๐ณ๐ฑ
Alt255
2026-10-26 10:01:42
(18 hours ago)
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.86.152.92 - - [26/Oct/2026:11:01:25 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-26 09:51:06
(18 hours ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-26 09:50:03
(18 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฌ๐ง
andypiper
2026-10-26 02:01:47
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-10-26 01:13:25
(1 day ago)
Scanning for exposed credentials and private keys
Hacking
๐บ๐ธ
mnsf
2026-10-25 23:05:03
(1 day ago)
Too many Status 40X (24)
Scanning/Probing (24)
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-10-25 08:34:54
(1 day ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | src_port: 39974
show less
Hacking
Web App Attack
Anonymous
2026-10-25 05:07:44
(1 day ago)
34.86.152.92 - - [25/Oct/2026:00:07:39 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macinto ...
show more
34.86.152.92 - - [25/Oct/2026:00:07:39 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.70.135.118
34.86.152.92 - - [25/Oct/2026:00:07:39 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.70.135.118
34.86.152.92 - - [25/Oct/2026:00:07:40 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.70.135.118
34.86.152.92 - - [25/Oct/2026:00:07:40 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.70.135.118
34.86.152.92 - - [25/Oct/2026:00:07:40 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Int
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
ambor
2026-10-25 03:37:56
(2 days ago)
Honeypot triggered on tcpdata.com - Attempted to access /.git/config (git_probe). User-Agent: Mozill ...
show more
Honeypot triggered on tcpdata.com - Attempted to access /.git/config (git_probe). User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-25 01:46:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.86.152.92 (92.152.86.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.152.92 (92.152.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 21:46:43.457680 2026] [security2:error] [pid 18872:tid 18872] [client 34.86.152.92:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tcid3400.atlascoombs.com"] [uri "/.git/config"] [unique_id "at1fg05DNhaPn9_vB6SKVwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
mgarofano80
2026-10-25 00:01:09
(2 days ago)
Brute-Force
Web App Attack
๐ท๐ธ
pexodelic
2026-10-24 09:42:25
(2 days ago)
Automated report from web, SSH and FTP server logs: 350 requests probing for exposed secrets (.env, ...
show more
Automated report from web, SSH and FTP server logs: 350 requests probing for exposed secrets (.env, .git, config files). First reported 2026-10-24 08:35 UTC, last reported 2026-10-24 09:35 UTC; counts cover the current log rotation window.
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-24 09:38:01
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.86.152.92 (92.152.86.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.152.92 (92.152.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 05:37:56.156019 2026] [security2:error] [pid 27749:tid 27749] [client 34.86.152.92:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mail-pmg.com"] [uri "/.git/config"] [unique_id "atx8dPvsTEIute_YqwmlxQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
ICS Labs
2026-10-24 00:05:01
(3 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-24 UTC.
Brute-Force
Exploited Host
๐บ๐ธ
dot.mg
2026-10-23 09:04:02
(3 days ago)
Bad behaviour
Web Spam