๐ซ๐ฎ
oh.mg
2026-09-26 15:31:13
(49 minutes ago)
161.35.96.60 - - [26/Sep/2026:17:31:12 +0200] "GET /.env HTTP/1.1" 403 479 "-" "Mozilla/5.0 (Windows ...
show more
161.35.96.60 - - [26/Sep/2026:17:31:12 +0200] "GET /.env HTTP/1.1" 403 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
161.35.96.60 - - [26/Sep/2026:17:31:12 +0200] "GET /.env.bak HTTP/1.1" 403 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
161.35.96.60 - - [26/Sep/2026:17:31:12 +0200] "GET /.env HTTP/1.1" 403 3088 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
161.35.96.60 - - [26/Sep/2026:17:31:12 +0200] "GET /.env.bak HTTP/1.1" 403 502 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
161.35.96.60 - - [26/Sep/2026:17:31:12 +0200] "GET /.env.backup HTTP/1.1" 403 479 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
PBC
2026-09-26 12:27:16
(3 hours ago)
Automated web exploit scan blocked by fail2ban
Brute-Force
SSH
๐ฉ๐ช
initsol
2026-09-26 12:00:59
(4 hours ago)
[Sat Sep 26 14:00:59.329431 2026] [authz_core:error] [pid 1251793:tid 1251793] [client 161.35.96.60: ...
show more
[Sat Sep 26 14:00:59.329431 2026] [authz_core:error] [pid 1251793:tid 1251793] [client 161.35.96.60:39494] AH01630: client denied by server configuration: /var/www/.env
[Sat Sep 26 14:00:59.422512 2026] [authz_core:error] [pid 1251793:tid 1251793] [client 161.35.96.60:39494] AH01630: client denied by server configuration: /var/www/.env.bak
[Sat Sep 26 14:00:59.515341 2026] [authz_core:error] [pid 1251793:tid 1251793] [client 161.35.96.60:39494] AH01630: client denied by server configuration: /var/www/.env.backup
...
show less
Brute-Force
๐ซ๐ท
ingroscart.it
2026-09-26 09:50:45
(6 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
๐ฌ๐ง
kiwi.network
2026-09-26 08:33:26
(7 hours ago)
Web application fingerprinting: 161.35.96.60 - - [26/Sep/2026:11:33:25 0300] "GET /.env HTTP/1.1" 4 ...
show more
Web application fingerprinting: 161.35.96.60 - - [26/Sep/2026:11:33:25 0300] "GET /.env HTTP/1.1" 403 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "targethostIP" "80"
161.35.96.60 - - [26/Sep/2026:11:33:25 0300] "GET /.env.bak HTTP/1.1" 403 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "targethostIP" "80"
161.35.96.60 - - [26/Sep/2026:11:33:25 0300] "GET /.env.backup HTTP/1.1" 403 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "targethostIP" "80"
161.35.96.60 - - [26/Sep/2026:11:33:25 0300] "GET /app/.env HTTP/1.1" 403 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "targethostIP" "80"
161.35.96.60 - - [26/Sep/2026:11:33:25 0300] "GET /.env.production HTTP/1.1" 403 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "targethostIP" "80"
161.35.96.60 - - [26/Sep/2026:11:33:25 0300] "GET /src/.env HTTP/1.1" 403 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "targethos
show less
Hacking
Web App Attack
Exploited Host
๐ฉ๐ช
MBombeck
2026-09-26 08:03:18
(8 hours ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
๐ซ๐ท
Coco Bongo
2026-09-26 06:45:48
(9 hours ago)
161.35.96.60 [redacted] (14061-DigitalOcean, LLC United States North Bergen) - - [26/Sep/2026:08:45: ...
show more
161.35.96.60 [redacted] (14061-DigitalOcean, LLC United States North Bergen) - - [26/Sep/2026:08:45:34 +0200] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
a.mohamed.go
2026-09-26 05:33:24
(10 hours ago)
161.35.96.60 - - [26/Sep/2026:05:33:24 +0000] "GET /.env HTTP/1.1" 404 125 "-" "Mozilla/5.0 (Windows ...
show more
161.35.96.60 - - [26/Sep/2026:05:33:24 +0000] "GET /.env HTTP/1.1" 404 125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Hacking
Web App Attack
Anonymous
2026-09-26 04:20:58
(11 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
Anonymous
2026-09-26 03:51:12
(12 hours ago)
161.35.96.60 detected and blocked by apache-modsecurity after 1 try
Brute-Force
๐ฉ๐ช
gadix
2026-09-26 03:15:30
(13 hours ago)
[26/Sep/2026:05:15:29.645252 +0200] arc40QkcKc-DkTmb6prU8QAAAEY 161.35.96.60 44792 127.0.0.1 7080
[2 ...
show more
[26/Sep/2026:05:15:29.645252 +0200] arc40QkcKc-DkTmb6prU8QAAAEY 161.35.96.60 44792 127.0.0.1 7080
[26/Sep/2026:05:15:29.741363 +0200] arc40XT8F5QKwFTQg5veXwAAABg 161.35.96.60 44802 127.0.0.1 7080
[26/
...
show less
Web App Attack
๐ซ๐ท
Kejult
2026-09-26 02:12:58
(14 hours ago)
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 48 application-level events across ...
show more
Honeypot Finding: repeated TCP service probing on TCP/80 (HTTP); 48 application-level events across 4 source port(s). Sensor(s): H0neytr4p, Tanner.
show less
Port Scan
๐ฉ๐ช
loveprod
2026-09-26 00:04:24
(16 hours ago)
161.35.96.60 - - [26/Sep/2026:03:04:23 +0300] "GET /.env HTTP/1.1" 301 559 "-" "Mozilla/5.0 (Windows ...
show more
161.35.96.60 - - [26/Sep/2026:03:04:23 +0300] "GET /.env HTTP/1.1" 301 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
161.35.96.60 - - [26/Sep/2026:03:04:23 +0300] "GET /.env HTTP/1.1" 403 4665 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
๐ฉ๐ช
macrob
2026-09-25 22:46:33
(17 hours ago)
2026/09/25 22:46:32 [error] 3074608#3074608: *36684568 access forbidden by rule, client: 161.35.96.6 ...
show more
2026/09/25 22:46:32 [error] 3074608#3074608: *36684568 access forbidden by rule, client: 161.35.96.60, server: fn.binixo.es, request: "GET /.env HTTP/1.1", host: "172.104.245.160"
2026/09/25 22:46:32 [error] 3074608#3074608: *36684568 access forbidden by rule, client: 161.35.96.60, server: fn.binixo.es, request: "GET /.env.bak HTTP/1.1", host: "172.104.245.160"
2026/09/25 22:46:32 [error] 3074608#3074608: *36684568 access forbidden by rule, client: 161.35.96.60, server: fn.binixo.es, request: "GET /.env.backup HTTP/1.1", host: "172.104.245.160"
...
show less
Web App Attack
๐ฆ๐บ
FEWA
2026-09-25 22:18:17
(18 hours ago)
Fail2Ban Ban Triggered
Hacking
Brute-Force