🇳🇱
Alt255
2026-10-27 04:28:02
UTC ·
(1 week ago)
[ti-01ov] Web exploit scanning: 11 suspicious requests detected by fail2ban jail <name>. Example: 34.175.44.74 - - \[22/Oct/2026:03:03:50 +0200\] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, ...
show more
[ti-01ov] Web exploit scanning: 11 suspicious requests detected by fail2ban jail <name>. Example: 34.175.44.74 - - \[22/Oct/2026:03:03:50 +0200\] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.44.74 - - \[22/Oct/2026:03:03:51 +0200\] "GET /.env HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.44.74 - - \[22/Oct/2026:03:03:51 +0200\] "GET /.env.local HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.44.74 - - \[22/Oct/2026:03:03:51 +0200\] "GET /.env.production HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) A
...
show less
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-26 04:23:07
UTC ·
(2 weeks ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
Site.eu
2026-10-26 02:06:14
UTC ·
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
🇬🇧
andypiper
2026-10-26 02:01:43
UTC ·
(2 weeks ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
Philister11
2026-10-26 01:13:32
UTC ·
(2 weeks ago)
CrowdSec: LePresidente/http-generic-403-bf (ES/AS396982)
Web App Attack
Brute-Force
🇫🇷
SpaceHost-Server
2026-10-25 23:20:24
UTC ·
(2 weeks ago)
Brute-Force
Web App Attack
🇩🇪
gadix
2026-10-25 21:43:09
UTC ·
(2 weeks ago)
[25/Oct/2026:22:43:05.128174 +0100] at536RFNho0YjlyfW4ne7QAAAAg 34.175.44.74 47044 127.0.0.1 7081
[25/Oct/2026:22:43:05.168167 +0100] at536R1hrBc7l1SVlxQOZAAAAMo 34.175.44.74 47052 127.0.0.1 7081
[25/
...
Web App Attack
🇪🇸
barbarella
2026-10-25 20:19:22
UTC ·
(2 weeks ago)
Multiple (165) times attack on https port 443: hacking attempt of version control system (GET /.git/config)
21:19:22 Configuration snooping in .env file (GET /.env)
21:19:22 Configuration snooping in .env file (GET /.env.local)
21:19:22 Co ...
show more
Multiple (165) times attack on https port 443: hacking attempt of version control system (GET /.git/config)
21:19:22 Configuration snooping in .env file (GET /.env)
21:19:22 Configuration snooping in .env file (GET /.env.local)
21:19:22 Configuration snooping in .env file (GET /.env.production)
21:19:22 Configuration snooping in .env file (GET /.env.staging)
21:19:22 Configuration snooping in .env file (GET /.env.development)
21:19:22 Configuration snooping in .env file (GET /.env.test)
21:19:22 Configuration snooping in .env file (GET /.env.remote)
21:19:22 Configuration snooping in .env file (GET /.env.bak)
show less
Hacking
Web App Attack
🇦🇹
penguin-solutions.at
2026-10-25 19:58:04
UTC ·
(2 weeks ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-25 13:12:12
UTC ·
(2 weeks ago)
[ti-12al] Web exploit scanning: 19 suspicious requests detected by fail2ban jail <name>. Example: 34.175.44.74 - - \[18/Oct/2026:22:45:04 +0200\] "GET /.git/config HTTP/1.1" 301 701 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/ ...
show more
[ti-12al] Web exploit scanning: 19 suspicious requests detected by fail2ban jail <name>. Example: 34.175.44.74 - - \[18/Oct/2026:22:45:04 +0200\] "GET /.git/config HTTP/1.1" 301 701 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.44.74 - - \[18/Oct/2026:22:45:04 +0200\] "GET /.env HTTP/1.1" 301 687 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.44.74 - - \[18/Oct/2026:22:45:04 +0200\] "GET /.env.local HTTP/1.1" 301 699 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.44.74 - - \[18/Oct/2026:22:45:04 +0200\] "GET /.env.production HTTP/1.
...
show less
Bad Web Bot
Web App Attack
🇧🇷
ICS Labs
2026-10-25 01:40:09
UTC ·
(2 weeks ago)
ICS Labs threat intelligence (ICS Feeds): Hacking, Brute-Force. Last observed 2026-10-25 UTC.
Hacking
Brute-Force
🇳🇱
melroy89
2026-10-25 00:33:57
UTC ·
(2 weeks ago)
34.175.44.74 - - [25/Oct/2026:02:33:55 +0200] "POST / HTTP/1.1" 404 64 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "finance.melroy.org" 0.020
34.175.44.74 - - [25/Oct/2026:02:33:55 +020 ...
show more
34.175.44.74 - - [25/Oct/2026:02:33:55 +0200] "POST / HTTP/1.1" 404 64 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "finance.melroy.org" 0.020
34.175.44.74 - - [25/Oct/2026:02:33:55 +0200] "POST / HTTP/1.1" 404 64 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "finance.melroy.org" 0.098
34.175.44.74 - - [25/Oct/2026:02:33:55 +0200] "POST / HTTP/1.1" 404 64 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "finance.melroy.org" 0.082
34.175.44.74 - - [25/Oct/2026:02:33:55 +0200] "GET /.git/config HTTP/1.1" 404 64 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "finance.melroy.org" 0.018
34.175.44.74 - - [25/Oct/2026:02:33:55 +0200] "POST / HTTP/1.1" 404 64 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0
...
show less
Web App Attack
🇩🇪
macrob
2026-10-24 22:43:09
UTC ·
(2 weeks ago)
2026/10/24 22:43:07 [error] 789246#789246: *6451058 access forbidden by rule, client: 34.175.44.74, server: finami.vn, request: "GET /.git/config HTTP/2.0", host: "finami-vn.com"
2026/10/24 22:43:08 [error] 789246#789246: *6451071 access forbidden by ...
show more
2026/10/24 22:43:07 [error] 789246#789246: *6451058 access forbidden by rule, client: 34.175.44.74, server: finami.vn, request: "GET /.git/config HTTP/2.0", host: "finami-vn.com"
2026/10/24 22:43:08 [error] 789246#789246: *6451071 access forbidden by rule, client: 34.175.44.74, server: finami.vn, request: "GET /.env HTTP/2.0", host: "finami-vn.com"
2026/10/24 22:43:08 [error] 789246#789246: *6451078 access forbidden by rule, client: 34.175.44.74, server: finami.es, request: "GET /.git/config HTTP/2.0", host: "finami.es"
...
show less
Web App Attack
🇺🇸
netlinkpro
2026-10-24 06:16:00
UTC ·
(2 weeks ago)
Web scanning: probed for /.env, /.env.bak, /.env.development, /.env.local and 4 more. 15 requests, all refused (HTTP 4xx), 2026-10-24 06:16–06:16 UTC.
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-10-24 04:03:42
UTC ·
(2 weeks ago)
34.175.44.74 - - [23/Oct/2026:22:03:41 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Web App Attack
