๐ณ๐ฑ
Alt255
2026-10-18 05:29:14
(5 hours ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.187.191.211 - - [18/Oct/2026:07:28:54 +0200] "GET /.git/config HTTP/1.1" 301 508 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Savvii
2026-10-18 04:51:57
(5 hours ago)
20 attempts against mh_ha-misbehave-ban on sea
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-18 04:51:22
(5 hours ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 04:20:26
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.187.191.211 (211.191.187.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.191.211 (211.191.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 00:20:18.289142 2026] [security2:error] [pid 27611:tid 27619] [client 35.187.191.211:46784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accrediteddegree.aafm.us"] [uri "/.git/config"] [unique_id "atRJAvMggDat6KkWZVx87gAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-10-18 04:03:56
(6 hours ago)
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+17 more) | ua: Mozilla/5. ...
show more
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+17 more) | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐ฟ๐ฆ
Megasurf
2026-10-18 01:49:10
(8 hours ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firew ...
show more
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 01:08:52
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.187.191.211 (211.191.187.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.191.211 (211.191.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 21:08:48.307996 2026] [security2:error] [pid 6290:tid 6290] [client 35.187.191.211:47848] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accordionfactory.com.accordionclub.org"] [uri "/.git/config"] [unique_id "atQcIOOoGDnxLr__CEpSzQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-18 00:59:48
(9 hours ago)
35.187.191.211 - - [17/Oct/2026:19:58:25 -0500] "GET /.env HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Macin ...
show more
35.187.191.211 - - [17/Oct/2026:19:58:25 -0500] "GET /.env HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.71.119.15
35.187.191.211 - - [17/Oct/2026:19:58:25 -0500] "GET /.env.local HTTP/1.1" 301 260 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.71.119.68
35.187.191.211 - - [17/Oct/2026:19:58:25 -0500] "GET /.env.production HTTP/1.1" 301 265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.71.119.68
35.187.191.211 - - [17/Oct/2026:19:58:25 -0500] "GET /.env.staging HTTP/1.1" 301 262 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.71.119.68
35.187.191.211 - - [17/Oct/2026:19:58:26 -0500] "GET /.env.development HTTP/1.1" 301 266 "-" "Mozilla/5.0 (Macintos
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-18 00:44:14
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.187.191.211 (211.191.187.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.191.211 (211.191.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:44:07.656335 2026] [security2:error] [pid 9137:tid 9137] [client 35.187.191.211:48086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accommodation.bookingsouthafrica.com"] [uri "/.git/config"] [unique_id "atQWV2Fo_tC0pDubpvzsOwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-18 00:25:02
(10 hours ago)
suspicious request in access.log
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-18 00:10:37
(10 hours ago)
Excessive 404/403 errors
Brute-Force
๐ฌ๐ง
consul.to
2026-10-18 00:03:26
(10 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-17 23:45:12
(10 hours ago)
35.187.191.211 - - [17/Oct/2026:19:45:07 -0400] "GET /.git/config HTTP/1.1" 404 5752 "-" "Mozilla/5. ...
show more
35.187.191.211 - - [17/Oct/2026:19:45:07 -0400] "GET /.git/config HTTP/1.1" 404 5752 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.191.211 - - [17/Oct/2026:19:45:07 -0400] "GET /.env HTTP/1.1" 500 5337 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.187.191.211 - - [17/Oct/2026:19:45:11 -0400] "GET /app/.env HTTP/1.1" 404 5752 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฎ๐น
VHosting
2026-10-17 23:35:05
(10 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-10-17 16:33:19
(18 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack