🇩🇪
tentwentyfour
2026-10-17 14:45:53
(38 minutes ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
2026-10-17 13:52:44
(1 hour ago)
178.33.206.144 - - [17/Oct/2026:13:52:43 +0000] "GET /.env HTTP/1.1" 404 6796 "-" "Mozilla/5.0 (Maci ...
show more
178.33.206.144 - - [17/Oct/2026:13:52:43 +0000] "GET /.env HTTP/1.1" 404 6796 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, Gecko) Version/17.1 Safari/605.1.15"
...
show less
Brute-Force
Web App Attack
🇩🇪
loveprod
2026-10-17 12:32:22
(2 hours ago)
178.33.206.144 - - [17/Oct/2026:15:32:21 +0300] "GET /.env HTTP/1.1" 301 559 "-" "Mozilla/5.0 (X11; ...
show more
178.33.206.144 - - [17/Oct/2026:15:32:21 +0300] "GET /.env HTTP/1.1" 301 559 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, Gecko) Chrome/119.0.0.0 Safari/537.36"
178.33.206.144 - - [17/Oct/2026:15:32:21 +0300] "GET /.env HTTP/2.0" 403 378 "http://144.76.83.24/.env" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇫🇷
solution.it
2026-10-17 10:45:31
(4 hours ago)
[Sat Oct 17 12:45:30.721252 2026] [php7:error] [pid 3576583:tid 3576583] [client 178.33.206.144:4404 ...
show more
[Sat Oct 17 12:45:30.721252 2026] [php7:error] [pid 3576583:tid 3576583] [client 178.33.206.144:44042] script '/var/www/html/env.php' not found or unable to stat
show less
Web App Attack
🇫🇷
Kejult
2026-10-17 07:44:13
(7 hours ago)
Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 21 request eve ...
show more
Honeypot Finding: repeated HTTP/web-application probing captured by Tanner on TCP/80; 21 request event(s), 21 distinct path(s), 18 request(s) to suspicious path(s). Examples: /.env, /.env.backup, /.env.dev, /.env.development, /.env.example.
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
SCHAPPY
2026-10-17 03:54:59
(11 hours ago)
Malicious activity from IP detected: crowdsecurity/http-sensitive-files.
Web App Attack
Hacking
🇩🇪
marcel-knorr.de
2026-10-17 03:28:59
(11 hours ago)
[MK-Root1] Blocked by UFW
Brute-Force
Port Scan
2026-10-17 03:06:19
(12 hours ago)
(caddyscan) Scanner path probe from 178.33.206.144 (FR/France/vps-8739a0c6.vps.ovh.net): 5 in the la ...
show more
(caddyscan) Scanner path probe from 178.33.206.144 (FR/France/vps-8739a0c6.vps.ovh.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 207.148.6.135 200 2627 178.33.206.144 - - [17/Oct/2026:03:06:14 +0000] "GET /.env HTTP/1.1"
207.148.6.135 200 2627 178.33.206.144 - - [17/Oct/2026:03:06:14 +0000] "GET /.env.local HTTP/1.1"
207.148.6.135 200 2627 178.33.206.144 - - [17/Oct/2026:03:06:15 +0000] "GET /.env.prod HTTP/1.1"
207.148.6.135 200 2627 178.33.206.144 - - [17/Oct/2026:03:06:15 +0000] "GET /.env.production HTTP/1.1"
207.148.6.135 200 2627 178.33.206.144 - - [17/Oct/2026:03:06:15 +0000] "GET /.env.dev HTTP/1.1"
show less
Port Scan
🇩🇪
IVski.com
2026-10-17 00:32:13
(14 hours ago)
IVski WAF | Sensitive file probe detected - looking for .env
Hacking
Brute-Force
Web App Attack
🇫🇷
security.rdmc.fr
2026-10-16 23:24:31
(15 hours ago)
Web scan: requests for sensitive files
Web App Attack
Bad Web Bot
🇫🇮
NoaQT
2026-10-16 22:43:39
(16 hours ago)
2026-10-16T22:43:38.353059+00:00 ingress-1 haproxy[275]: 178.33.206.144:45774 [16/Oct/2026:22:43:38. ...
show more
2026-10-16T22:43:38.353059+00:00 ingress-1 haproxy[275]: 178.33.206.144:45774 [16/Oct/2026:22:43:38.352] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 62/62/0/0/0 0/0 "GET /.env.old HTTP/1.1"
2026-10-16T22:43:38.425030+00:00 ingress-1 haproxy[275]: 178.33.206.144:45778 [16/Oct/2026:22:43:38.424] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 63/63/0/0/0 0/0 "GET /.env.orig HTTP/1.1"
2026-10-16T22:43:38.496568+00:00 ingress-1 haproxy[275]: 178.33.206.144:45784 [16/Oct/2026:22:43:38.496] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 64/64/0/0/0 0/0 "GET /.env.example HTTP/1.1"
2026-10-16T22:43:38.568506+00:00 ingress-1 haproxy[275]: 178.33.206.144:45788 [16/Oct/2026:22:43:38.568] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 65/65/0/0/0 0/0 "GET /.env.txt HTTP/1.1"
2026-10-16T22:43:38.639725+00:00 ingress-1 haproxy[275]: 178.33.206.144:45790 [16/Oct/2026:22:43:38.639] https_in https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 66/66/0/0/0 0/0 "GET /env.
...
show less
DDoS Attack
🇫🇮
Kimmo Rieskaniemi
2026-10-16 22:24:38
(16 hours ago)
CrowdSec triggered crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
ManagedStack
2026-10-16 20:00:03
(19 hours ago)
Probing access to unauthorized locations
Hacking
Exploited Host
Web App Attack
🇮🇪
AutosOnShow
2026-10-16 19:39:15
(19 hours ago)
blocked for webapp attack | path requested: /.env.js | seen at 2026-10-16 19:38:28.650 |
Web App Attack
2026-10-16 18:56:57
(20 hours ago)
2026-10-16T20:56:56.847116+02:00 vps kernel: [8547788.732723] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more
2026-10-16T20:56:56.847116+02:00 vps kernel: [8547788.732723] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=178.33.206.144 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=59164 DF PROTO=TCP SPT=59970 DPT=8080 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force