🇺🇸
eacontent
2026-03-11 11:05:00
(3 months ago)
200x eg 188.166.220.158 - - [25/Feb/2026:23:25:45 -0500] "GET /.passwd-s3fs HTTP/1.1" 404 434 "-" "G ...
show more
200x eg 188.166.220.158 - - [25/Feb/2026:23:25:45 -0500] "GET /.passwd-s3fs HTTP/1.1" 404 434 "-" "Go-http-client/1.1"
show less
Hacking
🇪🇪
Selckie
2026-02-26 01:19:17
(3 months ago)
fail2ban: NGINX unusual impact
Web App Attack
🇺🇸
danaimone
2026-02-25 02:30:41
(3 months ago)
nginx-noscript: GET /.aws/credentials HTTP/1.1,GET /.aws/credentials.gpg HTTP/1.1,GET /.env HTTP/1.1 ...
show more
nginx-noscript: GET /.aws/credentials HTTP/1.1,GET /.aws/credentials.gpg HTTP/1.1,GET /.env HTTP/1.1,GET /.env.backup HTTP/1.1,GET /.env.bak HTTP/1.1
show less
Web App Attack
🇺🇸
Player Unknown
2026-02-25 01:32:40
(3 months ago)
188.166.220.158 - - [24/Feb/2026:17:32:28 -0800] "GET /config.js HTTP/1.1" 404 1972 "-" "Go-http-cli ...
show more
188.166.220.158 - - [24/Feb/2026:17:32:28 -0800] "GET /config.js HTTP/1.1" 404 1972 "-" "Go-http-client/1.1"
188.166.220.158 - - [24/Feb/2026:17:32:30 -0800] "GET /env.dev.js HTTP/1.1" 404 1973 "-" "Go-http-client/1.1"
188.166.220.158 - - [24/Feb/2026:17:32:31 -0800] "GET /env.development.js HTTP/1.1" 404 1979 "-" "Go-http-client/1.1"
188.166.220.158 - - [24/Feb/2026:17:32:32 -0800] "GET /env.js HTTP/1.1" 404 1969 "-" "Go-http-client/1.1"
188.166.220.158 - - [24/Feb/2026:17:32:33 -0800] "GET /env.prod.js HTTP/1.1" 404 1973 "-" "Go-http-client/1.1"
188.166.220.158 - - [24/Feb/2026:17:32:34 -0800] "GET /env.production.js HTTP/1.1" 404 1976 "-" "Go-http-client/1.1"
188.166.220.158 - - [24/Feb/2026:17:32:36 -0800] "GET /static/js/main.js HTTP/1.1" 404 1977 "-" "Go-http-client/1.1"
188.166.220.158 - - [24/Feb/2026:17:32:37 -0800] "GET /static/js/bundle.js HTTP/1.1" 404 1979 "-" "Go-http-client/1.1"
188.166.220.158 - - [24/Feb/2026:17:32:38 -0800] "GET /static/js/main.chunk.js HTTP/1.1" 404
...
show less
Brute-Force
SSH
🇺🇸
RogueAutomata
2026-02-23 10:45:19
(3 months ago)
Detected malicious request: GET /.aws/credentials
Detections triggered: Environment/config probe
Au ...
show more
Detected malicious request: GET /.aws/credentials
Detections triggered: Environment/config probe
Automated user-agent
Access via IP addr (v4)
show less
Web App Attack
2026-02-23 08:01:01
(3 months ago)
...
Web App Attack
🇺🇸
myagent.site
2026-02-23 04:54:37
(3 months ago)
Blocking for trying to access an exploit file: /.aws/credentials
Hacking
🇺🇸
CBJ
2026-02-22 12:43:50
(3 months ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇪🇸
bohl-aiG5aef
2026-02-20 20:11:09
(3 months ago)
Suricata Alert [SID:2031502] ET INFO Request to Hidden Environment File - Inbound
Hacking
🇩🇪
wp1web.com
2026-02-20 18:26:17
(3 months ago)
aws-credentials - Attack from 188.166.220.158 (Singapore; [object Object]) - collected by docker htt ...
show more
aws-credentials - Attack from 188.166.220.158 (Singapore; [object Object]) - collected by docker http-honeypot
show less
Brute-Force
Web App Attack
🇩🇪
Mr-Money
2026-02-20 17:48:23
(3 months ago)
scenario: crowdsecurity/http-sensitive-files - events: 5
Web App Attack
Hacking
🇩🇪
SCHAPPY
2026-02-20 15:40:28
(3 months ago)
Mutliple attempts to access forbidden web resources, HTTP code 403.
Web App Attack
🇫🇷
vtchost.com
2026-02-20 06:36:02
(3 months ago)
outdated or bad user agent
...
Bad Web Bot
🇫🇷
Baking333
2026-02-20 06:22:34
(3 months ago)
redacted:443 188.166.220.158 - - [20/Feb/2026:07:22:30 +0100] "GET /.aws/credentials HTTP/1.1" 200 3 ...
show more
redacted:443 188.166.220.158 - - [20/Feb/2026:07:22:30 +0100] "GET /.aws/credentials HTTP/1.1" 200 3897 0/41543 "-" "Go-http-client/1.1" redacted:443 188.166.220.158 - - [20/Feb/2026:07:22:32 +0100] "GET /.aws/[redacted] HTTP/1.1" 200 169 0/36444 "-" "Go-http-client/1.1"
show less
Bad Web Bot
Web App Attack
2026-02-19 22:27:22
(3 months ago)
[Thu Feb 19 16:27:15.391490 2026] [authz_core:error] [pid 1053016:tid 1053060] [client 188.166.220.1 ...
show more
[Thu Feb 19 16:27:15.391490 2026] [authz_core:error] [pid 1053016:tid 1053060] [client 188.166.220.158:37090] AH01630: client denied by server configuration: /var/www/html/.passwd-s3fs
[Thu Feb 19 16:27:17.357986 2026] [authz_core:error] [pid 1053016:tid 1053057] [client 188.166.220.158:37090] AH01630: client denied by server configuration: /var/www/html/s3cmd.ini
[Thu Feb 19 16:27:19.024593 2026] [authz_core:error] [pid 1053016:tid 1053061] [client 188.166.220.158:37090] AH01630: client denied by server configuration: /var/www/html/.env
[Thu Feb 19 16:27:20.538693 2026] [authz_core:error] [pid 1053016:tid 1053059] [client 188.166.220.158:37090] AH01630: client denied by server configuration: /var/www/html/.env.backup
[Thu Feb 19 16:27:22.064440 2026] [authz_core:error] [pid 1053016:tid 1053047] [client 188.166.220.158:37090] AH01630: client denied by server configuration: /var/www/html/.env.bak
...
show less
Brute-Force