ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/143.198.7.79
2025-12-2 ...
show moreThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/143.198.7.79
2025-12-29 07:30:33 /.git/config
2025-12-29 08:25:33 /.git/config
show less
143.198.7.79 - - [29/Dec/2025:10:38:15 +0100] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 ( ...
show more143.198.7.79 - - [29/Dec/2025:10:38:15 +0100] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
143.198.7.79 - - [29/Dec/2025:10:38:15 +0100] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Web App Attack
Anonymous
Dec 29 08:38:41 mail2 Nextcloud[177824]: {"reqId":"aVIwAZFNe9Y6tgx00v0X8QAAAIE","level":1,"time":"20 ...
show moreDec 29 08:38:41 mail2 Nextcloud[177824]: {"reqId":"aVIwAZFNe9Y6tgx00v0X8QAAAIE","level":1,"time":"2025-12-29T07:38:41+00:00","remoteAddr":"143.198.7.79","user":"--","app":"core","method":"GET","url":"/.git/config","message":"Trusted domain error. \"143.198.7.79\" tried to access using \"178.254.3.7\" as host.","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36","version":"31.0.9.1","data":{"app":"core"}}
Dec 29 10:23:01 mail2 Nextcloud[177848]: {"reqId":"aVJIdZFNe9Y6tgx00v0ZQQAAAI4","level":1,"time":"2025-12-29T09:23:01+00:00","remoteAddr":"143.198.7.79","user":"--","app":"core","method":"GET","url":"/.git/config","message":"Trusted domain error. \"143.198.7.79\" tried to access using \"178.254.3.7\" as host.","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36","version":"31.0.9.1","data":{"app":"core"}}
...
show less
Brute-Force
Web App Attack
Anonymous
Dec 29 06:30:22 mail2 Nextcloud[28368]: {"reqId":"aVIR7gjTRorr5ugIVDdjmAAAAQA","level":1,"time":"202 ...
show moreDec 29 06:30:22 mail2 Nextcloud[28368]: {"reqId":"aVIR7gjTRorr5ugIVDdjmAAAAQA","level":1,"time":"2025-12-29T05:30:22+00:00","remoteAddr":"143.198.7.79","user":"--","app":"core","method":"GET","url":"/.git/config","message":"Trusted domain error. \"143.198.7.79\" tried to access using \"178.254.3.7\" as host.","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36","version":"31.0.9.1","data":{"app":"core"}}
Dec 29 07:27:25 mail2 Nextcloud[177824]: {"reqId":"aVIfTQjTRorr5ugIVDdkJAAAAQs","level":1,"time":"2025-12-29T06:27:25+00:00","remoteAddr":"143.198.7.79","user":"--","app":"core","method":"GET","url":"/.git/config","message":"Trusted domain error. \"143.198.7.79\" tried to access using \"178.254.3.7\" as host.","userAgent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36","version":"31.0.9.1","data":{"app":"core"}}
Dec 29 08:02:15 mail2 Nextcloud[28266]: {"reqId":
...
show less
[arem1] 2025-12-29 03:10:47, Client: 143.198.7.79, Protocol: 6, Unauthorized activity to HTTP: GET / ...
show more[arem1] 2025-12-29 03:10:47, Client: 143.198.7.79, Protocol: 6, Unauthorized activity to HTTP: GET /.git/config
show less