๐ฐ๐ท
stypr
2026-10-22 01:26:11
(1 day ago)
Malicious activity detected on HTTP/HTTPS
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
kosada.com
2026-10-21 23:36:13
(1 day ago)
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla ...
show more
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-21 22:23:22
(1 day ago)
Brute-Force
Web App Attack
๐ง๐ท
dominioz
2026-10-21 11:36:30
(1 day ago)
2026-10-21 11:35:40 GET /.git/config - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+Apple ...
show more
2026-10-21 11:35:40 GET /.git/config - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5142
2026-10-21 11:35:42 GET /.env - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5148
2026-10-21 11:35:42 GET /.env - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5148
2026-10-21 11:35:43 GET /.env.local - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5305
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-21 02:16:40
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
thesimonmanuel
2026-10-21 01:48:34
(2 days ago)
34.175.0.185 - - [21/Oct/2026:07:18:33 +0530] "GET /.git/config HTTP/2.0" 404 13392 "-" "Mozilla/5.0 ...
show more
34.175.0.185 - - [21/Oct/2026:07:18:33 +0530] "GET /.git/config HTTP/2.0" 404 13392 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-21 00:48:42
(2 days ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.175.0.185 - - [21/Oct/2026:02:48:23 +0200] "GET /.git/config HTTP/1.1" 301 621 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ง๐ท
dominioz
2026-10-21 00:38:45
(2 days ago)
2026-10-21 00:37:59 GET /.git/config - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+ ...
show more
2026-10-21 00:37:59 GET /.git/config - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5142
2026-10-21 00:38:00 GET /.env - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5148
2026-10-21 00:38:01 GET /.env.local - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5305
2026-10-21 00:38:01 GET /.env.production - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5315
2026-10-21 00:38:02 GET /.env.staging - - 34.175.0.185 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5309
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 23:49:15
(2 days ago)
Multiple WAF Violations
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-20 22:19:48
(2 days ago)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 21:25:00
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.0.185 (185.0.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.0.185 (185.0.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 17:24:53.442725 2026] [security2:error] [pid 10879:tid 10879] [client 34.175.0.185:60606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fathereeinc.com"] [uri "/.git/config"] [unique_id "atfcJSAqTIcyZwXsOjQYPAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
macrob
2026-10-20 21:04:42
(2 days ago)
2026/10/20 21:04:38 [error] 2817544#2817544: *19885802 access forbidden by rule, client: 34.175.0.18 ...
show more
2026/10/20 21:04:38 [error] 2817544#2817544: *19885802 access forbidden by rule, client: 34.175.0.185, server: fastcredit.net.ua, request: "GET /.git/config HTTP/2.0", host: "fastcredit.net.ua"
2026/10/20 21:04:40 [error] 2817546#2817546: *19885855 access forbidden by rule, client: 34.175.0.185, server: fastcredit.net.ua, request: "GET /.env HTTP/2.0", host: "fastcredit.net.ua"
2026/10/20 21:04:40 [error] 2817543#2817543: *19885432 access forbidden by rule, client: 34.175.0.185, server: fastcredit.net.ua, request: "GET /.env.local HTTP/2.0", host: "fastcredit.net.ua"
...
show less
Web App Attack
Anonymous
2026-10-20 20:50:03
(2 days ago)
Bot / scanning and/or hacking attempts: GET /.env.docker HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.e ...
show more
Bot / scanning and/or hacking attempts: GET /.env.docker HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.txt HTTP/1.1, GET /.env.json HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env~ HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env2 HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env1 HTTP/1.1, GET /.env_copy HTTP/1.1
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 20:16:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.0.185 (185.0.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.0.185 (185.0.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 16:16:47.289252 2026] [security2:error] [pid 16971:tid 16971] [client 34.175.0.185:38692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fatcavemedia.com"] [uri "/.git/config"] [unique_id "atfML57iRCSFvYczvVtIrgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
ICS Labs
2026-10-20 16:51:08
(2 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-20 UTC.
Brute-Force