๐ฉ๐ช
bazter.pro
2026-10-24 13:37:12
(1 hour ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-24 13:36:45
(1 hour ago)
Excessive 404/403 errors
Brute-Force
Anonymous
2026-10-24 13:35:07
(1 hour ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
dot.mg
2026-10-24 13:17:33
(1 hour ago)
Scan of vulnerable files
Web App Attack
๐ต๐ฑ
tomkolp
2026-10-24 12:43:34
(2 hours ago)
CrowdSec - Scenario: crowdsecurity/appsec-native. Duration: 4h.
Hacking
Anonymous
2026-10-24 12:35:44
(2 hours ago)
35.201.147.80 - - [24/Oct/2026:07:35:41 -0500] "GET /.env.secret HTTP/1.1" 301 246 "-" "Mozilla/5.0 ...
show more
35.201.147.80 - - [24/Oct/2026:07:35:41 -0500] "GET /.env.secret HTTP/1.1" 301 246 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 172.69.221.63
35.201.147.80 - - [24/Oct/2026:07:35:43 -0500] "GET /.env.dev.local HTTP/1.1" 301 249 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 172.69.221.64
35.201.147.80 - - [24/Oct/2026:07:35:43 -0500] "GET /.env.production.local HTTP/1.1" 301 256 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 172.69.221.63
35.201.147.80 - - [24/Oct/2026:07:35:43 -0500] "GET /.env.credentials HTTP/1.1" 301 251 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 172.69.221.63
35.201.147.80 - - [24/Oct/2026:07:35:43 -0500] "GET /.env.staging.local HTTP/1.1" 301 253 "-" "Mozilla
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
zynex
2026-10-24 12:06:58
(2 hours ago)
URL Probing: /@fs/root/.env
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-24 11:55:02
(3 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ซ๐ท
fineservice
2026-10-24 11:41:47
(3 hours ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
๐ฉ๐ช
macrob
2026-10-24 11:40:55
(3 hours ago)
2026/10/24 11:40:53 [error] 789242#789242: *4620213 access forbidden by rule, client: 35.201.147.80, ...
show more
2026/10/24 11:40:53 [error] 789242#789242: *4620213 access forbidden by rule, client: 35.201.147.80, server: finami.ph, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "finami.ph"
2026/10/24 11:40:53 [error] 789243#789243: *4621066 access forbidden by rule, client: 35.201.147.80, server: finami.ph, request: "GET /.vite/manifest.json HTTP/2.0", host: "finami.ph"
2026/10/24 11:40:54 [error] 789245#789245: *4618735 access forbidden by rule, client: 35.201.147.80, server: finami.ph, request: "GET /.git/config HTTP/2.0", host: "finami.ph"
...
show less
Web App Attack
๐จ๐ญ
backslash
2026-10-24 11:27:02
(3 hours ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-10-24 11:16:58
(3 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-24 11:03:49
(3 hours ago)
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.201.147.80 - - [24/Oct/2026:13:03:32 +0200] "GET /.env.supabase HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-24 10:39:01
(4 hours ago)
35.201.147.80 - - [24/Oct/2026:06:39:01 -0400] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.en ...
show more
35.201.147.80 - - [24/Oct/2026:06:39:01 -0400] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 403 5477 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.201.147.80 - - [24/Oct/2026:06:39:01 -0400] "GET /@fs/.env?raw&url?? HTTP/1.1" 403 5477 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.201.147.80 - - [24/Oct/2026:06:39:01 -0400] "GET /@fs/.env?import&?raw?? HTTP/1.1" 403 5477 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-24 10:38:41
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.201.147.80 (80.147.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.147.80 (80.147.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 06:38:34.763987 2026] [security2:error] [pid 4108:tid 4108] [client 35.201.147.80:46444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidnevue.com"] [uri "/.env.supabase"] [unique_id "atyKqkttX712UZGC5ksKFgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack