2026-11-03 12:19:32
UTC ·
(5 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇭🇺
DumaNet
2026-11-03 04:57:00
UTC ·
(6 days ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Nov 02. 17:05:18
Source IP: 35.197.61.215
Portion of the log(s):
35.197.61.215 - [02/Nov/2026:17:05:18 +0100] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Meta-Extern ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Nov 02. 17:05:18
Source IP: 35.197.61.215
Portion of the log(s):
35.197.61.215 - [02/Nov/2026:17:05:18 +0100] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.197.61.215 - [02/Nov/2026:17:05:18 +0100] "GET /cache/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.197.61.215 - [02/Nov/2026:17:05:18 +0100] "GET /_debugbar/open HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
35.197.61.215 - [02/Nov/2026:17:05:18 +0100] "GET /telescope/requests HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.197.61.215 - [02/Nov/2026:17:05:18 +0100
show less
Web App Attack
🇺🇸
Secure Gateway®️
2026-11-02 22:00:29
UTC ·
(6 days ago)
Report By Secure Gateway Security Team: Brute Force Login Attempt
Web App Attack
🇺🇸
ALSCO®️
2026-11-02 22:00:29
UTC ·
(6 days ago)
Report By ALSCO Security Team: Unsolicited Connection Attempt
SQL Injection
2026-11-02 13:53:43
UTC ·
(6 days ago)
35.197.61.215 mail.irwindalecycles.com - [02/Nov/2026:07:53:41 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"\n35.197.61.215 mail.irw ...
show more
35.197.61.215 mail.irwindalecycles.com - [02/Nov/2026:07:53:41 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"\n35.197.61.215 mail.irwindalecycles.com - [02/Nov/2026:07:53:41 -0600] "GET /robots.txt HTTP/1.1" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"\n35.197.61.215 mail.irwindalecycles.com - [02/Nov/2026:07:53:41 -0600] "GET /sitemap.xml HTTP/1.1" 403 158 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"\n35.197.61.215 mail.irwindalecycles.com - [02/Nov/2026:07:53:41 -0600] "GET /sitemap_index.xml HTTP/1.1" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"\n35.197.61.215 mail.irwindalecycles.com - [02/Nov/2026:07:53:41 -0600] "GET /z9x8c7v6b5-debug-trigger-mail.irwindalecycles.com HTT
show less
DDoS Attack
Web App Attack
🇳🇿
Tripwire
2026-11-02 13:30:40
UTC ·
(6 days ago)
Fake Googlebot "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
Bad Web Bot
🇫🇷
masterguru
2026-11-02 13:13:55
UTC ·
(6 days ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .d ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
🇬🇧
NotCool
2026-11-02 12:52:14
UTC ·
(6 days ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 35.197.61.215 (US/United States/215.61.197.35.bc.googleusercontent.com): 50 in the last 3600 secs
Bad Web Bot
🇪🇸
pipeline.es
2026-11-02 11:52:05
UTC ·
(6 days ago)
Web scanning / probing for vulnerable paths | URL: /.env.production.local | Evidence: iristourvacances.com 35.197.61.215 - - [02/Nov/2026:12:50:14 +0100] \"GET /.env.production.local HTTP/2.0\" 403 199 \"-\" \"Mozilla/5.0 (compatible; Amazonbot/0.1; ...
show more
Web scanning / probing for vulnerable paths | URL: /.env.production.local | Evidence: iristourvacances.com 35.197.61.215 - - [02/Nov/2026:12:50:14 +0100] \"GET /.env.production.local HTTP/2.0\" 403 199 \"-\" \"Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)\" GEOIP_COUNTRY_CODE=US 1471 | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
2026-11-02 11:50:26
UTC ·
(6 days ago)
Banned by Fail2Ban on server
Web App Attack
2026-11-02 11:19:48
UTC ·
(6 days ago)
Aggressive web scan
Web App Attack
🇩🇪
maxpower
2026-11-02 10:59:42
UTC ·
(6 days ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 35.197.61.215 (US/United States/215.61.197.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.197.61.215 - - [02/Nov/2026:11:59:35 +0100] "GET / ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 35.197.61.215 (US/United States/215.61.197.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.197.61.215 - - [02/Nov/2026:11:59:35 +0100] "GET /turbo.json HTTP/2.0" 404 446 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "35.197.61.215" host=crm.conapipescara.it
show less
Port Scan
🇩🇪
maxpower
2026-11-02 10:37:11
UTC ·
(6 days ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 35.197.61.215 (US/United States/215.61.197.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.197.61.215 - - [02/Nov/2026:11:37:04 +0100] "GET / ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 35.197.61.215 (US/United States/215.61.197.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.197.61.215 - - [02/Nov/2026:11:37:04 +0100] "GET /samconfig.toml HTTP/2.0" 404 201 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "35.197.61.215" host=www.conapipescara.it
show less
Port Scan
🇫🇷
IRISIO
2026-11-02 10:36:11
UTC ·
(6 days ago)
scans/SQL injection/spam posts : 1929 queries
Web App Attack
SQL Injection
🇫🇷
Catalin Negru
2026-11-02 10:25:49
UTC ·
(6 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
