|
🇫🇷
Catalin Negru
|
|
2026-09-06 10:40:32,484 fail2ban.actions [1796604]: NOTICE [apache-security] Ban 35.236.27.7
2026-09-06 10:40:32,689 fail2ban.actions [1796604]: NOTICE [apache-404] Ban 35.236.27.7
2026-09-06 10:40:32,703 fail2ban.actions [1796 ...
show more
2026-09-06 10:40:32,484 fail2ban.actions [1796604]: NOTICE [apache-security] Ban 35.236.27.7
2026-09-06 10:40:32,689 fail2ban.actions [1796604]: NOTICE [apache-404] Ban 35.236.27.7
2026-09-06 10:40:32,703 fail2ban.actions [1796604]: NOTICE [apache-scan] Ban 35.236.27.7
2026-09-06 10:40:32,907 fail2ban.actions [1796604]: NOTICE [apache-dirscan] Ban 35.236.27.7
2026-09-06 10:40:32,907 fail2ban.actions [1796604]: NOTICE [web-scanner] Ban 35.236.27.7
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
Catalin Negru
|
|
2026-09-06 10:40:32,484 fail2ban.actions [1796604]: NOTICE [apache-security] Ban 35.236.27.7
2026-09-06 10:40:32,689 fail2ban.actions [1796604]: NOTICE [apache-404] Ban 35.236.27.7
2026-09-06 10:40:32,703 fail2ban.actions [1796 ...
show more
2026-09-06 10:40:32,484 fail2ban.actions [1796604]: NOTICE [apache-security] Ban 35.236.27.7
2026-09-06 10:40:32,689 fail2ban.actions [1796604]: NOTICE [apache-404] Ban 35.236.27.7
2026-09-06 10:40:32,703 fail2ban.actions [1796604]: NOTICE [apache-scan] Ban 35.236.27.7
2026-09-06 10:40:32,907 fail2ban.actions [1796604]: NOTICE [apache-dirscan] Ban 35.236.27.7
2026-09-06 10:40:32,907 fail2ban.actions [1796604]: NOTICE [web-scanner] Ban 35.236.27.7
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
Catalin Negru
|
|
2026-09-06 10:40:32,484 fail2ban.actions [1796604]: NOTICE [apache-security] Ban 35.236.27.7
2026-09-06 10:40:32,689 fail2ban.actions [1796604]: NOTICE [apache-404] Ban 35.236.27.7
2026-09-06 10:40:32,703 fail2ban.actions [1796 ...
show more
2026-09-06 10:40:32,484 fail2ban.actions [1796604]: NOTICE [apache-security] Ban 35.236.27.7
2026-09-06 10:40:32,689 fail2ban.actions [1796604]: NOTICE [apache-404] Ban 35.236.27.7
2026-09-06 10:40:32,703 fail2ban.actions [1796604]: NOTICE [apache-scan] Ban 35.236.27.7
2026-09-06 10:40:32,907 fail2ban.actions [1796604]: NOTICE [apache-dirscan] Ban 35.236.27.7
2026-09-06 10:40:32,907 fail2ban.actions [1796604]: NOTICE [web-scanner] Ban 35.236.27.7
...
show less
|
Brute-Force
Web App Attack
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇳🇿
Antinson
|
|
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
|
Bad Web Bot
|
|
🇩🇪
big-cloud.nl
|
|
Try to access /site/.git/config
|
Web App Attack
|
|
Anonymous
|
|
Web scanner: GET /api/.git/config
|
Web App Attack
Hacking
|
|
🇨🇦
TechnoSolutions CL
|
|
35.236.27.7 - - [06/Sep/2026:03:10:40 +0000] "GET /var/www/.git/config HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
35.236.27.7 - - [06/Sep/2026:03:10:41 +0000] "GET /www/.git/config HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
...
|
Hacking
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.236.27.7 (7.27.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:59:41.250028 2026] [security2:error] [pid 31381:tid 3138 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.27.7 (7.27.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:59:41.250028 2026] [security2:error] [pid 31381:tid 31381] [client 35.236.27.7:34938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.allisonannestudios.com"] [uri "/api/.git/config"] [unique_id "apzJDf2RLR3ZcsPA1k705wAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-04.
|
Web App Attack
SSH
Hacking
|
|
🇧🇾
lns.bz
|
|
Too many 404 requests [BY]
|
Web App Attack
|
|
🇩🇪
Enno
|
|
X09::Fail2Ban: automated bot scanning / credential probing detected.
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.236.27.7 (7.27.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:15:03.833435 2026] [security2:error] [pid 21107:tid 2110 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.27.7 (7.27.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:15:03.833435 2026] [security2:error] [pid 21107:tid 21107] [client 35.236.27.7:51264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rongrapes.com"] [uri "/.env.local"] [unique_id "aprgd0M3KoRPJ_k5fiaZ6gAAABg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 35.236.27.7 (7.27.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:48:55.508316 2026] [security2:error] [pid 15076:tid 1507 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.236.27.7 (7.27.236.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:48:55.508316 2026] [security2:error] [pid 15076:tid 15076] [client 35.236.27.7:55482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clayrivers.com"] [uri "/.env.bak"] [unique_id "apraVx7rK_D-oVjX4Q5HDwAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇨🇿
ddw
|
|
ModSecurity detection - Rules: 949110(Inbound Anomaly Score Exceeded (Total Score: 10))
|
Web App Attack
|