π©πͺ
benou2
2026-07-28 22:00:08
(5 minutes ago)
crowdsecurity/http-crawl-non_statics
Port Scan
Hacking
π¬π§
Marten Mark
2026-07-28 21:11:52
(53 minutes ago)
207.148.28.169 - - [28/Jul/2026:21:11:51 +0000] "GET /.env.backup HTTP/1.1" 301 166 "-" "Mozilla/5.0 ...
show more
207.148.28.169 - - [28/Jul/2026:21:11:51 +0000] "GET /.env.backup HTTP/1.1" 301 166 "-" "Mozilla/5.0 (Linux; Android 14; SM-S928B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
π¨π
ZdenΔk Svancar
2026-07-28 19:47:19
(2 hours ago)
207.148.28.169 - - [28/Jul/2026:19:47:18 +0000] "GET /resources/.env HTTP/1.1" 404 548 "-" "Mozilla/ ...
show more
207.148.28.169 - - [28/Jul/2026:19:47:18 +0000] "GET /resources/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
207.148.28.169 - - [28/Jul/2026:19:47:18 +0000] "GET /api/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Mobile Safari/537.36"
...
show less
Port Scan
Bad Web Bot
Web App Attack
π§πͺ
voormedia
2026-07-28 18:43:26
(3 hours ago)
Accessed trap at '/actuator/env'
Web App Attack
πΊπΈ
superflea2828
2026-07-28 17:43:54
(4 hours ago)
207.148.28.169 - - [28/Jul/2026:17:43:53 +0000] "GET /.env.live HTTP/1.1" 404 496 "-" "Mozilla/5.0 ( ...
show more
207.148.28.169 - - [28/Jul/2026:17:43:53 +0000] "GET /.env.live HTTP/1.1" 404 496 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15"
207.148.28.169 - - [28/Jul/2026:17:43:53 +0000] "GET /src/.env HTTP/1.1" 404 496 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0"
...
show less
Web App Attack
π©πͺ
netclix.gr
2026-07-28 16:47:26
(5 hours ago)
(c5_web_scan) Custom5 Aggressive Web Scan 207.148.28.169 (US/United States/207.148.28.169.vultruserc ...
show more
(c5_web_scan) Custom5 Aggressive Web Scan 207.148.28.169 (US/United States/207.148.28.169.vultrusercontent.com): 3 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 207.148.28.169 - - [28/Jul/2026:19:47:19 +0300] "GET /app/config/mail.php HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Mobile Safari/537.36"
default:80 207.148.28.169 - - [28/Jul/2026:19:47:19 +0300] "GET /wp-config.php.old HTTP/1.1" 403 405 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
default:80 207.148.28.169 - - [28/Jul/2026:19:47:19 +0300] "GET /app/etc/env.php HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
show less
Port Scan
πΊπΈ
antlac1
2026-07-28 15:51:46
(6 hours ago)
crowdsecurity/http-crawl-non_statics
Brute-Force
Web App Attack
Anonymous
2026-07-28 15:12:06
(6 hours ago)
207.148.28.169 - - [28/Jul/2026:15:12:06 +0000] "GET /.env.example HTTP/1.1" 404 2961 "-" "Mozilla/5 ...
show more
207.148.28.169 - - [28/Jul/2026:15:12:06 +0000] "GET /.env.example HTTP/1.1" 404 2961 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Mobile Safari/537.36"
...
show less
Brute-Force
Web App Attack
π©πͺ
Teufel100
2026-07-28 14:44:57
(7 hours ago)
ModSecurity rejected a query
Brute-Force
Hacking
Web App Attack
π©πͺ
Holger
2026-07-28 13:54:13
(8 hours ago)
URL probing: GET /.env
Web App Attack
πΈπ°
Shadow77
2026-07-28 13:52:00
(8 hours ago)
207.148.28.169 - - [28/Jul/2026:13:35:47 +0200] "GET /.env.development.local HTTP/1.1" 403 366 "-" " ...
show more
207.148.28.169 - - [28/Jul/2026:13:35:47 +0200] "GET /.env.development.local HTTP/1.1" 403 366 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0"
207.148.28.169 - - [28/Jul/2026:13:35:47 +0200] "GET /.env.example HTTP/1.1" 403 366 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
207.148.28.169 - - [28/Jul/2026:13:35:47 +0200] "GET /config/database.yml HTTP/1.1" 403 366 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
207.148.28.169 - - [28/Jul/2026:13:35:47 +0200] "GET /laravel/.env HTTP/1.1" 403 366 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
show less
Brute-Force
Web App Attack
Hacking
π«π·
LoneRider
2026-07-28 12:24:07
(9 hours ago)
[28/Jul/2026:14:24:06.302749 +0200] amifZv0LDT8FBYeChT-VGAAAAAA 207.148.28.169 44684 127.0.0.1 7081
...
show more
[28/Jul/2026:14:24:06.302749 +0200] amifZv0LDT8FBYeChT-VGAAAAAA 207.148.28.169 44684 127.0.0.1 7081
[28/Jul/2026:14:24:06.469264 +0200] amifZvZeplb9eW1IRbI50gAAAAU 207.148.28.169 44686 127.0.0.1 7081
[28/Jul/2026:14:24:06.589721 +0200] amifZuuWzXIemPa2mW6cyAAAAAE 207.148.28.169 44702 127.0.0.1 7081
...
show less
Hacking
πΊπΈ
aks4226
2026-07-28 11:20:13
(10 hours ago)
Attacking common web applications. (n01)
Web App Attack
π«π·
HerrWolf
2026-07-28 09:45:01
(12 hours ago)
CrowdSec Detection: crowdsecurity/http-crawl-non_statics
Bad Web Bot
π©πͺ
Skyrider
2026-07-28 08:16:05
(13 hours ago)
crowdsecurity/http-sensitive-files
Web App Attack