🇳🇱
homeshowdomain.nl
2026-11-03 23:01:19
UTC ·
(3 days ago)
Auto-ban: >3000 req/min op 2026-11-03
Web App Attack
SSH
Hacking
🇩🇪
Live Home Cams
2026-11-03 18:16:53
UTC ·
(3 days ago)
WebApp brute force attack detected. Multiple file scanning attempts from 35.241.227.7. Detected by fail2ban.
Web App Attack
Brute-Force
2026-11-03 12:12:28
UTC ·
(3 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
2026-11-03 09:06:38
UTC ·
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
MarkGGN
2026-11-03 07:25:35
UTC ·
(3 days ago)
Web attack. 35.241.227.7 - - [03/Nov/2026:08:25:34 +0100] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.241.227.7 - - [03/Nov/2026:08:25:34 ...
show more
Web attack. 35.241.227.7 - - [03/Nov/2026:08:25:34 +0100] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 35.241.227.7 - - [03/Nov/2026:08:25:34 +0100] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
🇳🇱
Alt255
2026-11-02 19:20:13
UTC ·
(4 days ago)
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.241.227.7 - - [02/Nov/2026:20:19:57 +0100] "GET /.git/config HTTP/1.1" 301 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ...
show more
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.241.227.7 - - [02/Nov/2026:20:19:57 +0100] "GET /.git/config HTTP/1.1" 301 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-11-02 16:33:06
UTC ·
(4 days ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇷🇺
Deynekin.com
2026-11-02 14:32:09
UTC ·
(4 days ago)
Automated fail2ban report from server 176.99.5.35.
Attack type: web application vulnerability scanning/exploitation attempts (jails: nginx-attack-scan).
Observed: 2026-11-02T17:32:09+03:00.
Detections: 1 ban event(s), 5 failed attempts.
Ban duration: ...
show more
Automated fail2ban report from server 176.99.5.35.
Attack type: web application vulnerability scanning/exploitation attempts (jails: nginx-attack-scan).
Observed: 2026-11-02T17:32:09+03:00.
Detections: 1 ban event(s), 5 failed attempts.
Ban duration: 1d.
Sample requests/indicators:
GET /.git/config -> 200
GET /.env -> 200
GET /.env.local -> 200
GET /.env.production -> 200
No personal data included.
--
Reported via Fail2Ban_AbuseIPDB Monitor: https://github.com/paulmann/Fail2Ban_AbuseIPDB
show less
Bad Web Bot
Web App Attack
🇩🇪
tg_de
2026-11-02 12:08:04
UTC ·
(4 days ago)
165 attempts since 02.11.2026 12:07:55 UTC - last search for: /smtp/phpinfo.php
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 10:48:19
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.241.227.7 (7.227.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:48:16.772430 2026] [security2:error] [pid 19525:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.227.7 (7.227.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:48:16.772430 2026] [security2:error] [pid 19525:tid 19525] [client 35.241.227.7:55160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gwenwaltersartrep.com"] [uri "/.git/config"] [unique_id "auhqcPZgUi-4xoYLdh2nFwAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 06:54:25
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.241.227.7 (7.227.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 01:54:19.055200 2026] [security2:error] [pid 27837:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.227.7 (7.227.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 01:54:19.055200 2026] [security2:error] [pid 27837:tid 27837] [client 35.241.227.7:58286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gayadam.com"] [uri "/.git/config"] [unique_id "augzm4HuTVqmWXy0OGjvvgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
