๐ณ๐ฑ
Alt255
2026-10-26 21:16:56
(12 hours ago)
[ti-14al] Web exploit scanning: 14 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-14al] Web exploit scanning: 14 suspicious requests detected by fail2ban jail <name>. Example: 34.88.35.244 - - [20/Oct/2026:17:56:47 +0200] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.35.244 - - [20/Oct/2026:17:56:47 +0200] "GET /.env HTTP/1.1" 301 566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.35.244 - - [20/Oct/2026:17:56:47 +0200] "GET /.env.local HTTP/1.1" 301 578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.35.244 - - [20/Oct/20
...
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
mscode.pl
2026-10-26 05:59:18
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from FI.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from FI.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Zone: wiki.mscode.pl
Endpoint: /postmark/.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
iwle
2026-10-26 05:43:41
(1 day ago)
[Mon Oct 26 01:43:39.206475 2026] [:error] [pid 62860:tid 62904] [client 34.88.35.244:0] [client 34. ...
show more
[Mon Oct 26 01:43:39.206475 2026] [:error] [pid 62860:tid 62904] [client 34.88.35.244:0] [client 34.88.35.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "uvscards.com"] [uri "/.env"] [unique_id "at7oizMAQemsbLtaxrniFQAAAZA"]
[Mon Oct 26 01:43:39.795848 2026] [:error] [pid 62798:tid 62835] [client 34.88.35.244:0] [client 34.88.35.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\
...
show less
Bad Web Bot
Web App Attack
๐ธ๐ฌ
Cloudkul Cloudkul
2026-10-26 05:42:29
(1 day ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
๐ซ๐ฎ
paissangroup
2026-10-26 02:26:32
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
MatStef132
2026-10-26 02:22:46
(1 day ago)
MatShield L7: blocked on wiki.mathost.eu (secret-path-probe)
DDoS Attack
๐ซ๐ท
mail.avx.gr
2026-10-25 23:48:03
(1 day ago)
(nginxENVSCAN) nginx environment-file scanner detected from 34.88.35.244 (FI/Finland/South Karelia/L ...
show more
(nginxENVSCAN) nginx environment-file scanner detected from 34.88.35.244 (FI/Finland/South Karelia/Lappeenranta/244.35.88.34.bc.googleusercontent.com)
show less
Hacking
๐ฌ๐ง
consul.to
2026-10-25 17:21:15
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
COMAITE
2026-10-25 14:53:38
(1 day ago)
Suspicious URL access.
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 13:45:02
(1 day ago)
[ti-14al] Web exploit scanning: 14 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-14al] Web exploit scanning: 14 suspicious requests detected by fail2ban jail <name>. Example: 34.88.35.244 - - [20/Oct/2026:17:56:47 +0200] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.35.244 - - [20/Oct/2026:17:56:47 +0200] "GET /.env HTTP/1.1" 301 566 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.35.244 - - [20/Oct/2026:17:56:47 +0200] "GET /.env.local HTTP/1.1" 301 578 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.35.244 - - [20/Oct/20
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
FEWA
2026-10-25 13:08:30
(1 day ago)
Fail2Ban Ban Triggered
Hacking
Bad Web Bot
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-10-25 12:20:04
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
Anonymous
2026-10-25 11:53:37
(1 day ago)
[25/Oct/2026:13:53:36 +0200] 179292921655.042886 34.88.35.244 37884 148.251.76.218 443
[25/Oct/2026: ...
show more
[25/Oct/2026:13:53:36 +0200] 179292921655.042886 34.88.35.244 37884 148.251.76.218 443
[25/Oct/2026:13:53:36 +0200] 179292921673.579915 34.88.35.244 37884 148.251.76.218 443
show less
Web App Attack
๐ฉ๐ช
botreporter
2026-10-25 08:28:28
(2 days ago)
CMS vulnerability/installation scanning
Brute-Force
Web App Attack
Anonymous
2026-10-25 05:05:47
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.88.35.244 (FI/Finland/244.35.88.34.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.88.35.244 (FI/Finland/244.35.88.34.bc.googleusercontent.com)
show less
SQL Injection