|
🇨🇭
lufi
|
|
2026-09-19T16:20:13+02:00 lufischer04 ids442 2026-09-19 16:20:13 23.27.210.66: blacklisted Pattern: /.env.local
...
|
Web Spam
Brute-Force
Hacking
Web App Attack
|
|
🇬🇧
oja
|
|
Aggressive web scanner
|
Web App Attack
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇫🇷
tecnoacquisti.com
|
|
PrestaShop Security Module: suspicious probe path detected (/.env)
|
Web App Attack
|
|
🇦🇺
A.i.D.A.N.N
|
|
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
|
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇳🇱
tmiland
|
|
(nginx_404) Dot directory Honeypot Trap 23.27.210.66 (US/United States/23-27-210-66.ips.acedatacenter.com): 2 in the last 3600 secs; IP: 23.27.210.66; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.27.210.66 - - [15/Sep/2026:13:30:32 ...
show more
(nginx_404) Dot directory Honeypot Trap 23.27.210.66 (US/United States/23-27-210-66.ips.acedatacenter.com): 2 in the last 3600 secs; IP: 23.27.210.66; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 23.27.210.66 - - [15/Sep/2026:13:30:32 +0200] "GET /.env HTTP/1.1" 404 70885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 23.27.210.66 - - [15/Sep/2026:13:30:34 +0200] "GET /.env.local HTTP/1.1" 404 70885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
|
Brute-Force
|
|
🇦🇺
aranguren.org
|
|
23.27.210.66 - - [12/Sep/2026:22:23:28 +1000] "GET /.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
23.27.210.66 - - [12/Sep/2026:22:23:31 +1000] "GET /.env.local HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows N ...
show more
23.27.210.66 - - [12/Sep/2026:22:23:28 +1000] "GET /.env HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
23.27.210.66 - - [12/Sep/2026:22:23:31 +1000] "GET /.env.local HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
23.27.210.66 - - [12/Sep/2026:22:23:35 +1000] "GET /.env.production HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
23.27.210.66 - - [12/Sep/2026:22:23:37 +1000] "GET /.env.backup HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
23.27.210.66 - - [12/Sep/2026:22:23:39 +1000] "GET /.git/config HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
23.27.210.66 - - [12/Sep/2026:22:23:41 +1000] "GET /.git/HEAD HTTP/1.1" 404 985 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
|
Bad Web Bot
|
|
🇧🇾
lns.bz
|
|
Too many 404 requests [BY]
|
Web App Attack
|
|
Anonymous
|
|
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=US; ASN=40676 AS40676
|
Hacking
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇩🇪
macrob
|
|
2026/09/10 14:00:39 [error] 1278998#1278998: *578786235 access forbidden by rule, client: 23.27.210.66, server: binixo.ro, request: "GET /.env HTTP/2.0", host: "binixo.ro"
2026/09/10 14:00:40 [error] 1278999#1278999: *578690163 access forbidden by ru ...
show more
2026/09/10 14:00:39 [error] 1278998#1278998: *578786235 access forbidden by rule, client: 23.27.210.66, server: binixo.ro, request: "GET /.env HTTP/2.0", host: "binixo.ro"
2026/09/10 14:00:40 [error] 1278999#1278999: *578690163 access forbidden by rule, client: 23.27.210.66, server: binixo.pl, request: "GET /.env HTTP/2.0", host: "binixo.pl"
2026/09/10 14:00:40 [error] 1278999#1278999: *578805433 access forbidden by rule, client: 23.27.210.66, server: binixo.co, request: "GET /.env HTTP/1.1", host: "binixo.co"
...
show less
|
Web App Attack
|
|
🇵🇹
Subnet Shadow Specter
|
|
[CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting for PHP backdoors. [Method]: => GET. [Request]: => /graphql. Access revoked. [User-Agent]: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
[CRITICAL][Security Alert] Targeted exploit scanning against Textbook Vulnerabilities. Bot hunting for PHP backdoors. [Method]: => GET. [Request]: => /graphql. Access revoked. [User-Agent]: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36. [OS]: Unknown. [IP Address]: 23.27.210.66.[RPS] 20+ requests per second (RPS) overshoot. [IoA Datetime]: 2026-09-10 03:52:23 UTC +1.
show less
|
Bad Web Bot
Hacking
Port Scan
Web App Attack
|