๐ฉ๐ช
EGP Abuse Dept
2026-09-16 07:21:04
(18 minutes ago)
Scanning for web/db/file exploits on www.snijderinstall.nl
SQL Injection
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-16 07:20:03
(19 minutes ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
Anonymous
2026-09-16 04:43:29
(2 hours ago)
35.244.125.86 - - [16/Sep/2026:06:42:56 +0200] "GET /.git/config HTTP/1.1" 403 609 "-" "Mozilla/5.0 ...
show more
35.244.125.86 - - [16/Sep/2026:06:42:56 +0200] "GET /.git/config HTTP/1.1" 403 609 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.244.125.86 - - [16/Sep/2026:06:42:56 +0200] "GET /.env HTTP/1.1" 403 609 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.244.125.86 - - [16/Sep/2026:06:42:57 +0200] "GET /.env.local HTTP/1.1" 403 609 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.244.125.86 - - [16/Sep/2026:06:42:57 +0200] "GET /.env.production HTTP/1.1" 403 609 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.244.125.86 - - [16/Sep/2026:06:42:57 +0200] "GET /.env.staging HTTP/1.1" 403 609 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.244.125.86 - - [16/Sep/2026:06:42:58 +0200] "
...
show less
DDoS Attack
๐ซ๐ท
dynamix
2026-09-16 03:55:01
(3 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 02:53:04
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.125.86 (86.125.244.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.125.86 (86.125.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:52:59.525077 2026] [security2:error] [pid 9478:tid 9478] [client 35.244.125.86:45786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.snappsferry.daisydoesoap.com"] [uri "/.git/config"] [unique_id "aqoEizokgPpXnNfg-rWD6QAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-16 01:16:44
(6 hours ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
dot.mg
2026-09-15 22:31:02
(9 hours ago)
Bad behaviour
Web Spam
๐ธ๐ช
vaia.cloud
2026-09-15 22:25:02
(9 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
๐บ๐ธ
entangled_mongoose
2026-09-15 21:53:12
(9 hours ago)
Probed /info.php.
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-15 19:11:35
(12 hours ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.244.125.86 - - [15/Sep/2026:21:11:34 +0200] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-15 18:45:03
(12 hours ago)
suspicious request in access.log
Web App Attack
๐จ๐ญ
4server
2026-09-15 18:16:01
(13 hours ago)
[TueSep1520:15:56.5052262026][security2:error][pid1820859:tid1820869][client35.244.125.86:0]ModSecur ...
show more
[TueSep1520:15:56.5052262026][security2:error][pid1820859:tid1820869][client35.244.125.86:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.smservizi.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"aqmLXJKwCWTMHjTnODiT4QAAAAE\"]
show less
Hacking
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-09-15 18:11:52
(13 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐ง๐ท
dominioz
2026-09-15 17:17:34
(14 hours ago)
2026-09-15 17:16:46 GET /.env - - 35.244.125.86 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit ...
show more
2026-09-15 17:16:46 GET /.env - - 35.244.125.86 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 603
2026-09-15 17:16:48 GET /.env.local - - 35.244.125.86 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 615
2026-09-15 17:16:49 GET /.env.production - - 35.244.125.86 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 625
2026-09-15 17:16:50 GET /.env.staging - - 35.244.125.86 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 619
2026-09-15 17:16:52 GET /.env.development - - 35.244.125.86 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 627
2026-09-15 17:16:53 GET /.env.test - - 35.244.125.86 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTM
...
show less
Web App Attack
Anonymous
2026-09-15 16:42:55
(14 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack