Anonymous
2026-09-06 05:36:19
(1 day ago)
Port scan and brute force attack
Port Scan
Brute-Force
🇬🇧
openstrike.co.uk
2026-09-06 05:13:51
(1 day ago)
3 attacks on env grabbing URLs:
GET /.env HTTP/1.1
Hacking
🇧🇷
dominioz
2026-09-06 02:58:55
(1 day ago)
2026-09-06 02:58:26 GET /.env - - 182.253.194.241 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebK ...
show more
2026-09-06 02:58:26 GET /.env - - 182.253.194.241 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/81.0.4044.129+Safari/537.36 - 301 453
2026-09-06 02:58:27 GET /sendgrid/.env - - 182.253.194.241 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/81.0.4044.129+Safari/537.36 - 301 471
2026-09-06 02:58:28 GET /.env - - 182.253.194.241 HTTP/1.1 Mozlila/5.0+(Linux;+Android+7.0;+SM-G892A+Bulid/NRD90M;+wv)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Version/4.0+Chrome/60.0.3112.107+Moblie+Safari/537.36 - 301 453
2026-09-06 02:58:30 GET /.env - - 182.253.194.241 HTTP/1.1 Mozlila/5.0+(Linux;+Android+7.0;+SM-G892A+Bulid/NRD90M;+wv)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Version/4.0+Chrome/60.0.3112.107+Moblie+Safari/537.36 - 301 476
...
show less
Web App Attack
🇧🇷
dominioz
2026-09-05 21:27:55
(1 day ago)
2026-09-05 16:31:23 GET /err/ 404;https://www.acrpp.com.br:443/.env - 182.253.194.241 HTTP/1.1 Mozli ...
show more
2026-09-05 16:31:23 GET /err/ 404;https://www.acrpp.com.br:443/.env - 182.253.194.241 HTTP/1.1 Mozlila/5.0+(Linux;+Android+7.0;+SM-G892A+Bulid/NRD90M;+wv)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Version/4.0+Chrome/60.0.3112.107+Moblie+Safari/537.36 - 200 1586
2026-09-05 21:27:33 GET /.env - - 182.253.194.241 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/81.0.4044.129+Safari/537.36 - 301 459
2026-09-05 21:27:35 GET /sendgrid/.env - - 182.253.194.241 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/81.0.4044.129+Safari/537.36 - 301 477
2026-09-05 21:27:36 GET /.env - - 182.253.194.241 HTTP/1.1 Mozlila/5.0+(Linux;+Android+7.0;+SM-G892A+Bulid/NRD90M;+wv)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Version/4.0+Chrome/60.0.3112.107+Moblie+Safari/537.36 - 301 459
...
show less
Web App Attack
🇩🇪
todix
2026-09-05 18:03:02
(1 day ago)
WebAttack or semilar from 182.253.194.241
Web App Attack
🇩🇪
pltcldvlpr
2026-09-05 17:02:15
(1 day ago)
CMS/framework probe: 182.253.194.241 - - [05/Sep/2026:19:02:15 +0200] "GET /.env HTTP/1.1" 301 178 " ...
show more
CMS/framework probe: 182.253.194.241 - - [05/Sep/2026:19:02:15 +0200] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" asn=17451 org="BIZNET NETWORKS" country=ID
...
show less
Web App Attack
🇩🇪
Aufpasser_1973
2026-09-05 16:34:41
(1 day ago)
Fail2Ban Caddy: Web App Attack, /.env
Web App Attack
🇧🇷
dominioz
2026-09-05 16:31:54
(1 day ago)
2026-09-05 16:31:16 GET /.env - - 182.253.194.241 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebK ...
show more
2026-09-05 16:31:16 GET /.env - - 182.253.194.241 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/81.0.4044.129+Safari/537.36 - 301 453
2026-09-05 16:31:18 GET /sendgrid/.env - - 182.253.194.241 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/81.0.4044.129+Safari/537.36 - 301 471
2026-09-05 16:31:20 GET /.env - - 182.253.194.241 HTTP/1.1 Mozlila/5.0+(Linux;+Android+7.0;+SM-G892A+Bulid/NRD90M;+wv)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Version/4.0+Chrome/60.0.3112.107+Moblie+Safari/537.36 - 301 453
2026-09-05 16:31:23 GET /.env - - 182.253.194.241 HTTP/1.1 Mozlila/5.0+(Linux;+Android+7.0;+SM-G892A+Bulid/NRD90M;+wv)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Version/4.0+Chrome/60.0.3112.107+Moblie+Safari/537.36 - 301 556
...
show less
Web App Attack
Anonymous
2026-09-05 16:10:39
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇧🇷
borbolla
2026-09-05 16:09:42
(1 day ago)
Automated web credential/secret scanner blocked by Fail2Ban. Probed: "GET /.env HTTP/1.1"
Web App Attack
Bad Web Bot
🇧🇷
Halux
2026-09-05 16:02:15
(1 day ago)
182.253.194.241 Probing protected path or service
Web App Attack
🇺🇸
agaesteves
2026-09-05 15:34:09
(1 day ago)
[SISHIPISMO 360] TipoAtaque.PATH_PROBE | Acesso a path suspeito: /.env | Paths: /.env | UA: Mozlila/ ...
show more
[SISHIPISMO 360] TipoAtaque.PATH_PROBE | Acesso a path suspeito: /.env | Paths: /.env | UA: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) V
show less
Web App Attack
🇬🇧
openstrike.co.uk
2026-09-05 05:14:05
(2 days ago)
9 attacks on env grabbing URLs:
GET /.env HTTP/1.1
Hacking
🇬🇧
myintarweb
2026-09-05 01:30:35
(2 days ago)
182.253.194.241 - - [05/Sep/2026:02:30:34 +0100] 80 "GET /.env HTTP/1.1" 301 1669 "-" "Mozilla/5.0 ( ...
show more
182.253.194.241 - - [05/Sep/2026:02:30:34 +0100] 80 "GET /.env HTTP/1.1" 301 1669 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-09-04 23:42:42
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking