πΈπͺ
Mailz1
2026-10-26 06:27:12
(3 hours ago)
35.241.115.52 - - [26/Oct/2026:07:27:11 +0100] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ...
show more
35.241.115.52 - - [26/Oct/2026:07:27:11 +0100] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Anonymous
2026-10-26 06:20:04
(3 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
π§π·
radardatelecom
2026-10-25 16:51:02
(17 hours ago)
Blocked by Radar da Telecom firewall β abuseipdb
Bad Web Bot
Web App Attack
π«π·
masterguru
2026-10-25 15:12:43
(19 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
Anonymous
2026-10-25 15:02:12
(19 hours ago)
35.241.115.52 - - [25/Oct/2026:17:02:07 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows N ...
show more
35.241.115.52 - - [25/Oct/2026:17:02:07 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.115.52 - - [25/Oct/2026:17:02:07 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.115.52 - - [25/Oct/2026:17:02:07 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.115.52 - - [25/Oct/2026:17:02:08 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.115.52 - - [25/Oct/2026:17:02:08 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.241.115.52 - - [25/Oct/2026:1
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 14:34:50
(19 hours ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
π³π±
Alt255
2026-10-25 13:46:52
(20 hours ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.241.115.52 - - [22/Oct/2026:12:46:05 +0200] "GET /.git/config HTTP/1.1" 301 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 08:33:30
(1 day ago)
35.241.115.52 - - [25/Oct/2026:16:33:29 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ...
show more
35.241.115.52 - - [25/Oct/2026:16:33:29 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
π©πͺ
marten_o
2026-10-25 06:00:45
(1 day ago)
35.241.115.52 - - [25/Oct/2026:07:00:44 +0100] "GET /tmp/phpinfo.php HTTP/1.1" 404 97822 "-" "Mozill ...
show more
35.241.115.52 - - [25/Oct/2026:07:00:44 +0100] "GET /tmp/phpinfo.php HTTP/1.1" 404 97822 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 327 99124
...
show less
Web App Attack
πΈπͺ
vaia.cloud
2026-10-25 06:00:03
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
Anonymous
2026-10-25 03:10:04
(1 day ago)
Bot / scanning and/or hacking attempts: GET /config/app/.env HTTP/1.1, GET /phpinfo.php HTTP/1.1, GE ...
show more
Bot / scanning and/or hacking attempts: GET /config/app/.env HTTP/1.1, GET /phpinfo.php HTTP/1.1, GET /api/staging/.env HTTP/1.1, GET /debug.php HTTP/1.1, GET /dev/phpinfo.php HTTP/1.1, GET /test/phpinfo.php HTTP/1.1, GET /admin/phpinfo.php HTTP/1.1
show less
Hacking
Web App Attack
πͺπΈ
robotstxt
2026-10-25 02:25:08
(1 day ago)
35.241.115.52 - - [25/Oct/2026:02:24:08 +0000] "GET /.env HTTP/1.1" 403 9511 "-" rt="0.984" "Mozilla ...
show more
35.241.115.52 - - [25/Oct/2026:02:24:08 +0000] "GET /.env HTTP/1.1" 403 9511 "-" rt="0.984" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" h="www.surefarmproject.eu" sn="www.surefarmproject.eu" ru="/.env" u="/index.php" ucs="-" ua="unix:/var/run/php/surefarmproject82.sock" us="404" uct="0.000" urt="0.984"
35.241.115.52 - - [25/Oct/2026:02:24:08 +0000] "GET /.env.local HTTP/1.1" 403 9511 "-" rt="0.446" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" h="www.surefarmproject.eu" sn="www.surefarmproject.eu" ru="/.env.local" u="/index.php" ucs="-" ua="unix:/var/run/php/surefarmproject82.sock" us="404" uct="0.000" urt="0.446"
35.241.115.52 - - [25/Oct/2026:02:24:09 +0000] "GET /.env.production HTTP/1.1" 403 9511 "-" rt="0.424" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3
...
show less
Web App Attack
π¦πΊ
2000cn.com.au
2026-10-25 01:17:18
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
π³π±
GabrielJST
2026-10-25 00:30:55
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 35.241.115.52 (HK/Hong Kong/52.115.241. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.241.115.52 (HK/Hong Kong/52.115.241.35.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
π¬π§
consul.to
2026-10-24 21:22:26
(1 day ago)
Web attack/malicious scanning detected
Web App Attack