๐ณ๐ฑ
Alt255
2026-10-09 06:10:45
(49 minutes ago)
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.210.18.255 - - [09/Oct/2026:08:10:42 +0200] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-09 03:12:58
(3 hours ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
๐ณ๐ฑ
Site.eu
2026-10-09 03:00:56
(3 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฎ๐น
ciccio diddo
2026-10-09 02:35:24
(4 hours ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
๐ฉ๐ช
andorin
2026-10-09 01:10:02
(5 hours ago)
Automated report from halo.habith.eu (NGINX access log).
Detected 242 suspicious requests in last 2 ...
show more
Automated report from halo.habith.eu (NGINX access log).
Detected 242 suspicious requests in last 20000 lines.
Sample log lines:
35.210.18.255 - - [08/Oct/2026:22:25:24 +0200] "GET /.git/config HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) \n35.210.18.255 - - [08/Oct/2026:22:25:24 +0200] "GET /.env HTTP/1.1" 403 195 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1\n35.210.18.255 - - [08/Oct/2026:22:25:25 +0200] "GET /.env.local HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) C\n35.210.18.255 - - [08/Oct/2026:22:25:25 +0200] "GET /.env.production HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gec\n35.210.18.255 - - [08/Oct/2026:22:25:25 +0200] "GET /.env.staging HTTP/1.1" 404 3452 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)\n35.210.18.255 - - [08/Oct/2026:22:25:25 +0200] "GET /.env
show less
DDoS Attack
Ping of Death
Hacking
๐ฌ๐ง
andypiper
2026-10-09 01:01:57
(5 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-09 00:58:36
(6 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-09 00:13:25
(6 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
๐ง๐ท
Halux
2026-10-09 00:06:48
(6 hours ago)
35.210.18.255 Probing protected path or service
Web App Attack
๐ฉ๐ช
Petros Stefanakis
2026-10-08 10:27:53
(20 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 35.210.18.255 (BE/Belgium/255.18.210.35 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.210.18.255 (BE/Belgium/255.18.210.35.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-10-08 04:50:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.210.18.255 (255.18.210.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.210.18.255 (255.18.210.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 00:50:40.924119 2026] [security2:error] [pid 19067:tid 19067] [client 35.210.18.255:33438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hakkawok.com"] [uri "/.git/config"] [unique_id "aschIMt7ZZCmB8JY8J58-QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-10-08 04:05:18
(1 day ago)
Abuse Detected (9)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 03:28:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.210.18.255 (255.18.210.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.210.18.255 (255.18.210.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 23:28:33.209534 2026] [security2:error] [pid 8564:tid 8564] [client 35.210.18.255:51416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hakanararat.com"] [uri "/.git/config"] [unique_id "ascN4eVwktc-Fstw8AwaogAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-07 23:15:17
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ฒ๐พ
Rizzy
2026-10-07 23:07:12
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack