|
🇧🇷
ICS Labs
|
|
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-14 UTC.
|
Brute-Force
Exploited Host
|
|
🇸🇪
nekopavel
|
|
35.198.46.128 - - [13/Oct/2026:20:45:35 +0200]"GET /.git/config HTTP/1.1" 404 178"-" mta-sts.neko.chat "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.001""S\xC3\xA3o P ...
show more
35.198.46.128 - - [13/Oct/2026:20:45:35 +0200]"GET /.git/config HTTP/1.1" 404 178"-" mta-sts.neko.chat "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.001""S\xC3\xA3o Paulo" "BR"
35.198.46.128 - - [13/Oct/2026:20:45:35 +0200]"GET /.env HTTP/1.1" 404 178"-" mta-sts.neko.chat "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.000""S\xC3\xA3o Paulo" "BR"
35.198.46.128 - - [13/Oct/2026:20:45:36 +0200]"GET /.env.local HTTP/1.1" 404 178"-" mta-sts.neko.chat "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.000" "0.000""S\xC3\xA3o Paulo" "BR"
...
show less
|
Hacking
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
| [Dangerous/Brazil] Aggressive IP 35.198.46.128 (~30 hits). Type: DoS Defender- Web server 400 error code
|
Web App Attack
Hacking
SQL Injection
|
|
🇵🇱
srebrakowski.com
|
|
crowdsec/waf-detected-exploits
|
Brute-Force
|
|
🇺🇸
Rocky Mountain Bioengineering Symposium
|
|
35.198.46.128 - - [13/Oct/2026:11:41:47 -0600] "GET /.git/config HTTP/1.1" 301 3870 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
|
Web App Attack
|
|
🇵🇱
maciejka
|
|
35.198.46.128 - - [13/Oct/2026:19:37:05 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
35.198.46.128 - - [13/Oct/2026:19:37:05 +0200 ...
show more
35.198.46.128 - - [13/Oct/2026:19:37:05 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
35.198.46.128 - - [13/Oct/2026:19:37:05 +0200] "GET /mail/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
|
Bad Web Bot
|
|
🇦🇺
Klaverstyn
|
|
Excessive HTTP request rate
|
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
|
🇫🇷
phoenix1jl96
|
|
2026/10/13 19:08:09 [error] 801916#801916: *176330 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 35.198.46.128, server: mta-sts.lhbiogaz.fr, request: "GET /mailer/.env HTTP/1.1", host: "mta-sts.lhbiog ...
show more
2026/10/13 19:08:09 [error] 801916#801916: *176330 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 35.198.46.128, server: mta-sts.lhbiogaz.fr, request: "GET /mailer/.env HTTP/1.1", host: "mta-sts.lhbiogaz.fr"
2026/10/13 19:08:09 [error] 801916#801916: *176330 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 35.198.46.128, server: mta-sts.lhbiogaz.fr, request: "GET /mail/.env HTTP/1.1", host: "mta-sts.lhbiogaz.fr"
...
show less
|
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
|
|
🇩🇪
yitzhaq
|
|
35.198.46.128 - - [13/Oct/2026:19:03:58 +0200] "GET /.git/config HTTP/1.1" 403 524 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.198.46.128 - - [13/Oct/2026:19:04:00 +0200] "GET /.git/c ...
show more
35.198.46.128 - - [13/Oct/2026:19:03:58 +0200] "GET /.git/config HTTP/1.1" 403 524 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.198.46.128 - - [13/Oct/2026:19:04:00 +0200] "GET /.git/config HTTP/1.1" 403 524 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.198.46.128 - - [13/Oct/2026:19:04:02 +0200] "GET /.git/config HTTP/1.1" 403 524 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.198.46.128 - - [13/Oct/2026:19:04:01 +0200] "GET /.env HTTP/1.1" 404 44379 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.198.46.128 - - [13/Oct/2026:19:04:01 +0200] "POST / HTTP/1.1" 200 7040 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.198.46.128 - - [13/Oct/2
show less
|
Web App Attack
Hacking
|
|
🇫🇮
Kimmo Rieskaniemi
|
|
CrowdSec triggered crowdsecurity/http-sensitive-files
|
Web App Attack
Hacking
|