🇨🇳
pengpeng
2026-08-09 14:32:03
(2 weeks ago)
monitor: on VM-0-7-ubuntu | port: 13414 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show more
monitor: on VM-0-7-ubuntu | port: 13414 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇨🇳
pengpeng
2026-07-07 22:24:51
(1 month ago)
monitor: on VM-0-7-ubuntu | port: 38166 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show more
monitor: on VM-0-7-ubuntu | port: 38166 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇭🇺
kollanyit
2026-06-28 12:40:23
(2 months ago)
146.70.161.189 - - [28/Jun/2026:12:40:21 +0000] "GET /.env HTTP/1.1" 404 179 "-" "Mozilla/5.0 (Linux ...
show more
146.70.161.189 - - [28/Jun/2026:12:40:21 +0000] "GET /.env HTTP/1.1" 404 179 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" "-"
...
show less
Web App Attack
🇧🇬
pa4080
2026-06-28 00:02:58
(2 months ago)
Detected by ModSecurity. Request URI: /.env
Web App Attack
🇩🇪
Mr-Money
2026-06-27 15:58:36
(2 months ago)
146.70.161.189 - - [27/Jun/2026:17:58:35 +0200] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Linux ...
show more
146.70.161.189 - - [27/Jun/2026:17:58:35 +0200] "GET /.env HTTP/1.1" 404 437 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
Ba-Yu
2026-06-27 15:46:05
(2 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-06-27 15:00:21
(2 months ago)
146.70.161.189 - - [27/Jun/2026:16:00:19 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux ...
show more
146.70.161.189 - - [27/Jun/2026:16:00:19 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
2026/06/27 16:00:20 [error] 1094874#1094874: *1564457 access forbidden by rule, client: 146.70.161.189, server: [redacted], request: "GET /.env HTTP/1.1", host: "[redacted]"
146.70.161.189 - - [27/Jun/2026:16:00:20 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
show less
Brute-Force
Web App Attack
🇪🇸
Gem
2026-06-26 22:14:47
(2 months ago)
Unauthorized web scan.
Web App Attack
🇩🇪
big-cloud.nl
2026-06-26 14:38:03
(2 months ago)
Try to access /.env
Web App Attack
🇲🇾
Rizzy
2026-06-26 11:43:44
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
2026-06-26 08:04:05
(2 months ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
🇩🇪
PBC
2026-06-25 18:25:14
(2 months ago)
Automated exploit scan blocked by fail2ban
Brute-Force
SSH
🇫🇷
breubit
2026-06-25 17:24:04
(2 months ago)
146.70.161.189 - - [25/Jun/2026:19:24:03 +0200] "GET /.env HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Linux ...
show more
146.70.161.189 - - [25/Jun/2026:19:24:03 +0200] "GET /.env HTTP/1.1" 404 492 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
...
show less
Web App Attack
🇩🇪
mygcode.de
2026-06-25 16:17:06
(2 months ago)
Scanning for Exploits
Bad Web Bot
🇬🇧
OptimusGO
2026-06-25 12:28:13
(2 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-06-25 13:28:13 UTC
Log evidence:
146.70.161.189 - - [25/Jun/2026:13:28:11 +0100] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
146.70.161.189 - - [25/Jun/2026:13:28:11 +0100] "POST / HTTP/1.1" 405 150 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
06/25/2026-13:28:11.643783 [wDrop] [**] [1:1000110:2] SECURITY CRITICAL: .env File Access Attempt - INSTANT BAN [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 146.70.161.189:39882 -> 185.127.18.66:80
show less
Port Scan
Brute-Force