๐ณ๐ฑ
Alt255
2026-10-15 11:30:09
(3 days ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.234.240.130 - - [15/Oct/2026:13:30:02 +0200] "GET /.git/config HTTP/1.1" 500 8989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
EmilGH
2026-10-15 11:16:45
(3 days ago)
35.234.240.130 - - [15/Oct/2026:11:16:41 +0000] "GET /.git/config HTTP/1.1" 403 523 "-" "Mozilla/5.0 ...
show more
35.234.240.130 - - [15/Oct/2026:11:16:41 +0000] "GET /.git/config HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.234.240.130 - - [15/Oct/2026:11:16:41 +0000] "GET /.env HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.234.240.130 - - [15/Oct/2026:11:16:41 +0000] "GET /.env.local HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.234.240.130 - - [15/Oct/2026:11:16:41 +0000] "GET /.env.production HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.234.240.130 - - [15/Oct/2026:11:16:41 +0000] "GET /.env.staging HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-15 10:29:31
(3 days ago)
35.234.240.130 - - [15/Oct/2026:12:29:30 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows ...
show more
35.234.240.130 - - [15/Oct/2026:12:29:30 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.234.240.130 - - [15/Oct/2026:12:29:30 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.234.240.130 - - [15/Oct/2026:12:29:30 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.234.240.130 - - [15/Oct/2026:12:29:30 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.234.240.130 - - [15/Oct/2026:12:29:30 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.234.240.130 - - [15/Oct/
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-10-15 06:59:59
(3 days ago)
(web_sensitive_file) srv101 Sensitive file probe (.env/.git/backup) 35.234.240.130 (CA/Canada/130.24 ...
show more
(web_sensitive_file) srv101 Sensitive file probe (.env/.git/backup) 35.234.240.130 (CA/Canada/130.240.234.35.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-15 05:15:21
(3 days ago)
Excessive multi-domain requests
Brute-Force
๐ธ๐ช
vaia.cloud
2026-10-15 04:50:03
(3 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-15 03:09:13
(3 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
Anonymous
2026-10-15 03:00:02
(3 days ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 02:42:48
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.234.240.130 (130.240.234.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.240.130 (130.240.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 22:42:41.468962 2026] [security2:error] [pid 19657:tid 19657] [client 35.234.240.130:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.luisguacache.com"] [uri "/.git/config"] [unique_id "atA9ocUPpdv4b8MfzCfSOAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-15 02:31:55
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-15 02:15:05
(3 days ago)
Try to access /.git/config
Web App Attack
๐จ๐ญ
zynex
2026-10-15 01:56:01
(3 days ago)
URL Probing: /server/.env
Web App Attack
๐บ๐ธ
mnsf
2026-10-15 01:06:33
(3 days ago)
Abuse Detected (10)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 00:55:28
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.234.240.130 (130.240.234.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.240.130 (130.240.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:55:20.424333 2026] [security2:error] [pid 2651:tid 2674] [client 35.234.240.130:58246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lucy.abney.info"] [uri "/.git/config"] [unique_id "atAkeGiSOC298JbIsfBwFAAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-10-14 21:59:28
(3 days ago)
Auto-ban: >3000 req/min op 2026-10-14
Web App Attack
SSH
Hacking