🇳🇱
Alt255
2026-11-12 04:48:40
UTC ·
(3 hours ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.235.73.160 - - [12/Nov/2026:05:48:22 +0100] "GET /.git/config HTTP/1.1" 500 3175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTM ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.235.73.160 - - [12/Nov/2026:05:48:22 +0100] "GET /.git/config HTTP/1.1" 500 3175 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
EmilGH
2026-11-12 04:28:41
UTC ·
(3 hours ago)
35.235.73.160 - - [12/Nov/2026:04:28:36 +0000] "GET /.git/config HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:04:28:36 +00 ...
show more
35.235.73.160 - - [12/Nov/2026:04:28:36 +0000] "GET /.git/config HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:04:28:36 +0000] "GET /.env HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:04:28:36 +0000] "GET /.env.local HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:04:28:37 +0000] "GET /.env.production HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:04:28:37 +0000] "GET /.env.staging HTTP/1.1" 403 523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-12 03:13:00
UTC ·
(4 hours ago)
35.235.73.160 - - [12/Nov/2026:05:12:57 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:05:12:57 +0200] "POST ...
show more
35.235.73.160 - - [12/Nov/2026:05:12:57 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:05:12:57 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:05:12:57 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:05:12:57 +0200] "GET /.git/config HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.235.73.160 - - [12/Nov/2026:05:12:58 +0200] "GET /.env HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35
...
show less
Bad Web Bot
Web App Attack
🇩🇪
mravb
2026-11-11 09:24:06
UTC ·
(22 hours ago)
35.235.73.160 - - [11/Nov/2026:11:24:05 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Web App Attack
Hacking
🇺🇸
Blamdom
2026-11-11 08:48:03
UTC ·
(23 hours ago)
Secret/config-file recon: requested /.git/config. 276 HTTP request(s), 2026-11-11 08:48:03 to 08:48:53 UTC (50s).
Requests (method path -> status xcount):
GET [site page] -> 404 x59
POST / -> 200 x3
GET / -> 200 x2
GET /.[redacted] -> 404 x2
...
show more
Secret/config-file recon: requested /.git/config. 276 HTTP request(s), 2026-11-11 08:48:03 to 08:48:53 UTC (50s).
Requests (method path -> status xcount):
GET [site page] -> 404 x59
POST / -> 200 x3
GET / -> 200 x2
GET /.[redacted] -> 404 x2
GET /.git/config -> 404
GET /.env -> 404
GET /.env.local -> 404
GET /.env.production -> 404
...+206 more distinct requests
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 (+1 other UAs)
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
entangled_mongoose
2026-11-11 08:06:58
UTC ·
(23 hours ago)
Probed /info.php.
Web App Attack
🇸🇪
vaia.cloud
2026-11-11 05:30:01
UTC ·
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇫🇷
security.rdmc.fr
2026-11-11 03:03:44
UTC ·
(1 day ago)
Activity from blacklisted IP
Hacking
🇫🇷
masterguru
2026-11-10 22:27:50
UTC ·
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
Major Hostility
2026-11-10 22:21:03
UTC ·
(1 day ago)
"GET /.git/config HTTP/1.1" 404
"GET /.env HTTP/1.1" 404
"GET /.env.local HTTP/1.1" 404
"GET /.env.production HTTP/1.1" 404
"GET /.env.staging HTTP/1.1" 404
"GET /.git/config HTTP/1.1" 404
"GET /.env.development HTTP/1.1" 404
"GET /.env.test HTTP/1.1 ...
show more
"GET /.git/config HTTP/1.1" 404
"GET /.env HTTP/1.1" 404
"GET /.env.local HTTP/1.1" 404
"GET /.env.production HTTP/1.1" 404
"GET /.env.staging HTTP/1.1" 404
"GET /.git/config HTTP/1.1" 404
"GET /.env.development HTTP/1.1" 404
"GET /.env.test HTTP/1.1" 404
"GET /.git/config HTTP/1.1" 404
"GET /.env.remote HTTP/1.1" 404
"GET /.env HTTP/1.1" 404
"GET /.env.bak HTTP/1.1" 404
"GET /.env.local HTTP/1.1" 404
"GET /.env.backup HTTP/1.1" 404
"GET /.env HTTP/1.1" 404
"GET /.env.local HTTP/1.1" 404
"GET /.env.production HTTP/1.1" 404
"GET /.env.save HTTP/1.1" 404
"GET /.env.production HTTP/1.1" 404
"GET /.env.staging HTTP/1.1" 404
"GET /.env.old HTTP/1.1" 404
%
show less
Web App Attack
🇬🇧
consul.to
2026-11-10 22:10:37
UTC ·
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
masterguru
2026-11-10 20:47:42
UTC ·
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇺🇸
antlac1
2026-11-10 20:45:52
UTC ·
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇫🇷
cityhunter_rhone
2026-11-10 18:54:04
UTC ·
(1 day ago)
Observed at (UTC): 2026-11-10T18:53:03+00:00 | Mercurius Guide auto detection | source=Fail2Ban | scraper score=1 | events=1 | decision=datacenter | actions=APACHE_DENIED_AGGREGATE | last_seen=2026-11-10 19:53:03
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-10 05:34:08
UTC ·
(2 days ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.235.73.160 - - [10/Nov/2026:06:33:52 +0100] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.235.73.160 - - [10/Nov/2026:06:33:52 +0100] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack