🇫🇷
masterguru
2026-05-15 03:11:51
UTC ·
(5 months ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇫🇷
ELYAZ
2026-05-15 02:15:36
UTC ·
(5 months ago)
(y3) Failed access -byebye- from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): (CF_ENABLE)
Hacking
Anonymous
2026-05-15 02:05:08
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:02:05:02 +0000] ...
show more
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:02:05:02 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:02:05:02 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:02:05:02 +0000] "GET /.env.docker HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:02:05:02 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:02:05:02 +0000] "GET /admin/.env HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-15 01:23:29
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:23:25 +0000] ...
show more
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:23:25 +0000] "GET /admin/.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:23:25 +0000] "GET /.env.dev.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:23:25 +0000] "GET /.env.dev HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:23:25 +0000] "GET /app/.env.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:23:25 +0000] "GET /.env HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-15 01:06:19
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:06:14 +0000] ...
show more
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:06:14 +0000] "GET /.env.development.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:06:14 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:06:14 +0000] "GET /api/.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:06:14 +0000] "GET /.env.dev.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:01:06:14 +0000] "GET /.env.dev HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-15 00:39:40
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:39:37 +0000] ...
show more
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:39:37 +0000] "GET /admin/.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:39:37 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:39:37 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:39:37 +0000] "GET /.env.dev HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:39:37 +0000] "GET /.env.development.local HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-15 00:01:48
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:01:42 +0000] ...
show more
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:01:42 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:01:42 +0000] "GET /admin/.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:01:42 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:01:42 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [15/May/2026:00:01:42 +0000] "GET /api/.env HTTP/1.1"
show less
Port Scan
🇩🇪
FeG Deutschland
2026-05-14 23:25:09
UTC ·
(5 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇫🇷
dynamix
2026-05-14 21:33:50
UTC ·
(5 months ago)
Multiple WAF Violations
Web App Attack
🇩🇪
BlueWire Hosting
2026-05-14 20:45:46
UTC ·
(5 months ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
🇬🇧
consul.to
2026-05-14 18:12:36
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇳
evicky2002
2026-05-13 07:18:32
UTC ·
(5 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-05-12 02:41:19
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [12/May/2026:02:41:14 +0000] ...
show more
(caddyscan) Scanner path probe from 34.17.77.196 (IT/Italy/196.77.17.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.17.77.196 - - [12/May/2026:02:41:14 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [12/May/2026:02:41:14 +0000] "GET /.env.dev.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [12/May/2026:02:41:14 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [12/May/2026:02:41:14 +0000] "GET /.env.development.local HTTP/1.1"
[REDACTED] 200 2627 34.17.77.196 - - [12/May/2026:02:41:14 +0000] "GET /.env.dev HTTP/1.1"
show less
Port Scan
🇩🇪
Philister11
2026-05-12 00:52:30
UTC ·
(5 months ago)
CrowdSec: crowdsecurity/http-sensitive-files (IT/AS396982)
Web App Attack
Hacking
🇳🇱
homeshowdomain.nl
2026-05-11 22:03:58
UTC ·
(5 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-10.
Web App Attack
SSH
Hacking