๐ฉ๐ช
wsyq
2026-05-09 02:25:03
(3 months ago)
Fail2Ban - \[NGINX\]40x-Forcing to access a restricted resource
...
Bad Web Bot
Web App Attack
๐บ๐ธ
jkhorvath.com
2026-05-07 04:32:15
(3 months ago)
Request for URL /.s3cfg
Phishing
Brute-Force
Web App Attack
๐จ๐ฆ
Slackin' Jack
2026-05-06 23:59:04
(3 months ago)
Unauthorized scraper/crawler on port 80/443. (152.42.161.26)
Bad Web Bot
๐ฌ๐ง
andypiper
2026-05-06 01:02:11
(3 months ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐จ๐ณ
ThreatBook.io
2026-05-06 00:13:34
(3 months ago)
ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/152.42.161.26
2026-05-0 ...
show more
ThreatBook Intelligence: Edu,Zombie more details on https://threatbook.io/ip/152.42.161.26
2026-05-05 00:00:34 /s3cmd.ini
2026-05-05 00:00:29 /.passwd-s3fs
2026-05-05 00:00:24 /.s3cfg
show less
Web App Attack
๐ง๐ท
Peregrine
2026-05-04 03:08:51
(3 months ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: - 152.42.161.26 - - [01/May/2026:19:41:22 -0300] "GET /.e ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: - 152.42.161.26 - - [01/May/2026:19:41:22 -0300] "GET /.env HTTP/2.0" 404 414
- 152.42.161.26 - - [01/May/2026:19:41:23 -0300] "GET /.env.backup HTTP/2.0" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-05-03 03:08:48
(3 months ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: - 152.42.161.26 - - [01/May/2026:19:41:22 -0300] "GET /.e ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: - 152.42.161.26 - - [01/May/2026:19:41:22 -0300] "GET /.env HTTP/2.0" 404 414
- 152.42.161.26 - - [01/May/2026:19:41:23 -0300] "GET /.env.backup HTTP/2.0" 404 414
show less
Bad Web Bot
๐ง๐ท
Peregrine
2026-05-01 22:41:26
(3 months ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: - 152.42.161.26 - - [01/May/2026:19:41:22 -0300] "GET /.e ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: - 152.42.161.26 - - [01/May/2026:19:41:22 -0300] "GET /.env HTTP/2.0" 404 414
- 152.42.161.26 - - [01/May/2026:19:41:23 -0300] "GET /.env.backup HTTP/2.0" 404 414
show less
Bad Web Bot
๐ง๐ท
SOC PR
2026-05-01 10:24:11
(3 months ago)
IPS: Sensitive Configuration File Disclosure.
Hacking
๐ฉ๐ช
Ba-Yu
2026-05-01 03:09:33
(3 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-05-01 02:42:49
(3 months ago)
2026/05/01 03:42:27 [error] 3577296#3577296: *3811731 access forbidden by rule, client: 152.42.161.2 ...
show more
2026/05/01 03:42:27 [error] 3577296#3577296: *3811731 access forbidden by rule, client: 152.42.161.26, server: [redacted], request: "GET /.env HTTP/2.0", host: "[redacted]"
152.42.161.26 - - [01/May/2026:03:42:27 +0100] "GET /.env HTTP/2.0" 403 1166 "-" "Go-http-client/2.0"
2026/05/01 03:42:47 [error] 3577296#3577296: *3811731 access forbidden by rule, client: 152.42.161.26, server: [redacted], request: "GET /api/.env HTTP/2.0", host: "[redacted]"
show less
Brute-Force
Web App Attack
๐บ๐ธ
ShadowWhisperer
2026-04-30 21:30:20
(3 months ago)
HTTPS GET /.env UA: Go-http-client/1.1
Web App Attack
๐ช๐น
AlienBase
2026-04-30 21:24:00
(3 months ago)
152.42.161.26 - - [30/Apr/2026:17:42:35 +0000] "GET /.s3cfg HTTP/2.0" 200 1047 "-" "Go-http-client/2 ...
show more
152.42.161.26 - - [30/Apr/2026:17:42:35 +0000] "GET /.s3cfg HTTP/2.0" 200 1047 "-" "Go-http-client/2.0"
152.42.161.26 - - [30/Apr/2026:17:42:36 +0000] "GET /.passwd-s3fs HTTP/2.0" 200 1047 "-" "Go-http-client/2.0"
152.42.161.26 - - [30/Apr/2026:17:42:38 +0000] "GET /s3cmd.ini HTTP/2.0" 200 1047 "-" "Go-http-client/2.0"
152.42.161.26 - - [30/Apr/2026:17:42:40 +0000] "GET /.env HTTP/2.0" 200 1047 "-" "Go-http-client/2.0"
152.42.161.26 - - [30/Apr/2026:17:42:42 +0000] "GET /.env.backup HTTP/2.0" 200 1047 "-" "Go-http-client/2.0"
152.42.161.26 - - [30/Apr/2026:17:42:43 +0000] "GET /.env.bak HTTP/2.0" 200 1047 "-" "Go-http-client/2.0"
152.42.161.26 - - [30/Apr/2026:17:42:45 +0000] "GET /.env.config HTTP/2.0" 200 1047 "-" "Go-http-client/2.0"
152.42.161.26 - - [30/Apr/2026:17:42:47 +0000] "GET /.env.dev HTTP/2.0" 200 1047 "-" "Go-http-client/2.0"
152.42.161.26 - - [30/Apr/2026:17:42:49 +0000] "GET /.env.live HTTP/2.0" 200 1047 "-" "Go-http-client/2.0"
show less
Bad Web Bot
Web App Attack
Hacking
๐ฌ๐ง
Apache
2026-04-30 20:15:36
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 152.42.161.26 (SG/Singapore/-): 5 in the last 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 152.42.161.26 (SG/Singapore/-): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
Anonymous
2026-04-30 19:54:13
(3 months ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force