๐ฎ๐ณ
evicky2002
2026-08-18 07:13:36
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=94, sources=1)
Hacking
Brute-Force
SSH
๐จ๐ญ
TheCoon
2026-06-01 22:00:02
(4 months ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-05-28 22:02:20
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-27.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
earnquest
2026-05-28 11:30:24
(4 months ago)
Vulnerability scanning detected on EarnQuest Server | Trigger path: /services/api/.env | Total attem ...
show more
Vulnerability scanning detected on EarnQuest Server | Trigger path: /services/api/.env | Total attempts: 11 | Sample paths: /.env.local, /.env.save, /packages/api/.env, /.env.copy, /services/.env.local | User-Agent: Mozilla/5.0 (compatible; Crusader/1.0) | Blocked by automated scanner detection middleware
show less
Web App Attack
Port Scan
๐น๐ท
Threat.live
2026-05-28 08:55:02
(4 months ago)
Threat.live: Web Scan
Web App Attack
๐ณ๐ฑ
lns.bz
2026-05-28 06:30:46
(4 months ago)
.env scanning [DOPP]
Web App Attack
๐ซ๐ท
COMAITE
2026-05-28 06:11:01
(4 months ago)
Suspicious URL access.
Web App Attack
๐ฐ๐ท
MW
2026-05-28 05:39:26
(4 months ago)
34.85.39.50 - - [28/May/2026:14:39:23 +0900] "GET /.env.local HTTP/1.1" 404 4244 "-" "Mozilla/5.0 (c ...
show more
34.85.39.50 - - [28/May/2026:14:39:23 +0900] "GET /.env.local HTTP/1.1" 404 4244 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:14:39:23 +0900] "GET /.env.save HTTP/1.1" 404 4244 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:14:39:23 +0900] "GET /.env.staging HTTP/1.1" 404 4244 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
show less
Bad Web Bot
Web App Attack
Anonymous
2026-05-28 05:24:24
(4 months ago)
34.85.39.50 - - [28/May/2026:07:24:22 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Cr ...
show more
34.85.39.50 - - [28/May/2026:07:24:22 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:07:24:23 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-05-28 04:36:22
(4 months ago)
34.85.39.50 - - [28/May/2026:06:35:29 +0200] "GET /.env.backup HTTP/1.1" 403 5499 "-" "Mozilla/5.0 ( ...
show more
34.85.39.50 - - [28/May/2026:06:35:29 +0200] "GET /.env.backup HTTP/1.1" 403 5499 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:06:35:29 +0200] "GET /.env.save HTTP/1.1" 403 5499 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:06:35:29 +0200] "GET /app/.env.local HTTP/1.1" 403 5499 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:06:35:29 +0200] "GET /.env~ HTTP/1.1" 403 5499 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:06:35:29 +0200] "GET /api/v1/.env HTTP/1.1" 403 5499 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:06:35:29 +0200] "GET /app/.env.old HTTP/1.1" 403 5499 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:06:35:29 +0200] "GET /env HTTP/1.1" 404 5496 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.85.39.50 - - [28/May/2026:06:35:30 +0200] "GET /.env.txt HTTP/1.1" 403 5499 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
...
show less
DDoS Attack
๐ฉ๐ช
EGP Abuse Dept
2026-05-28 04:21:22
(4 months ago)
Scanning for web/db/file exploits on www.eurosalt.nl
SQL Injection
Bad Web Bot
Web App Attack
๐ฉ๐ช
NewGastroline
2026-05-28 04:19:58
(4 months ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
Anonymous
2026-05-28 03:24:47
(4 months ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
Carltonfsck
2026-05-28 02:07:58
(4 months ago)
34.85.39.50 - - [28/May/2026:02:07:56 +0000] "GET /.env.production HTTP/1.1" 404 49
34.85.39.50 - - ...
show more
34.85.39.50 - - [28/May/2026:02:07:56 +0000] "GET /.env.production HTTP/1.1" 404 49
34.85.39.50 - - [28/May/2026:02:07:56 +0000] "GET /.env.bak HTTP/1.1" 404 49
34.85.39.50 - - [28/May/2026:02:07:56 +0000] "GET /.env.prod HTTP/1.1" 404 49
...
show less
Hacking
Web App Attack
๐ซ๐ท
JPPO
2026-05-27 22:50:14
(4 months ago)
Port 443 : GET /.git or /.git/HEAD, /.git/config ... /.DS_store
Web App Attack