๐ฌ๐ง
consul.to
2026-10-07 18:07:45
(55 minutes ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
DaleCooper
2026-10-07 17:57:49
(1 hour ago)
35.207.248.192 - - [07/Oct/2026:19:57:21 +0200] "GET /mailer/.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 ...
show more
35.207.248.192 - - [07/Oct/2026:19:57:21 +0200] "GET /mailer/.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.207.248.192 - - [07/Oct/2026:19:57:21 +0200] "GET /mail/.env HTTP/1.1" 404 188 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
๐ช๐ธ
masterguru
2026-10-07 15:29:04
(3 hours ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-07 15:24:59
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.207.248.192 (192.248.207.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.248.192 (192.248.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 11:24:53.928764 2026] [security2:error] [pid 22982:tid 22982] [client 35.207.248.192:58274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dutchgreenrecycling.com"] [uri "/.git/config"] [unique_id "asZkRdimZEl0vP7ZR5BMCwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-07 15:23:52
(3 hours ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-10-07 15:19:49
(3 hours ago)
35.207.248.192 - - [07/Oct/2026:17:19:33 +0200] "GET /.git/config HTTP/1.1" 403 617 "-" "Mozilla/5.0 ...
show more
35.207.248.192 - - [07/Oct/2026:17:19:33 +0200] "GET /.git/config HTTP/1.1" 403 617 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.207.248.192 - - [07/Oct/2026:17:19:34 +0200] "GET /.env HTTP/1.1" 403 617 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.207.248.192 - - [07/Oct/2026:17:19:34 +0200] "GET /.env.local HTTP/1.1" 403 617 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.207.248.192 - - [07/Oct/2026:17:19:34 +0200] "GET /.env.production HTTP/1.1" 403 617 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.207.248.192 - - [07/Oct/2026:17:19:34 +0200] "GET /.env.staging HTTP/1.1" 403 617 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.207.248.192 - - [07/Oct/2026:17:19:34 +0
...
show less
DDoS Attack
๐ซ๐ท
Nrbrtkls
2026-10-07 15:10:59
(3 hours ago)
SSH brute force attack detected by fail2ban on Discourse server (dutchdistillers.nl)
Brute-Force
SSH
๐ณ๐ฑ
mieg
2026-10-07 15:07:10
(3 hours ago)
Web vulnerability probing
Brute-Force
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-07 15:04:16
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ณ๐ฑ
middelkoopcc
2026-10-07 14:56:01
(4 hours ago)
2026-10-07 16:53:48 GET /.git/config [301] && 2026-10-07 16:53:48 GET /.env [301] && 2026-10-07 16:5 ...
show more
2026-10-07 16:53:48 GET /.git/config [301] && 2026-10-07 16:53:48 GET /.env [301] && 2026-10-07 16:53:49 GET /.env.bak [301] && 238 more within 20 minutes
show less
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-07 13:51:12
(5 hours ago)
Try to access /.git/config
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-07 13:43:27
(5 hours ago)
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.207.248.192 - - [07/Oct/2026:15:43:26 +0200] "GET /.git/config HTTP/1.1" 404 1350 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-07 13:13:50
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.207.248.192 (192.248.207.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.248.192 (192.248.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 09:13:41.955952 2026] [security2:error] [pid 28338:tid 28338] [client 35.207.248.192:58850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dustyscomputerservice.com"] [uri "/.git/config"] [unique_id "asZFhRv0ReguuFg0TNCDCAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-07 12:48:48
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.207.248.192 (192.248.207.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.207.248.192 (192.248.207.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 08:48:43.887031 2026] [security2:error] [pid 22124:tid 22124] [client 35.207.248.192:51940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dusty-buggz.aisoftwaretools.com"] [uri "/.git/config"] [unique_id "asY_q4RUF4-N5L4bLTqXpQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-07 12:04:41
(6 hours ago)
20 attempts against mh_ha-misbehave-ban on pf221106
Brute-Force
Bad Web Bot
Web App Attack