๐ฉ๐ช
IVski.com
2026-10-14 01:34:22
(23 hours ago)
IVski WAF | Webshell probe detected - requesting common script extensions
Hacking
Brute-Force
Web App Attack
Anonymous
2026-10-14 00:50:36
(23 hours ago)
35.217.60.233 - - [14/Oct/2026:02:50:27 +0200] "GET /.git/config HTTP/1.1" 403 628 "-" "Mozilla/5.0 ...
show more
35.217.60.233 - - [14/Oct/2026:02:50:27 +0200] "GET /.git/config HTTP/1.1" 403 628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.217.60.233 - - [14/Oct/2026:02:50:27 +0200] "GET /.env HTTP/1.1" 403 628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.217.60.233 - - [14/Oct/2026:02:50:27 +0200] "GET /.env.local HTTP/1.1" 403 628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.217.60.233 - - [14/Oct/2026:02:50:27 +0200] "GET /.env.production HTTP/1.1" 403 628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.217.60.233 - - [14/Oct/2026:02:50:27 +0200] "GET /.env.staging HTTP/1.1" 403 628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.217.60.233 - - [14/Oct/2026:02:50:27 +0200] "
...
show less
DDoS Attack
๐ฌ๐ง
consul.to
2026-10-13 20:53:58
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-10-13 18:19:28
(1 day ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
antlac1
2026-10-13 15:09:32
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-10-13 14:14:00
(1 day ago)
2026/10/13 14:13:57 [error] 1987591#1987591: *849632 [client 35.217.60.233] ModSecurity: Access deni ...
show more
2026/10/13 14:13:57 [error] 1987591#1987591: *849632 [client 35.217.60.233] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `55' ) [file "/var/lib/angie/modsecurity/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "www.nascapers.es"] [uri "/"] [unique_id "17919008378.312274"] [ref ""], client: "35.217.60.233", server: "www.nascapers.es", request_line: "POST / HTTP/1.1", host: "www.nascapers.es"
2026/10/13 14:13:57 [error] 1987591#1987591: *849632 [client 35.217.60.233] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `30' ) [file "/var/lib/angie
...
show less
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-13 14:10:16
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-13 10:56:26
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
Anonymous
2026-10-13 09:14:03
(1 day ago)
GET /.git/config HTTP/1.1
...
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-13 04:26:03
(1 day ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.217.60.233 - - [13/Oct/2026:06:25:46 +0200] "GET /.git/config HTTP/1.1" 301 408 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-13 03:45:03
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
ger-stg-sifi1
2026-10-13 01:50:29
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-12 23:40:01
(2 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 11:02:01
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.217.60.233 (233.60.217.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.217.60.233 (233.60.217.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 07:01:54.062815 2026] [security2:error] [pid 25044:tid 25118] [client 35.217.60.233:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindgardens.com"] [uri "/.git/config"] [unique_id "astsorVeThpHPkxVbqS87AAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-10 17:23:26
(4 days ago)
Excessive multi-domain requests
Brute-Force