๐บ๐ธ
gu-alvareza
2026-06-03 07:05:29
(14 hours ago)
Spring.Boot.Actuator.Unauthorized.Access
Brute-Force
๐ซ๐ท
dynamix
2026-06-03 06:38:31
(15 hours ago)
Multiple WAF Violations
Web App Attack
๐ง๐พ
lns.bz
2026-06-03 06:32:42
(15 hours ago)
Too many 404 requests [BY]
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 06:21:14
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 20.119.103.1 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 20.119.103.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 02:21:06.455795 2026] [security2:error] [pid 29574:tid 29574] [client 20.119.103.1:28883] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.205"] [uri "/.git/HEAD"] [unique_id "ah_H0l5V3NP4B937xm_yXwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TJTheSpy
2026-06-03 06:06:35
(15 hours ago)
20.119.103.1 - - [03/Jun/2026:06:06:28 +0000] "GET /.git/config HTTP/1.1" 404 2208 "-" "Mozilla/5.0 ...
show more
20.119.103.1 - - [03/Jun/2026:06:06:28 +0000] "GET /.git/config HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
20.119.103.1 - - [03/Jun/2026:06:06:29 +0000] "GET /.env HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
20.119.103.1 - - [03/Jun/2026:06:06:31 +0000] "GET /.env.local HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
20.119.103.1 - - [03/Jun/2026:06:06:32 +0000] "GET /.env.production HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
20.119.103.1 - - [03/Jun/2026:06:06:34 +0000] "GET /.env.backup HTTP/1.1" 404 2208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
๐จ๐ฟ
ptlab
2026-06-03 06:00:05
(15 hours ago)
Detected env_leak attack from WP-host.
Hacking
Web App Attack
๐ฎ๐ช
Jim Keir
2026-06-03 05:51:48
(15 hours ago)
2026-06-03 05:51:47 20.119.103.1 File scanning, blocking 20.119.103.1 for 5 minutes
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-03 05:42:04
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 20.119.103.1 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 20.119.103.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 03 01:41:59.648023 2026] [security2:error] [pid 3721:tid 3721] [client 20.119.103.1:29199] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.250"] [uri "/.git/HEAD"] [unique_id "ah--p_JFjLrngke36s69aQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Mykola Spesivtsev
2026-06-03 05:26:32
(16 hours ago)
HTTP Tarpit detected bot activity:TargetPort:80, Path:/.git/HEAD, Method:GET, UA:Mozilla/5.0 (Macint ...
show more
HTTP Tarpit detected bot activity:TargetPort:80, Path:/.git/HEAD, Method:GET, UA:Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4
show less
Port Scan
Web App Attack
Bad Web Bot
๐ง๐ท
SOC Blue Team
2026-06-03 05:26:10
(16 hours ago)
IPs get by Hunting on SIEM
Phishing
Web Spam
Port Scan
Hacking
๐บ๐ธ
MPL
2026-06-03 03:57:26
(17 hours ago)
tcp port scan (4 or more attempts)
Port Scan
๐ท๐ธ
Scan
2026-06-03 02:05:35
(19 hours ago)
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan
Hacking
๐บ๐ธ
RAP
2026-06-03 01:21:49
(20 hours ago)
2026-06-03 01:21:49 UTC Unauthorized activity to TCP port 8080. Web App
Port Scan
Web App Attack
๐ฏ๐ต
mkaraki
2026-06-03 00:12:06
(21 hours ago)
1780445525 # Service_probe # SIGNATURE_SEND # source_ip:20.119.103.1 # dst_port:8443
...
Port Scan
๐ซ๐ฎ
6kilowatti
2026-06-02 23:35:00
(22 hours ago)
2026-06-03T02:34:59.502322+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00: ...
show more
2026-06-03T02:34:59.502322+03:00 mummo kernel: [UFW BLOCK] IN=enp0s25 OUT= MAC=6c:62:6d:d6:a5:bc:00:00:5e:00:01:58:08:00 SRC=20.119.103.1 DST=83.148.240.21 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=21653 DF PROTO=TCP SPT=34880 DPT=2086 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan