๐บ๐ธ
HamSammich
2026-10-05 15:48:42
(1 day ago)
Automated sensor: 3 HTTPS connection/probe attempts over the last 24h (latest 2026-10-05T15:48Z).
Brute-Force
Web App Attack
๐จ๐ฆ
Roper123
2026-10-05 15:02:46
(1 day ago)
Web exploits
Hacking
Web App Attack
๐ฉ๐ช
gadix
2026-10-05 11:42:31
(1 day ago)
[05/Oct/2026:13:42:30.102433 +0200] asONJm8iLplXtnJWypHlIAAAABc 104.234.32.200 42868 127.0.0.1 7080
...
show more
[05/Oct/2026:13:42:30.102433 +0200] asONJm8iLplXtnJWypHlIAAAABc 104.234.32.200 42868 127.0.0.1 7080
[05/Oct/2026:13:42:30.307411 +0200] asONJj-mpHSvi_370BHWXAAAAE8 104.234.32.200 42884 127.0.0.1 7080
...
show less
Web App Attack
๐ฉ๐ช
XICTRON
2026-10-05 09:40:18
(1 day ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-05 09:02:45
(1 day ago)
Try to access /.env.old
Web App Attack
Anonymous
2026-10-04 13:19:56
(2 days ago)
104.234.32.200 - - [04/Oct/2026:10:19:55 -0300] "GET /admin-app/.env%20 HTTP/1.1" 403 548 "-" "Mozil ...
show more
104.234.32.200 - - [04/Oct/2026:10:19:55 -0300] "GET /admin-app/.env%20 HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
104.234.32.200 - - [04/Oct/2026:10:19:55 -0300] "GET /api/.env HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15"
104.234.32.200 - - [04/Oct/2026:10:19:55 -0300] "GET /app/.env%20 HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36"
104.234.32.200 - - [04/Oct/2026:10:19:55 -0300] "GET /development/.env%20 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0"
104.234.32.200 - - [04/Oct/2026:10:19:56 -0300] "GET /apps/.env%20 HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.0 Safari/605.1.15"
...
show less
Port Scan
๐บ๐ธ
Starburst SysOp Team
2026-10-04 02:08:11
(3 days ago)
. Matched phrase "/.env" at REQUEST_URI. (210492-srv1)
Web App Attack
๐บ๐ธ
PhilGoode
2026-10-04 00:00:00
(3 days ago)
Probing of sensitive web paths and exposed admin/config endpoints. Captured by a web honeypot.
Web App Attack
๐บ๐ธ
Starburst SysOp Team
2026-10-03 19:19:52
(3 days ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-17)
Hacking
Bad Web Bot
๐ซ๐ท
GoodOldTOS
2026-10-03 13:37:03
(3 days ago)
Bad keywords detected in request: /.env
Web App Attack
Anonymous
2026-10-03 11:58:44
(3 days ago)
[Sat Oct 03 13:58:43.390985 2026] [access_compat:error] [pid 986490:tid 986490] [client 104.234.32.2 ...
show more
[Sat Oct 03 13:58:43.390985 2026] [access_compat:error] [pid 986490:tid 986490] [client 104.234.32.200:30085] AH01797: client denied by server configuration: /var/www/html/back
[Sat Oct 03 13:58:44.493526 2026] [access_compat:error] [pid 986490:tid 986490] [client 104.234.32.200:30085] AH01797: client denied by server configuration: /var/www/html/core/.env
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
900cm
2026-10-03 07:23:26
(4 days ago)
[Sat Oct 03 09:23:18.650610 2026] [access_compat:error] [pid 1069800:tid 1069800] [client 104.234.32 ...
show more
[Sat Oct 03 09:23:18.650610 2026] [access_compat:error] [pid 1069800:tid 1069800] [client 104.234.32.200:62201] AH01797: client denied by server configuration: /var/www/darkintruder/.env.project
[Sat Oct 03 09:23:18.885434 2026] [access_compat:error] [pid 1069800:tid 1069800] [client 104.234.32.200:62201] AH01797: client denied by server configuration: /var/www/darkintruder/.env.dist
[Sat Oct 03 09:23:25.831603 2026] [access_compat:error] [pid 1069800:tid 1069800] [client 104.234.32.200:62201] AH01797: client denied by server configuration: /var/www/darkintruder/.vscode
...
show less
Port Scan
Brute-Force
SSH
๐บ๐ธ
Rip
2026-10-02 15:08:33
(4 days ago)
Restricted File Access Attempts
Port Scan
Web App Attack
๐ธ๐ช
eagle
2026-10-02 11:52:33
(4 days ago)
104.234.32.200 - - [02/Oct/2026:11:52:32 +0000] "GET /app/config/parameters.yml HTTP/1.1" 301 162 "- ...
show more
104.234.32.200 - - [02/Oct/2026:11:52:32 +0000] "GET /app/config/parameters.yml HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:106.0) Gecko/20100101 Firefox/106.0"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
gadix
2026-10-02 02:26:02
(5 days ago)
[02/Oct/2026:04:26:00.508540 +0200] ar8WOB4vd034SmqEbxRNIgAAAA0 104.234.32.200 60014 127.0.0.1 7081
...
show more
[02/Oct/2026:04:26:00.508540 +0200] ar8WOB4vd034SmqEbxRNIgAAAA0 104.234.32.200 60014 127.0.0.1 7081
[02/Oct/2026:04:26:00.654892 +0200] ar8WOHy6WA0c1ig2toVD-QAAAAQ 104.234.32.200 60024 127.0.0.1 7081
[02/Oct/2026:04:26:00.935482 +0200] ar8WODGTYtKQCm9yUC6YcwAAAAU 104.234.32.200 60026 127.0.0.1 7081
...
show less
Web App Attack