🇦🇺
neilwal
2026-11-08 04:18:07
UTC ·
(4 hours ago)
Web Probe (443): teamhummingbird.neilwallace.au:443 35.246.82.244 - - [08/Nov/2026:15:18:06 +1100] "GET /.git/config HTTP/1.1" 401 813 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
teamhum ...
show more
Web Probe (443): teamhummingbird.neilwallace.au:443 35.246.82.244 - - [08/Nov/2026:15:18:06 +1100] "GET /.git/config HTTP/1.1" 401 813 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
teamhummingbird.neilwallace.au:443 35.246.82.244 - - [08/Nov/2026:15:18:07 +1100] "GET /.env HTTP/1.1" 401 813 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
teamhummingbird.neilwallace.au:443 35.246.82.244 - - [08/Nov/2026:15:18:07 +1100] "GET /.env.local HTTP/1.1" 401 813 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
Anonymous
2026-11-07 13:05:56
UTC ·
(19 hours ago)
Pay by Jag firewall: repeated blocked web requests from this address across protected sites; automatic ban.
Bad Web Bot
Web App Attack
Anonymous
2026-11-07 11:20:12
UTC ·
(21 hours ago)
35.246.82.244 - - [07/Nov/2026:05:20:09 -0600] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.216.44
35.246.82.244 - - [07/Nov/2026:05:20:09 -0600] "GET ...
show more
35.246.82.244 - - [07/Nov/2026:05:20:09 -0600] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.216.44
35.246.82.244 - - [07/Nov/2026:05:20:09 -0600] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.216.44
35.246.82.244 - - [07/Nov/2026:05:20:09 -0600] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.216.44
35.246.82.244 - - [07/Nov/2026:05:20:09 -0600] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.216.44
35.246.82.244 - - [07/Nov/2026:05:20:10 -0600] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-07 05:35:56
UTC ·
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇲🇽
octageeks.com
2026-11-07 05:14:47
UTC ·
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇩🇪
McClay
2026-11-07 04:44:19
UTC ·
(1 day ago)
Illegal access attempt:35.246.82.244 - - [07/Nov/2026:05:44:17 +0100] "GET /.git/config HTTP/1.1" 401 1129 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-11-07 03:00:03
UTC ·
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
Anonymous
2026-11-07 01:43:17
UTC ·
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
paissangroup
2026-11-07 00:54:50
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Alt255
2026-11-07 00:29:45
UTC ·
(1 day ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.246.82.244 - - \[07/Nov/2026:01:29:38 +0100\] "GET /.git/config HTTP/1.1" 301 618 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 35.246.82.244 - - \[07/Nov/2026:01:29:38 +0100\] "GET /.git/config HTTP/1.1" 301 618 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-11-06 22:30:47
UTC ·
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-06 20:24:18
UTC ·
(1 day ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.246.82.244 - - [06/Nov/2026:21:23:58 +0100] "GET /.git/config HTTP/1.1" 301 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.246.82.244 - - [06/Nov/2026:21:23:58 +0100] "GET /.git/config HTTP/1.1" 301 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Laplus
2026-11-06 17:41:27
UTC ·
(1 day ago)
35.246.82.244 - - [06/Nov/2026:18:41:25 +0100] "GET /.git/config HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
35.246.82.244 - - [06/Nov/2026:18:41:25 +0100] "GET /.e ...
show more
35.246.82.244 - - [06/Nov/2026:18:41:25 +0100] "GET /.git/config HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
35.246.82.244 - - [06/Nov/2026:18:41:25 +0100] "GET /.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
35.246.82.244 - - [06/Nov/2026:18:41:25 +0100] "GET /.env.local HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
35.246.82.244 - - [06/Nov/2026:18:41:25 +0100] "GET /.env.production HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
35.246.82.244 - - [06/Nov/2026:18:41:25 +0100] "GET /.env.staging HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
35.246.82.244 - - [06/Nov/20
...
show less
Hacking
Web App Attack
🇬🇧
consul.to
2026-11-06 17:15:22
UTC ·
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
ut-addicted.com
2026-11-06 11:04:29
UTC ·
(1 day ago)
\[Fri Nov 06 12:04:26.906752 2026\] \[:error\] \[pid 17578:tid 140077254539008\] \[client 35.246.82.244:52664\] \[client 35.246.82.244\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/loc ...
show more
\[Fri Nov 06 12:04:26.906752 2026\] \[:error\] \[pid 17578:tid 140077254539008\] \[client 35.246.82.244:52664\] \[client 35.246.82.244\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "www.ut-addicted.com"\] \[uri "/.git/config"\] \[unique_id "au20OoWXjugKgq51ILAlMAAAAMg"\]
show less
Brute-Force
Web App Attack