0.1:8003 404 0.003 "http://www.stockworld.co/info.php"
35.241.119.83 - - [06/Nov/2026:19:34:16 +0000] www.stockworld.co "GET /php.php HTTP/1.1" 404 1134 0.002 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.17.0.1:8003 404 0.002 "http://www.stockworld.co/php.php"
35.241.119.83 - - [06/Nov/2026:19:34:16 +0000] www.stockworld.co "GET /i.php HTTP/1.1" 404 1134 0.002 "-" "Mozilla/5.0 (Mac
...
show less
Bad Web Bot
Web App Attack
🇳🇱
ams_sec_user
2026-11-06 19:05:23
UTC ·
(3 hours ago)
Automated requests against a hosted website: 226 requests between 18:00 and 18:59 UTC; 209 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.git/config). Reported automatically.
Hacking
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-06 17:07:37
UTC ·
(5 hours ago)
[FriNov0618:07:34.3981812026][security2:error][pid2657669:tid2657799][client35.241.119.83:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"96072 ...
show more
[FriNov0618:07:34.3981812026][security2:error][pid2657669:tid2657799][client35.241.119.83:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"710\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.stmconsulenze.ch.81-17-25-250.cpanel.site\"][uri\"/.env~\"][unique_id\"au4JVnL_d4n4Zgow3MeXxgAAAM8\"]
show less
Hacking
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-06 15:35:45
UTC ·
(7 hours ago)
[Sat Nov 07 02:35:44.026335 2026] [security2:error] [pid 666136] [client 35.241.119.83:55184] [client 35.241.119.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQU ...
show more
[Sat Nov 07 02:35:44.026335 2026] [security2:error] [pid 666136] [client 35.241.119.83:55184] [client 35.241.119.83] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.stkildashule.org.au"] [uri "/"] [unique_id "au3z0Oa5o2yv5PMVVnro9AAAAAQ"]
...
show less
Web App Attack
Anonymous
2026-11-06 14:56:03
UTC ·
(7 hours ago)
35.241.119.83 - - [06/Nov/2026:08:55:59 -0600] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.68.211.14
35.241.119.83 - - [06/Nov/2026:08:56 ...
show more
35.241.119.83 - - [06/Nov/2026:08:55:59 -0600] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.68.211.14
35.241.119.83 - - [06/Nov/2026:08:56:00 -0600] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.68.211.14
35.241.119.83 - - [06/Nov/2026:08:56:00 -0600] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.68.211.14
35.241.119.83 - - [06/Nov/2026:08:56:00 -0600] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.68.211.14
35.241.119.83 - - [06/Nov/2026:08:56:01 -0600] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; In
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
niedson
2026-11-06 14:30:02
UTC ·
(8 hours ago)
Automated scanning for exposed secrets: repeated requests for multiple distinct credential paths (.env variants, .git metadata, .ssh private keys, .aws/credentials). Unsolicited. Reported automatically.
Web App Attack
🇺🇸
jcbriar
2026-11-06 13:46:13
UTC ·
(9 hours ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇬🇧
consul.to
2026-11-06 10:54:36
UTC ·
(12 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Savvii
2026-11-06 09:05:51
UTC ·
(13 hours ago)
20 attempts against mh-misbehave-ban on sedna
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-06 08:37:08
UTC ·
(14 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-06 01:27:53
UTC ·
(21 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack