🇫🇷
SpaceHost-Server
2026-11-07 23:18:47
UTC ·
(2 days ago)
Brute-Force
Web App Attack
🇩🇪
altenglaner
2026-11-06 09:17:14
UTC ·
(4 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇩🇪
rh24
2026-11-06 08:37:30
UTC ·
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.236.186.191 (TW/Taiwan/191.186.236.35.bc.googleusercontent.com)
SQL Injection
Anonymous
2026-11-06 08:37:05
UTC ·
(4 days ago)
35.236.186.191 - - [06/Nov/2026:09:37:04 +0100] "GET /. HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http:// ...
show more
35.236.186.191 - - [06/Nov/2026:09:37:04 +0100] "GET /. HTTP/2.0" 301 169 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http:///)"
show less
Web App Attack
🇳🇱
Alt255
2026-11-06 08:33:48
UTC ·
(4 days ago)
[ti-27al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.236.186.191 - - [06/Nov/2026:09:33:28 +0100] "GET /.env.staging.local HTTP/1.1" 404 7825 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://yo ...
show more
[ti-27al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.236.186.191 - - [06/Nov/2026:09:33:28 +0100] "GET /.env.staging.local HTTP/1.1" 404 7825 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.236.186.191 - - [06/Nov/2026:09:33:28 +0100] "GET /.env.credentials HTTP/1.1" 404 7825 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 08:23:16
UTC ·
(4 days ago)
Web application attack: http cve 2021 41773; Probing for exposed secret / credential files; Web application attack: http sensitive files; Web application attack: http path traversal probing
Hacking
Web App Attack
🇧🇪
cmbplf
2026-11-06 06:00:48
UTC ·
(4 days ago)
3.287 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇧🇷
dermatovirtual
2026-11-06 06:00:46
UTC ·
(4 days ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 65 unauthorized requests recorded between 2026-11-05 20:00:49 UTC and 2026-11-05 20:00:58 UTC (rate: ~65 req/min). Edge perimete ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 65 unauthorized requests recorded between 2026-11-05 20:00:49 UTC and 2026-11-05 20:00:58 UTC (rate: ~65 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-11-05 20:00:58 UTC] IP: 35.236.186.191 - W3C IIS (Port 443): GET /.env.development.local -> HTTP 404 [CLIENT: 35.236.186.191]
[2026-11-05 20:00:58 UTC] IP: 35.236.186.191 - W3C IIS (Port 443): GET /.env.config -> HTTP 404 [CLIENT: 35.236.186.191]
[2026-11-05 20:00:58 UTC] IP: 35.236.186.191 - W3C IIS (Port 443): GET /.env.keys -> HTTP 404 [CLIENT: 35.236.186.191]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 05:58:18
UTC ·
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.236.186.191 (TW/Taiwan/191.186.236.35.bc.googleusercontent.com)
SQL Injection
🇩🇪
konseptit
2026-11-06 05:04:38
UTC ·
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.236.186.191 (TW/Taiwan/191.186.236.35.bc.googleusercontent.com)
SQL Injection
🇳🇱
e.fierstra
2026-11-06 04:27:51
UTC ·
(4 days ago)
excessive HTTP 404 errors
Bad Web Bot
🇹🇼
kk_it_man
2026-11-06 03:53:03
UTC ·
(4 days ago)
ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2
ET INFO ChatGPT-User Traffic Detected Inbound M1
ET INFO ChatGPT-User Traffic Detected Inbound M2
ET INFO Request to Hidden Environment File - Inbound
ET SCAN B ...
show more
ET EXPLOIT Apache HTTP Server 2.4.49 - Path Traversal Attempt (CVE-2021-41773) M2
ET INFO ChatGPT-User Traffic Detected Inbound M1
ET INFO ChatGPT-User Traffic Detected Inbound M2
ET INFO Request to Hidden Environment File - Inbound
ET SCAN Bing Webcrawler User-Agent (BingBot)
ET WEB_SERVER Likely Malicious Request for /proc/self/environ
ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927)
GPL WEB_SERVER 403 Forbidden
show less
Port Scan
🇩🇪
palla89
2026-11-06 03:11:24
UTC ·
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.236.186.191 (TW/Taiwan/191.186.236.35.bc.googleusercontent.com)
SQL Injection
🇩🇪
macrob
2026-11-06 02:04:55
UTC ·
(4 days ago)
2026/11/06 02:04:51 [error] 2789056#2789056: *7039117 access forbidden by rule, client: 35.236.186.191, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "vault.fastcredit.net.ua"
2026/11/06 02:04:51 [error] 2789056#2789056: * ...
show more
2026/11/06 02:04:51 [error] 2789056#2789056: *7039117 access forbidden by rule, client: 35.236.186.191, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "vault.fastcredit.net.ua"
2026/11/06 02:04:51 [error] 2789056#2789056: *7039119 access forbidden by rule, client: 35.236.186.191, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "vault.fastcredit.net.ua"
2026/11/06 02:04:52 [error] 2789053#2789053: *7039168 access forbidden by rule, client: 35.236.186.191, server: fn.binixo.es, request: "GET /.env.common HTTP/2.0", host: "vault.fastcredit.net.ua"
...
show less
Web App Attack
🇬🇧
[email protected]
2026-11-06 00:19:33
UTC ·
(4 days ago)
35.236.186.191 - - [06/Nov/2026:00:19:26 +0000] "GET /sitemap.xml HTTP/1.1" 404 585 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.236.186.191 - - [06/Nov/2026:00:19:32 +0000] ...
show more
35.236.186.191 - - [06/Nov/2026:00:19:26 +0000] "GET /sitemap.xml HTTP/1.1" 404 585 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.236.186.191 - - [06/Nov/2026:00:19:32 +0000] "GET /api/.env/public/.env HTTP/1.1" 404 4371 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
35.236.186.191 - - [06/Nov/2026:00:19:32 +0000] "GET /....//....//....//..../.env HTTP/1.1" 404 585 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Web App Attack