🇳🇱
Alt255
2026-10-26 21:23:53
(2 days ago)
[ti-tinov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like ...
show more
[ti-tinov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.env HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.env.local HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.env.production HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.3
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-25 13:42:42
(3 days ago)
[ti-tinov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like ...
show more
[ti-tinov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.env HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.env.local HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.130.59 - - [21/Oct/2026:09:27:05 +0200] "GET /.env.production HTTP/1.1" 404 2156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.3
...
show less
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-22 04:10:17
(1 week ago)
Wordpress malicious attack:[octablocked]
Web App Attack
2026-10-21 22:31:12
(1 week ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
Web App Attack
Bad Web Bot
🇦🇺
rubixstudios
2026-10-21 16:02:03
(1 week ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇩🇪
raph
2026-10-21 14:18:21
(1 week ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇯🇵
ki3
2026-10-21 13:04:55
(1 week ago)
Fail2Ban: Web App Attacks and Forum Spam 34.176.130.59 1792587894.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-10-21 12:49:53
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.176.130.59 (CL/Chile/Santiago Metropolitan/Santiago/59.130.176.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
4server
2026-10-21 12:35:09
(1 week ago)
[WedOct2114:35:05.5922622026][security2:error][pid3924418:tid3924430][client34.176.130.59:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\} ...
show more
[WedOct2114:35:05.5922622026][security2:error][pid3924418:tid3924430][client34.176.130.59:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"gustotondo.ch\"][uri\"/\"][unique_id\"atixeee3-w74GgpneD4DTAAAAcM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇿🇦
Megasurf
2026-10-21 10:55:43
(1 week ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇯🇵
ki3
2026-10-21 07:39:52
(1 week ago)
Fail2Ban: Web App Attacks and Forum Spam 34.176.130.59 1792568392.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-21 07:27:11
(1 week ago)
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.176.130.59 - - \[21/Oct/2026:09:27:05 +0200\] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.176.130.59 - - \[21/Oct/2026:09:27:05 +0200\] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-21 07:19:14
(1 week ago)
Excessive multi-domain requests
Brute-Force
2026-10-20 22:30:11
(1 week ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
Web App Attack
Bad Web Bot
🇹🇷
Jova
2026-10-20 21:14:29
(1 week ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
